CVE Vulnerability Advisory Database

[Affected Scope] Google Chrome and Chromium-based browsers prior to version 138.0.7204.157

[Impact] A remote attacker can bypass the browser sandbox boundaries and potentially execute arbitrary code on the host system via a crafted HTML page

[Mitigation] Immediately update Google Chrome to the latest stable channel version (138.0.7204.157 or higher)

[Affected Scope] All systems running Sudo versions prior to 1.9.17p1

[Impact] A local attacker can exploit the '--chroot' option to force Sudo to load a user-controlled nsswitch.conf file, leading to full root privilege escalation

[Mitigation] Immediately upgrade Sudo to version 1.9.17p1 or later, or restrict the use of the chroot option via sudoers configuration

[Affected Scope] Apple operating systems including iOS 15/16/17/18, iPadOS 15/16/17/18, macOS Ventura/Sonoma/Sequoia, visionOS, and watchOS

[Impact] A logic issue in processing maliciously crafted photos or videos shared via iCloud Links allows unauthorized data access and modification, with active exploitation observed in highly targeted attacks

[Mitigation] Immediately apply the official security updates released by Apple (e.g., iOS 18.3.1, macOS 15.3.1) and exercise caution when opening untrusted iCloud shared links

[Affected Scope] All Windows and Windows Server systems utilizing the SMBv3 protocol within Active Directory domains or workgroups

[Impact] An authenticated attacker with network access can exploit improper access control in SMB to elevate privileges to SYSTEM and execute arbitrary code

[Mitigation] Apply the latest Microsoft Cumulative Updates immediately and restrict SMB (TCP 445) inbound traffic using firewalls

[Affected Scope] Microsoft Windows operating systems including Windows 10, Windows 11, and Windows Server supporting Internet Shortcut (.url) files.

[Impact] An unauthorized remote attacker can execute arbitrary code with the privileges of the logged-in user by tricking them into opening a crafted .url file that references a malicious WebDAV/SMB share.

[Mitigation] Apply the latest Microsoft cumulative security updates immediately, disable the WebClient service, and block outbound SMB and WebDAV traffic at the perimeter firewall.

[Affected Scope] IGEL OS systems prior to version 11

[Impact] Attackers can bypass cryptographic signature verification to mount a crafted root filesystem from an unverified SquashFS image, leading to complete system compromise

[Mitigation] Immediately upgrade IGEL OS to version 11 or later and restrict physical access to boot interfaces

[Affected Scope] Android and embedded devices powered by Qualcomm chipsets utilizing specific GPU micronode firmware

[Impact] Local attackers can execute unauthorized command sequences to bypass security controls, corrupt GPU memory, and achieve local privilege escalation (LPE) to kernel level

[Mitigation] Immediately apply the latest security patches released by Qualcomm and device OEMs, and restrict the installation of untrusted applications

[Affected Scope] Android devices equipped with Qualcomm Adreno GPU drivers and running Google Chrome browser

[Impact] Remote attackers can exploit GPU rendering pipelines to trigger memory corruption, potentially leading to sandbox escape and arbitrary code execution

[Mitigation] Apply the latest security patches released by Qualcomm and device OEMs, and update Google Chrome to the latest version

[Affected Scope] Android and embedded devices utilizing Qualcomm Adreno GPU chipsets and associated drivers

[Impact] Local attackers can execute unauthorized commands within the GPU micronode by sending a specific sequence of commands, leading to memory corruption and local privilege escalation (LPE) to kernel level

[Mitigation] Immediately apply the official security patches released by Qualcomm and device OEMs in or after the June 2025 security bulletin

[Affected Scope] Google Chrome and Chromium-based browsers (including Microsoft Edge) prior to version 137.0.7151.68

[Impact] A remote attacker can trigger heap corruption and potentially execute arbitrary code within the browser renderer process via a crafted HTML page

[Mitigation] Immediately update all affected browsers to the latest stable version (137.0.7151.68 or higher) and enforce automatic update policies

