CVE Vulnerability Advisory Database

[Affected Scope] Gladinet CentreStack and Triofox solutions prior to version 16.12.10420.56791

[Impact] Unauthenticated remote attackers can exploit hardcoded AES keys to read arbitrary local files and potentially achieve full system compromise

[Mitigation] Immediately upgrade to version 16.12.10420.56791 or later and restrict access to publicly exposed endpoints

[Affected Scope] Google Chrome and Chromium-based browsers (such as Microsoft Edge) on macOS prior to version 143.0.7499.110

[Impact] A remote attacker can trigger out-of-bounds memory access via a crafted HTML page, potentially leading to arbitrary code execution (RCE) or renderer process crashes

[Mitigation] Immediately update all Chromium-based browsers to the latest stable version (143.0.7499.110 or higher) and enforce automated update policies across the enterprise

[Affected Scope] All active deployments of Gogs Git service utilizing the vulnerable PutContents API.

[Impact] An authenticated attacker with low privileges can exploit improper symbolic link validation to overwrite arbitrary system files, leading to Remote Code Execution (RCE).

[Mitigation] Immediately upgrade Gogs to the latest patched version and restrict repository creation and write permissions for untrusted users.

[Affected Scope] Windows operating systems utilizing the Windows Cloud Files Mini Filter Driver (cldflt.sys)

[Impact] Local authorized attackers can corrupt kernel memory to elevate privileges to SYSTEM and execute arbitrary code

[Mitigation] Immediately apply the official Microsoft security updates and monitor mini-filter driver activities

[Affected Scope] FortiOS 7.0.0-7.0.17 / 7.2.0-7.2.11 / 7.4.0-7.4.8 / 7.6.0-7.6.3, FortiProxy 7.0.0-7.0.21 / 7.2.0-7.2.14 / 7.4.0-7.4.10 / 7.6.0-7.6.3, FortiSwitchManager 7.0.0-7.0.5 / 7.2.0-7.2.6.

[Impact] An unauthenticated remote attacker can bypass FortiCloud SSO authentication via a crafted SAML response message, gaining full administrative access to the affected device.

[Mitigation] Immediately upgrade to the patched firmware versions, or disable FortiCloud SSO login and restrict administrative access to trusted IP addresses as a temporary workaround.

[Affected Scope] Android OS devices utilizing the DevicePolicyManagerService component

[Impact] Local attackers can exploit a logic error to register a Device Owner after provisioning, leading to local privilege escalation (EoP) without user interaction

[Mitigation] Apply the official Google Android December 2025 security patch or the latest OEM firmware update immediately

[Affected Scope] Multiple versions of Android OS and framework-based devices

[Impact] Local attackers can bypass background activity launch restrictions to achieve Local Privilege Escalation (LPE) without any user interaction or additional execution privileges

[Mitigation] Immediately apply the latest security patches (December 2025 or later) provided by Google and device OEMs, and restrict unauthorized app installations

[Affected Scope] Langflow versions up to and including 1.6.9

[Impact] Attackers can hijack victim sessions to take over accounts and execute arbitrary code via built-in code execution features, leading to full system compromise

[Mitigation] Upgrade Langflow to the latest patched version, restrict CORS configurations, and update refresh token cookie attributes to Lax/Strict

[Affected Scope] All Array Networks ArrayOS AG appliances running versions prior to 9.4.5.9

[Impact] High-privileged attackers can execute arbitrary OS commands, leading to complete system compromise and webshell deployment

[Mitigation] Immediately upgrade ArrayOS AG to version 9.4.5.9 or higher and audit system logs for indicators of compromise

[Affected Scope] React versions 19.0.0, 19.1.0, 19.1.1, and 19.2.0 utilizing React Server Components (RSC), including react-server-dom-parcel, react-server-dom-turbopack, and react-server-dom-webpack packages

[Impact] Unauthenticated remote attackers can execute arbitrary code on the server by sending malicious payloads to Server Function endpoints, leading to complete system compromise

