CVE Vulnerability Advisory Database

[Affected Scope] Multiple components within the Android Operating System (OS)

[Impact] Local privilege escalation (LPE) and arbitrary code execution without requiring additional privileges or user interaction, actively exploited in the wild

[Mitigation] Immediately apply the Android June 2026 Security Patch Level or later

[Affected Scope] Linux kernel network stack (skbuff) and systems utilizing IPsec (ESP).

[Impact] Local attackers can exploit the packet coalescing process to overwrite kernel memory (e.g., page cache), potentially leading to privilege escalation.

[Mitigation] Immediately apply the latest kernel security patches provided by your distribution and reboot the system.

[Affected Scope] Trend Micro Apex One (On-Premise) server installations.

[Impact] A local attacker with administrative credentials can modify key tables via directory traversal to inject and deploy malicious code to connected agents.

[Mitigation] Apply the official security patches provided by Trend Micro immediately and restrict administrative access to the server.

[Affected Scope] Windows operating system environments with Microsoft Defender enabled

[Impact] A local authorized attacker can exploit symbolic link resolution to elevate privileges to NT AUTHORITY\SYSTEM, gaining full control over the host

[Mitigation] Immediately apply the official Microsoft security updates and ensure the Defender engine and definitions are updated to the latest versions

[Affected Scope] DAEMON Tools Lite Windows versions 12.5.0.2421 through 12.5.0.2434 distributed between April 8, 2026, and May 5, 2026

[Impact] Attackers compromised the vendor's infrastructure to distribute trojanized binaries signed with a legitimate certificate, bypassing security controls to establish backdoor access

[Mitigation] Immediately uninstall the compromised versions, perform a full system malware scan, and reinstall the clean, patched version from the official vendor

[Affected Scope] Systems running Linux kernel with the algif_aead crypto subsystem module enabled.

[Impact] A local attacker can exploit this vulnerability to cause kernel memory corruption, potentially leading to local privilege escalation (LPE) to root or system instability (Kernel Panic).

[Mitigation] Apply the latest stable kernel updates from your distribution or disable the algif_aead socket module if not required.

[Affected Scope] Windows systems with Microsoft Defender enabled and lacking the latest security updates.

[Impact] An authorized local attacker can exploit insufficient access control granularity to elevate privileges to SYSTEM, potentially disabling security controls.

[Mitigation] Immediately update the Microsoft Defender engine and definition files to the latest version, especially as this vulnerability is actively exploited in the wild.

[Affected Scope] Microsoft Windows operating systems utilizing the Windows Shell component

[Impact] Unauthorized remote attackers can bypass security warnings to perform network-based spoofing, potentially leading to credential harvesting or malware delivery

[Mitigation] Apply the official Microsoft security updates immediately and restrict outbound SMB/WebDAV traffic

[Affected Scope] Adobe Acrobat Reader versions 24.001.30356, 26.001.21367 and earlier

[Impact] Successful exploitation allows arbitrary code execution in the context of the current user when a victim opens a specially crafted malicious PDF file

[Mitigation] Immediately apply the official Adobe security update (APSB26-43) and restrict opening untrusted PDF documents

[Affected Scope] Google Chrome versions prior to 146.0.7680.178

[Impact] A remote attacker who has compromised the renderer process can execute arbitrary code via a crafted HTML page

[Mitigation] Immediately update Google Chrome to the latest stable version (146.0.7680.178 or higher)

[Affected Scope] All endpoint systems running TrueConf Client versions prior to 8.5

[Impact] Attackers manipulating the update delivery path can inject tampered payloads, leading to arbitrary code execution under the updater's privilege context

[Mitigation] Immediately upgrade TrueConf Client to version 8.5 or later to enforce proper update verification

[Affected Scope] Google Chrome and Chromium-based browsers prior to version 146.0.7680.75

[Impact] A remote attacker can execute arbitrary code inside the browser sandbox renderer process by enticing a user to visit a specially crafted HTML page

[Mitigation] Immediately update Google Chrome to the latest stable version (146.0.7680.75 or higher)

[Affected Scope] Google Chrome and Chromium-based browsers prior to version 146.0.7680.75

[Impact] Remote attackers can execute arbitrary code or cause a denial of service (system crash) via a crafted HTML page

[Mitigation] Immediately update Google Chrome to the latest stable version (146.0.7680.75 or higher)

[Affected Scope] Windows Shell component across Microsoft Windows operating systems

[Impact] Unauthorized network attackers can bypass critical security boundaries, potentially leading to arbitrary code execution via user interaction

[Mitigation] Apply the latest Microsoft cumulative security updates immediately and restrict outbound SMB/WebDAV traffic

[Affected Scope] Ivanti Endpoint Manager (EPM) versions prior to 2024 SU5

[Impact] A remote unauthenticated attacker can bypass authentication to leak specific stored credential data, potentially leading to full infrastructure compromise

[Mitigation] Immediately upgrade Ivanti EPM to version 2024 SU5 or later, and restrict external access to the management console

[Affected Scope] FreeRDP client libraries and dependent applications prior to version 3.21.0

[Impact] Remote Code Execution (RCE) or Denial of Service (DoS) on the client side when connecting to a malicious RDP server

[Mitigation] Immediately upgrade FreeRDP to the patched version 3.21.0 or higher

[Affected Scope] X11-based RDP client environments running FreeRDP versions prior to 3.21.0

[Impact] Connecting to a malicious RDP server can trigger client-side memory corruption (UAF), leading to application crashes (DoS) or potential remote code execution (RCE)

[Mitigation] Immediately upgrade FreeRDP to the patched version 3.21.0 or higher

[Affected Scope] All client environments running FreeRDP versions prior to 3.21.0

[Impact] A malicious RDP server can trigger a client-side heap buffer overflow, leading to Denial of Service (DoS) or potential Remote Code Execution (RCE)

[Mitigation] Immediately upgrade FreeRDP to the patched version 3.21.0 or higher

[Affected Scope] Client environments running FreeRDP versions prior to 3.21.0

[Impact] A malicious RDP server can trigger a client-side heap buffer overflow, leading to Denial of Service (DoS) or potential Remote Code Execution (RCE)

[Mitigation] Immediately upgrade FreeRDP to the patched version 3.21.0 or higher

[Affected Scope] RIOT OS versions up to and including 2026.01-devel-317 containing the tapslip6 utility

[Impact] Attackers can trigger a stack buffer overflow via crafted command-line arguments, leading to process crashes and potential arbitrary code execution

[Mitigation] Apply the latest source patches, replace unsafe string functions with snprintf, and restrict execution permissions on the tapslip6 binary