[Affected Scope] Windows and Windows Server operating systems utilizing the WinSock Ancillary Function Driver (afd.sys)

[Impact] An authorized local attacker can execute arbitrary code in kernel mode, elevating privileges to SYSTEM, which is actively exploited in the wild

[Mitigation] Immediately apply the official Microsoft security updates and restrict unauthorized local access to critical systems

[Affected Scope] Microsoft Windows 10, 11, and Windows Server operating systems utilizing the Common Log File System (CLFS) driver

[Impact] An authorized local attacker can exploit this vulnerability to elevate privileges to SYSTEM level and gain full control of the host

[Mitigation] Apply the latest Microsoft cumulative security updates immediately and monitor for anomalous CLFS log file activities

[Affected Scope] All supported versions of Microsoft Windows and Windows Server utilizing the Common Log File System (CLFS) driver.

[Impact] An authorized local attacker can exploit this vulnerability to execute arbitrary code with SYSTEM privileges, leading to complete host compromise.

[Mitigation] Immediately apply the latest cumulative security updates provided by Microsoft and restrict unauthorized local interactive access.

[Affected Scope] Desktop Window Manager (DWM) component in Microsoft Windows 10, Windows 11, and Windows Server operating systems

[Impact] An authorized local attacker can exploit a Use-After-Free vulnerability to execute arbitrary code with SYSTEM privileges, leading to complete host takeover

[Mitigation] Immediately apply the official Microsoft cumulative security updates and monitor unpatched systems for anomalous DWM crashes

[Affected Scope] Windows operating systems and applications utilizing the Microsoft Scripting Engine

[Impact] Unauthorized remote attackers can execute arbitrary code and compromise system integrity via crafted web content or documents

[Mitigation] Immediately apply the official Microsoft security updates and restrict untrusted script execution policies

[Affected Scope] Apple devices running iOS < 18.4.1, iPadOS < 18.4.1, macOS Sequoia < 15.4.1, tvOS < 18.4.1, and visionOS < 2.4.1

[Impact] Attackers with arbitrary read/write capabilities can bypass hardware-level Pointer Authentication (PAC) to execute arbitrary code with kernel privileges

[Mitigation] Immediately apply the official security updates released by Apple (iOS 18.4.1, macOS 15.4.1, etc.)

[Affected Scope] Apple iOS and iPadOS prior to 18.4.1, macOS Sequoia prior to 15.4.1, tvOS prior to 18.4.1, visionOS prior to 2.4.1, and watchOS prior to 11.5

[Impact] Processing a maliciously crafted media file containing an audio stream may lead to arbitrary remote code execution (RCE) on the target system

[Mitigation] Immediately apply the official software updates provided by Apple to patch the vulnerability

[Affected Scope] Windows 10, Windows 11, and Windows Server operating systems utilizing the Common Log File System (CLFS.sys) driver.

[Impact] An authorized local attacker can execute arbitrary code in kernel mode and elevate privileges to NT AUTHORITY\SYSTEM.

[Mitigation] Immediately apply the latest cumulative security updates released by Microsoft (March 2025 Patch Tuesday or later).

[Affected Scope] Google Chrome on Windows prior to version 134.0.6998.177

[Impact] A remote attacker can exploit incorrect handle validation in the Mojo IPC framework via a malicious file to escape the browser sandbox and execute arbitrary code with elevated privileges

[Mitigation] Immediately update Google Chrome to the latest stable channel (134.0.6998.177 or higher) and enforce auto-updates via Group Policy (GPO)

[Affected Scope] Devices running iOS 15/16/17/18, iPadOS, macOS Sequoia, visionOS, watchOS, and Safari browser

[Impact] Processing maliciously crafted web content may allow an attacker to break out of the Web Content sandbox and execute arbitrary code, with active exploitation reported in targeted attacks

[Mitigation] Immediately apply the official security updates released by Apple, including iOS 18.3.2 and macOS 15.3.2