[Mitigation] Immediately upgrade React and all associated react-server-dom packages to the latest patched versions, and apply WAF rules to restrict suspicious RSC requests

[Affected Scope] Developers running Ray AI compute engine versions prior to 2.52.0 in local or development environments

[Impact] Remote Code Execution (RCE) on the developer's machine via DNS rebinding and browser-based request forgery when visiting malicious websites or viewing malvertisements

[Mitigation] Immediately upgrade the Ray package to version 2.52.0 or higher

[Affected Scope] GeoServer versions from 2.25.0 to before 2.25.6, and from 2.26.0 to before 2.26.3

[Impact] Unauthenticated remote attackers can exploit the GetMap XML request to read arbitrary local files, perform Server-Side Request Forgery (SSRF), or trigger Denial of Service (DoS)

[Mitigation] Immediately upgrade GeoServer to patched versions 2.25.6, 2.26.3, or 2.27.0 and above

[Affected Scope] Fortinet FortiWeb versions 8.0.0 through 8.0.1, 7.6.0 through 7.6.5, 7.4.0 through 7.4.10, 7.2.0 through 7.2.11, and 7.0.0 through 7.0.11

[Impact] An authenticated attacker can execute arbitrary OS commands with elevated privileges on the underlying system via crafted HTTP requests or CLI commands

[Mitigation] Immediately upgrade to the patched versions (8.0.2, 7.6.6, 7.4.11, 7.2.12, 7.0.12 or higher) as recommended by the vendor

[Affected Scope] Google Chrome and Chromium-based browsers prior to version 142.0.7444.175

[Impact] A remote attacker can trigger heap corruption and potentially execute arbitrary code within the browser process via a crafted HTML page

[Mitigation] Immediately update Google Chrome to the latest stable version (142.0.7444.175 or higher) and enforce automatic updates across the organization

[Affected Scope] Fortinet FortiWeb versions 8.0.0 through 8.0.1, 7.6.0 through 7.6.4, 7.4.0 through 7.4.9, 7.2.0 through 7.2.11, and 7.0.0 through 7.0.11

[Impact] Unauthenticated remote attackers can execute arbitrary administrative commands on the system via crafted HTTP or HTTPS requests

[Mitigation] Immediately upgrade to the official patched versions (8.0.2, 7.6.5, 7.4.10, 7.2.12, 7.0.12 or higher)

[Affected Scope] Windows operating system kernel components and environments utilizing shared resources

[Impact] An authorized local attacker can trigger a race condition to cause kernel memory corruption, leading to local privilege escalation (LPE) to SYSTEM level

[Mitigation] Immediately apply the official Microsoft cumulative security updates and restrict local access privileges on unpatched systems

[Affected Scope] All Windows operating systems utilizing the Host Process for Windows Tasks (taskhostw.exe).

[Impact] An authorized local attacker can exploit improper link resolution to elevate privileges to SYSTEM, leading to complete system compromise.

[Mitigation] Apply the official Microsoft security patches immediately, and implement temporary workarounds and monitoring scripts prior to patching.

[Affected Scope] Triofox versions prior to 16.7.10368.56560

[Impact] Unauthenticated remote attackers can access initial setup pages even after installation is complete, potentially leading to full administrative takeover.

[Mitigation] Immediately upgrade Triofox to version 16.7.10368.56560 or later.

[Affected Scope] FreePBX Endpoint Manager and Filestore module versions 17.0.2.36 and above before 17.0.3

[Impact] An authenticated administrator can execute arbitrary OS commands via the SSH connection test function, gaining remote access as the asterisk user

[Mitigation] Immediately upgrade the FreePBX Filestore module to version 17.0.3 or higher

[Affected Scope] macOS Ventura prior to 13.5, iOS/iPadOS prior to 16.6, iOS/iPadOS prior to 15.8.7, and Safari prior to 16.6

[Impact] Processing maliciously crafted web content may lead to memory corruption, potentially allowing remote attackers to execute arbitrary code on the target device

[Mitigation] Immediately apply the official software updates provided by Apple to upgrade operating systems and Safari to the patched versions