CVE Vulnerability Advisory Database

[Affected Scope] Linux kernel deployments where CONFIG_POSIX_CPU_TIMERS_TASK_WORK is disabled or not supported

[Impact] Local attackers can exploit a race condition to trigger a kernel panic (DoS) or potentially achieve Local Privilege Escalation (LPE) via memory corruption

[Mitigation] Apply the official stable kernel patches or ensure CONFIG_POSIX_CPU_TIMERS_TASK_WORK=y is enabled in the kernel configuration

[Affected Scope] Systems running unpatched versions impacted by CVE-2025-53770

[Impact] Deserialization of untrusted data in on-premises Microsoft SharePoint Server allows an unauthorized attacker to execute code over a network....

[Mitigation] Apply vendor security patches and restrict external network exposure.

[Affected Scope] Windows development and build environments utilizing eslint-config-prettier package versions 8.10.1, 9.1.1, 10.1.6, and 10.1.7

[Impact] Installation of the compromised package triggers automatic execution of install.js, dropping and executing the node-gyp.dll malware to compromise the host system

[Mitigation] Immediately uninstall the compromised versions, force-downgrade or upgrade to a clean version, and scan systems for malicious DLL files

[Affected Scope] CrushFTP 10 before 10.8.5 and CrushFTP 11 before 11.3.4_23, specifically when the DMZ proxy feature is not utilized.

[Impact] Unauthenticated remote attackers can bypass AS2 validation via HTTPS to obtain full administrative access, which has been actively exploited in the wild.

[Mitigation] Immediately upgrade to CrushFTP 10.8.5, 11.3.4_23, or later, or restrict direct HTTPS access and enable the DMZ proxy feature.

[Affected Scope] Laravel Livewire versions v3.0.0 up to and including v3.6.3

[Impact] Unauthenticated remote attackers can exploit the component hydration process to execute arbitrary system commands on the host server

[Mitigation] Immediately upgrade the Livewire package to the patched version v3.6.4 or later

[Affected Scope] Fortinet FortiWeb versions 7.6.0 through 7.6.3, 7.4.0 through 7.4.7, 7.2.0 through 7.2.10, and 7.0.0 through 7.0.10

[Impact] An unauthenticated remote attacker can execute unauthorized SQL commands via crafted HTTP/HTTPS requests, potentially leading to sensitive data exposure, system compromise, and remote code execution (RCE).

[Mitigation] Immediately upgrade to the patched versions (7.6.4, 7.4.8, 7.2.11, 7.0.11 or higher) and restrict access to the management interface.

[Affected Scope] Specific API endpoints of Cisco Identity Services Engine (ISE) and Cisco ISE-PIC

[Impact] An unauthenticated, remote attacker can execute arbitrary code with root privileges on the underlying operating system

[Mitigation] Immediately apply the official security patches provided by Cisco and restrict access to the API ports from untrusted networks

[Affected Scope] Google Chrome and Chromium-based browsers prior to version 138.0.7204.157

[Impact] A remote attacker can bypass the browser sandbox boundaries and potentially execute arbitrary code on the host system via a crafted HTML page

[Mitigation] Immediately update Google Chrome to the latest stable channel version (138.0.7204.157 or higher)

[Affected Scope] All Wing FTP Server installations running versions prior to 7.4.4

[Impact] Attackers can disclose the full local installation path of the application by supplying an excessively long value in the UID cookie, facilitating subsequent targeted attacks

[Mitigation] Immediately upgrade Wing FTP Server to version 7.4.4 or later, and deploy WAF rules to restrict anomalous cookie lengths in the interim

[Affected Scope] User and admin web interfaces of Wing FTP Server before version 7.4.4

[Impact] Unauthenticated attackers (including anonymous FTP accounts) can inject arbitrary Lua code into session files, leading to remote code execution with root or SYSTEM privileges

[Mitigation] Immediately upgrade Wing FTP Server to version 7.4.4 or later, and restrict external access to the web administration interface

[Affected Scope] All Git versions prior to v2.43.7, v2.44.4, v2.45.4, v2.46.4, v2.47.3, v2.48.2, v2.49.1, and v2.50.1

[Impact] A remote attacker can craft a malicious repository with specially designed submodule paths and symlinks, leading to arbitrary post-checkout hook execution and full system compromise upon cloning.

