CVE Vulnerability Advisory Database

[Affected Scope] Google Chrome and Chromium-based browsers prior to version 124.0.6367.201

[Impact] A remote attacker who has compromised the renderer process can exploit this vulnerability via a crafted HTML page to escape the browser sandbox and execute arbitrary code

[Mitigation] Immediately update Google Chrome to the latest stable version (124.0.6367.201 or higher) and enforce auto-update policies across the enterprise

[Affected Scope] Apple OS versions prior to iOS 17.5, macOS Sonoma 14.5, and Safari 17.5.

[Impact] An attacker with existing read/write capabilities can bypass PAC to gain full system control or execute arbitrary code.

[Mitigation] Immediately update to the latest OS versions (iOS 17.5, macOS 14.5, etc.) provided by Apple.

[Affected Scope] All supported versions of Windows 10, Windows 11, and Windows Server utilizing Microsoft Defender SmartScreen

[Impact] Attackers can bypass Mark-of-the-Web (MotW) warnings and SmartScreen prompts entirely, leading to arbitrary code execution when a user opens a crafted malicious file

[Mitigation] Apply the official Microsoft cumulative security updates immediately, or restrict the execution of unverified downloaded files via Group Policy

[Affected Scope] Google Pixel devices and Android operating system versions prior to April 2024 security patch

[Impact] Local attackers can bypass memory protection mechanisms during bootloader transitions to dump memory, extract cryptographic keys, and escalate privileges

[Mitigation] Apply the Google April 2024 Pixel Security Update immediately to patch the bootloader logic

[Affected Scope] Google Pixel devices and Android operating system

[Impact] Local attackers can disclose sensitive system memory information without requiring additional execution privileges or user interaction

[Mitigation] Immediately apply the April 2024 Google Pixel security update and upgrade to the latest firmware version

[Affected Scope] Systems running affected versions of Microsoft .NET Framework and .NET Core, particularly within IIS or web application server environments.

[Impact] Unauthenticated remote attackers can trigger specific exceptions to obtain sensitive debugging information, including internal system paths and memory states.

[Mitigation] Apply the official Microsoft cumulative security updates immediately and disable detailed error messages in the web.config configuration.

[Affected Scope] Broad range of Windows operating systems including Windows 10, 11, and Windows Server 2008 through 2022

[Impact] Local authenticated attackers can execute arbitrary code with SYSTEM privileges, leading to complete system compromise

[Mitigation] Immediately apply Microsoft official security patches and monitor for anomalous child processes spawned by the WER service

[Affected Scope] iOS and iPadOS prior to 16.7.8 / 17.4, macOS Monterey prior to 12.7.6, macOS Ventura prior to 13.6.7, macOS Sonoma prior to 14.4, and other Apple OS platforms

[Impact] A local attacker with arbitrary kernel read and write capabilities can bypass critical kernel memory protections, leading to complete system compromise and arbitrary code execution

[Mitigation] Immediately apply the official security updates provided by Apple (iOS 17.4, macOS Sonoma 14.4, etc.) to all affected devices

[Affected Scope] Apple devices running iOS/iPadOS prior to 16.7.6 or 17.4, macOS Monterey prior to 12.7.4, Ventura prior to 13.6.5, Sonoma prior to 14.4, watchOS prior to 10.4, tvOS prior to 17.4, and visionOS prior to 1.1

[Impact] A local attacker with arbitrary kernel read and write capabilities can bypass kernel memory protections, leading to complete system compromise. Active exploitation in the wild has been reported

[Mitigation] Immediately update all affected Apple devices to the latest patched versions (e.g., iOS 17.4, macOS Sonoma 14.4)

[Affected Scope] Systems running unpatched versions impacted by CVE-2024-20953

[Impact] Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Export). The supported version that is affected is 9.3.6....

[Mitigation] Apply vendor security patches and restrict external network exposure.

[Affected Scope] All supported versions of Windows 10, 11, and Windows Server

[Impact] Attackers can bypass Windows Defender SmartScreen warnings using crafted Internet Shortcut (.url) files to execute arbitrary code

[Mitigation] Apply the official Microsoft security updates immediately and restrict outbound SMB/WebDAV traffic

[Affected Scope] Microsoft Exchange Server 2016 and 2019 environments where Cumulative Updates and Extended Protection are not enabled.

[Impact] Unauthenticated remote attackers can perform NTLM credential relay attacks to elevate privileges, gaining administrative access to Exchange servers and compromising mailboxes.

[Mitigation] Upgrade Exchange Server to the latest Cumulative Update (CU) and enforce the Extended Protection feature immediately.

[Affected Scope] Microsoft Windows 10, 11, and Windows Server 2016, 2019, 2022 with SmartScreen enabled

[Impact] Attackers can bypass SmartScreen warnings and Mark-of-the-Web (MotW) protections to execute arbitrary code on the victim's system without user consent

[Mitigation] Apply the latest Microsoft Cumulative Updates (LCU) immediately and enforce strict Group Policies (GPO) to restrict untrusted file execution

[Affected Scope] Multiple versions of Windows operating systems, including Windows 10, Windows 11, and Windows Server 2016/2019/2022.

[Impact] Local attackers can escalate privileges to SYSTEM level, bypass security agents, and execute arbitrary code in kernel space.

[Mitigation] Apply the official Microsoft cumulative security updates immediately and audit systems for indicators of compromise (IoCs).

[Affected Scope] Linux kernel versions from v5.14 up to v6.6.14 with the nf_tables module enabled

[Impact] Local unprivileged users can trigger kernel memory corruption, leading to arbitrary code execution and full root privilege escalation

[Mitigation] Apply the official kernel patch or restrict unprivileged user namespace creation as an immediate workaround

[Affected Scope] Google Chrome and Chromium-based browsers prior to version 120.0.6099.224

[Impact] A remote attacker can trigger heap corruption via a crafted HTML page, potentially leading to arbitrary code execution (RCE) or sensitive information disclosure within the browser renderer process

[Mitigation] Immediately update Google Chrome and Chromium-based browsers to the latest stable version (120.0.6099.224 or higher)

[Affected Scope] Apple operating systems prior to iOS 16.2, iPadOS 16.2, macOS Ventura 13.1, watchOS 9.2, and tvOS 16.2

[Impact] A local attacker with arbitrary read and write capabilities can bypass Pointer Authentication (PAC) to achieve full kernel-level code execution

[Mitigation] Immediately update affected devices to iOS 16.2, iPadOS 16.2, macOS Ventura 13.1, or later versions

[Affected Scope] Linux systems utilizing the Netfilter (nftables) subsystem within the Linux kernel

[Impact] Local attackers can trigger kernel memory corruption, leading to arbitrary code execution with root privileges and complete system compromise

[Mitigation] Apply the latest kernel security patches from your distribution vendor, or restrict unprivileged user namespace creation as an immediate workaround

[Affected Scope] Google Chrome and Chromium-based browsers prior to version 120.0.6099.129

[Impact] A remote attacker can exploit heap corruption via a crafted HTML page, potentially leading to arbitrary code execution (RCE)

[Mitigation] Immediately update Google Chrome to the latest stable version (120.0.6099.129 or higher)

[Affected Scope] Devices powered by Qualcomm Snapdragon chipsets running Linux or Android kernel-based graphics drivers

[Impact] Local attackers can trigger kernel memory corruption via malicious IOCTL calls, leading to Local Privilege Escalation (LPE) to Root/Kernel level

[Mitigation] Apply the official security patches released by Qualcomm and device OEMs in or after December 2023