CVE Vulnerability Advisory Database

[Affected Scope] Kingsoft WPS Office on Windows, versions 12.2.0.13110 up to (but excluding) 12.2.0.16412

[Impact] An attacker can achieve arbitrary Windows library (DLL) loading and remote code execution (RCE) by tricking a user into opening a specially crafted spreadsheet document

[Mitigation] Immediately upgrade Kingsoft WPS Office to the patched version (12.2.0.16412 or higher) and restrict opening untrusted documents

[Affected Scope] All supported versions of Windows 10, 11, and Windows Server

[Impact] Attackers can bypass Mark of the Web (MotW) security warnings, leading users to execute malicious files without any security prompts

[Mitigation] Apply the official Microsoft security updates immediately and harden SmartScreen policies

[Affected Scope] Most versions of Windows 10, 11, and Windows Server 2008 through 2022

[Impact] Local attackers can exploit kernel memory corruption to execute arbitrary code with SYSTEM privileges

[Mitigation] Immediately apply the Microsoft August 2024 security updates and monitor for unauthorized local account activities

[Affected Scope] Microsoft Project 2016, LTSC Professional Plus 2021, and Microsoft 365 Apps for Enterprise

[Impact] Successful exploitation allows an attacker to execute arbitrary code with the privileges of the active user by tricking them into opening a specially crafted Project (.mpp) file

[Mitigation] Apply the official Microsoft security updates immediately and enforce strict policies to block untrusted macro and external content execution

[Affected Scope] Windows 10, 11, and Windows Server environments utilizing the legacy JScript9 engine, particularly with Internet Explorer mode enabled

[Impact] Remote Code Execution (RCE) and full system compromise via specially crafted malicious web pages

[Mitigation] Apply the Microsoft August 2024 security updates immediately and disable legacy IE scripting engines where applicable

[Affected Scope] All supported versions of Windows 10, Windows 11, and Windows Server

[Impact] A locally authenticated attacker can exploit this vulnerability to execute arbitrary code with SYSTEM privileges, leading to full host compromise

[Mitigation] Immediately apply the Microsoft official cumulative security updates released in August 2024 or later

[Affected Scope] Windows 10, 11, and Windows Server 2008 through 2022 environments

[Impact] A local attacker with low privileges can exploit a race condition to execute arbitrary code with SYSTEM privileges, leading to complete system compromise

[Mitigation] Immediately apply the Microsoft August 2024 security updates and restrict local access on unpatched systems

[Affected Scope] MSHTML (Internet Explorer) engine embedded in all supported versions of Windows 10, 11, and Windows Server

[Impact] Attackers can bypass security warnings via specially crafted Internet Shortcut (.url) files, leading to arbitrary code execution and complete system compromise

[Mitigation] Apply the latest Microsoft cumulative security updates immediately and restrict the execution of untrusted .url and .lnk files

[Affected Scope] Windows 10, Windows 11, and Windows Server environments running the Hyper-V virtualization platform

[Impact] Local attackers with low-privilege access can exploit an integer overflow (CWE-190) to execute arbitrary code with SYSTEM privileges, leading to complete host compromise

[Mitigation] Immediately apply Microsoft's July 2024 cumulative security updates and restrict local access to virtualization hosts

[Affected Scope] Google Pixel devices and Android-based endpoints running security patch levels prior to 2024-06-01

[Impact] Local attackers can exploit a logic error to bypass security boundaries and achieve local privilege escalation (LPE) without requiring elevated execution privileges

[Mitigation] Immediately apply the official Google June 2024 or later security update to all affected devices

[Affected Scope] Most supported Windows 10, 11, and Windows Server 2016, 2019, 2022 operating system kernel environments.

[Impact] A local attacker with low privileges can exploit an untrusted pointer dereference (CWE-822) to execute arbitrary code with SYSTEM privileges.

[Mitigation] Immediately apply the latest Windows Cumulative Updates (June 2024 or later) and monitor for Indicators of Compromise (IoCs).

[Affected Scope] Windows 10, Windows 11, and Windows Server operating systems

[Impact] Local attackers can exploit a TOCTOU race condition in the kernel to execute arbitrary code with SYSTEM privileges

[Mitigation] Immediately apply the latest Microsoft Cumulative Updates and restrict local access on unpatched systems

[Affected Scope] Linux kernel versions utilizing the network subsystem, particularly environments running UDP socket-based applications

[Impact] Local attackers can exploit an RCU synchronization race condition to trigger a Use-After-Free (UAF), potentially leading to local privilege escalation (LPE) to root or system-wide Denial of Service (DoS)

[Mitigation] Immediately upgrade the Linux kernel to the latest patched stable release and perform a system reboot

[Affected Scope] Arm Bifrost GPU Kernel Driver and Valhall GPU Kernel Driver from r34p0 through r40p0.

[Impact] A local non-privileged user can exploit this vulnerability to access already freed memory, potentially leading to arbitrary code execution and kernel privilege escalation.

[Mitigation] Immediately upgrade the Arm Mali GPU kernel driver to version r41p0 or later.

[Affected Scope] Google Chrome and Chromium-based browsers prior to version 125.0.6422.112

[Impact] A remote attacker can execute arbitrary code inside the browser sandbox via a crafted HTML page

[Mitigation] Immediately update Google Chrome and Chromium-based browsers to the latest stable version (125.0.6422.112 or higher)

[Affected Scope] Justice AV Solutions (JAVS) Viewer Setup version 8.3.7.250-1.

[Impact] A remote, privileged threat actor can execute unauthorized PowerShell commands and gain full control over the affected system via a signed malicious binary.

[Mitigation] Immediately uninstall the compromised software and reinstall a clean, verified version from the official vendor website.

[Affected Scope] Google Chrome and Chromium-based browsers prior to version 125.0.6422.60

[Impact] A remote attacker can execute arbitrary code within the browser sandbox by enticing a user to visit a specially crafted HTML page

[Mitigation] Immediately update Google Chrome and Chromium-based browsers to the latest stable version (125.0.6422.60 or higher)

[Affected Scope] Windows 10, Windows 11, and Windows Server operating systems utilizing the Desktop Window Manager (DWM) Core Library

[Impact] Local attackers can trigger a heap-based buffer overflow to execute arbitrary code with SYSTEM privileges, leading to full host compromise

[Mitigation] Immediately apply the Microsoft May 2024 Patch Tuesday cumulative security updates and restrict unauthorized local access

[Affected Scope] Windows client and server operating systems utilizing the Windows MSHTML platform

[Impact] Attackers can bypass security warnings and protection mechanisms to execute remote code via malicious files loading OLE objects with user interaction

[Mitigation] Immediately apply the official Microsoft cumulative security updates and restrict execution of untrusted files and email attachments

[Affected Scope] Google Chrome and Chromium-based browsers prior to version 124.0.6367.207

[Impact] A remote attacker can trigger an out-of-bounds memory write via a crafted HTML page, potentially leading to arbitrary code execution or denial of service (DoS)

[Mitigation] Immediately update Google Chrome to the latest stable version (124.0.6367.207 or higher) and enforce automatic update policies across the enterprise