[Mitigation] Immediately upgrade Git clients to the patched versions (e.g., v2.50.1) and avoid recursively cloning untrusted repositories.

[Affected Scope] On-premises deployments of Microsoft SharePoint Server

[Impact] Unauthenticated remote attackers can bypass authentication mechanisms to perform network-based spoofing, potentially accessing sensitive internal data

[Mitigation] Immediately apply the official Microsoft security updates and restrict external network access to SharePoint web ports

[Affected Scope] On-premises Microsoft SharePoint Server 2016, 2019, and Subscription Edition

[Impact] An authorized attacker can inject and execute arbitrary code over the network, leading to complete system compromise

[Mitigation] Immediately apply the official Microsoft security patches and restrict network access to SharePoint management endpoints

[Affected Scope] Systems running unpatched versions impacted by CVE-2025-6554

[Impact] Type confusion in V8 in Google Chrome prior to 138.0.7204.96 allowed a remote attacker to perform arbitrary read/write via a crafted HTML pa...

[Mitigation] Apply vendor security patches and restrict external network exposure.

[Affected Scope] All systems running Sudo versions prior to 1.9.17p1

[Impact] A local attacker can exploit the '--chroot' option to force Sudo to load a user-controlled nsswitch.conf file, leading to full root privilege escalation

[Mitigation] Immediately upgrade Sudo to version 1.9.17p1 or later, or restrict the use of the chroot option via sudoers configuration

[Affected Scope] Specific API endpoints of Cisco Identity Services Engine (ISE) and Cisco ISE-PIC

[Impact] An unauthenticated, remote attacker can execute arbitrary code with root privileges on the underlying operating system by sending a crafted API request

[Mitigation] Immediately apply the official security patches provided by Cisco and restrict access to the management API ports

[Affected Scope] Citrix NetScaler ADC and NetScaler Gateway configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) or AAA virtual server

[Impact] Unauthenticated remote attackers can trigger a memory overflow by sending crafted packets, leading to control flow hijacking, Remote Code Execution (RCE), or Denial of Service (DoS)

[Mitigation] Immediately upgrade to the latest patched firmware versions provided by Citrix, and restrict access to exposed gateway interfaces until patched

[Affected Scope] Quest KACE Systems Management Appliance (SMA) versions 13.0, 13.1, 13.2, 14.0, and 14.1

[Impact] Unauthenticated remote attackers can bypass SSO authentication to impersonate legitimate users and achieve complete administrative takeover

[Mitigation] Immediately upgrade to the patched versions (13.0.385, 13.1.81, 13.2.183, 14.0.341, or 14.1.101 and above)

[Affected Scope] Zimbra Collaboration Suite (ZCS) versions 8.8.15, 9.0, 10.0, and 10.1 utilizing the Classic UI

[Impact] Attackers can execute arbitrary JavaScript within the victim's session by sending a crafted email, potentially leading to session hijacking and unauthorized access to sensitive data without requiring user interaction beyond viewing the email

[Mitigation] Immediately apply the latest security patches provided by Zimbra, or temporarily restrict the use of the Classic UI and deploy WAF rules

[Affected Scope] Users of unpatched RARLAB WinRAR installations

[Impact] Remote attackers can execute arbitrary code in the context of the current user by tricking them into opening a crafted archive file, leading to directory traversal and unauthorized file creation

[Mitigation] Immediately upgrade WinRAR to the latest secure version and avoid extracting archives from untrusted sources