CVE Vulnerability Advisory Database

[Affected Scope] Apple devices running iOS and iPadOS versions prior to 15.7.1 or 16.1

[Impact] A local application can exploit this vulnerability to execute arbitrary code with kernel privileges, leading to complete device compromise. Active exploitation has been reported in the wild

[Mitigation] Immediately update affected devices to iOS/iPadOS 15.7.1, iOS 16.1, or later versions

[Affected Scope] Systems running macOS Big Sur prior to 11.7, macOS Monterey prior to 12.6, iOS/iPadOS prior to 15.7, and iOS prior to 16

[Impact] A local attacker can execute arbitrary code with kernel privileges, leading to complete system compromise. Active exploitation in the wild has been reported

[Mitigation] Immediately apply the official security updates provided by Apple (macOS Monterey 12.6, Big Sur 11.7, iOS 15.7/16, iPadOS 15.7 or later)

[Affected Scope] Apple iOS devices prior to 15.6.1, iPadOS devices prior to 15.6.1, and macOS Monterey prior to 12.5.1.

[Impact] A local application can exploit this vulnerability to execute arbitrary code with kernel privileges, leading to complete system compromise. Active exploitation in the wild has been reported.

[Mitigation] Immediately apply the official security updates (iOS/iPadOS 15.6.1, macOS Monterey 12.5.1 or later) provided by Apple.

[Affected Scope] Android and embedded devices powered by Snapdragon Auto, Compute, Connectivity, Consumer IoT, Industrial IoT, Mobile, and Voice & Music chipsets

[Impact] Local attackers can exploit a Use-After-Free condition via IOCTL munmap calls to execute arbitrary code with kernel privileges, leading to full system compromise

[Mitigation] Apply the official security patches released by Qualcomm and device OEMs (May 2022 or later) immediately

[Affected Scope] Apple macOS Monterey prior to 12.3.1, macOS Big Sur prior to 11.6.6, iOS/iPadOS prior to 15.4.1, watchOS prior to 8.6, and tvOS prior to 15.5

[Impact] A local attacker can execute arbitrary code with kernel privileges via a malicious application, leading to complete system compromise. This vulnerability is actively exploited in the wild

[Mitigation] Immediately apply the official security updates provided by Apple (macOS 12.3.1, iOS 15.4.1, etc.) to all affected endpoints

[Affected Scope] All Windows systems utilizing the Common Log File System (CLFS.sys) driver, including Windows 10, 11, and Windows Server editions.

[Impact] A local attacker can execute arbitrary code in kernel mode via a specially crafted application, leading to complete SYSTEM privilege escalation.

[Mitigation] Apply the latest Microsoft cumulative security updates immediately and monitor for unauthorized local process executions and anomalous CLFS log creations.

[Affected Scope] Apple iOS and iPadOS prior to 15.0.2, macOS Monterey prior to 12.0.1, Big Sur prior to 11.6.1, tvOS prior to 15.1, and watchOS prior to 8.1

[Impact] A local application can execute arbitrary code with kernel privileges, leading to complete system compromise; active exploitation in the wild has been reported

[Mitigation] Immediately update all affected Apple devices to the latest patched OS versions (iOS 15.0.2 / macOS 12.0.1 or later)

[Affected Scope] Multiple versions of Windows OS including Windows 7, 8.1, 10, and Windows Server 2008, 2012, 2016, 2019

[Impact] A local attacker can execute arbitrary code in kernel mode and gain full SYSTEM privileges on the target machine

[Mitigation] Apply the official Microsoft security updates immediately and restrict local execution privileges for non-privileged users

[Affected Scope] Apple iOS before 13.3.1, iPadOS before 13.3.1, macOS Catalina before 10.15.3, tvOS before 13.3.1, and watchOS before 6.1.2

[Impact] A local application may exploit this vulnerability to execute arbitrary code with elevated kernel privileges, leading to complete system compromise

[Mitigation] Immediately apply the official software updates provided by Apple to patch the affected systems

[Affected Scope] All Apple Mac systems running macOS Mojave versions prior to 10.14.4

[Impact] A local attacker can execute a malicious application to gain elevated kernel privileges and fully compromise the system

[Mitigation] Immediately apply the official operating system security update to macOS Mojave 10.14.4 or later

[Affected Scope] All Apple iOS and iPadOS devices running versions prior to iOS 12.1.4

[Impact] Local attackers can execute arbitrary code with kernel privileges, leading to complete device compromise; actively exploited in the wild

[Mitigation] Immediately update affected devices to iOS 12.1.4 or later

[Affected Scope] GPCIDrv and GDrv kernel drivers bundled with GIGABYTE APP Center v1.05.21 and earlier, AORUS GRAPHICS ENGINE before 1.57, XTREME GAMING ENGINE before 1.26, and OC GURU II v2.08

[Impact] A local attacker can exploit the exposed IOCTL interfaces to read/write arbitrary physical memory, leading to full kernel-level privilege escalation (SYSTEM)

[Mitigation] Upgrade the affected GIGABYTE software to the latest secure versions, or completely uninstall the utilities and block the vulnerable driver files

[Affected Scope] Broad range of Windows operating systems including Windows 7, 8.1, 10, and Windows Server 2008, 2012, 2016, 2019 utilizing the Win32k component

[Impact] Local attackers can execute arbitrary code in kernel mode, completely compromising the system and escalating privileges from local user to SYSTEM

[Mitigation] Immediately apply the official Microsoft cumulative security updates and restrict local interactive login permissions on unpatched assets

[Affected Scope] Broad range of Microsoft OS versions including Windows 7, 8.1, 10, and Windows Server 2008, 2012, 2016, 2019

[Impact] Local attackers can execute arbitrary code in kernel mode, gaining complete control over the system and bypassing security boundaries

[Mitigation] Immediately apply the official Microsoft Cumulative Updates (LCU) and restrict local user privileges on unpatched systems

[Affected Scope] All Apple iOS devices running versions prior to iOS 9.3.5

[Impact] Attackers can execute arbitrary code with kernel privileges or cause a denial of service (memory corruption) via a crafted application

[Mitigation] Immediately update affected devices to iOS 9.3.5 or the latest available OS version

[Affected Scope] All Apple iOS devices running versions prior to iOS 9.3.5

[Impact] Local attackers or malicious apps can read sensitive kernel memory, allowing them to bypass Kernel Address Space Layout Randomization (KASLR) and facilitate full system compromise

[Mitigation] Immediately update all affected iOS devices to iOS 9.3.5 or later

[Affected Scope] Windows Vista SP2, Windows Server 2008 SP2/R2 SP1, and Windows 7 SP1

[Impact] Local attackers can execute arbitrary code in kernel mode and gain elevated SYSTEM privileges via a crafted application

[Mitigation] Apply the official Microsoft MS16-014 security patch immediately, or isolate legacy systems and enforce strict application whitelisting

[Affected Scope] Microsoft Windows 10 Gold (initial release versions).

[Impact] Local attackers can execute arbitrary code in kernel mode via a crafted application, gaining complete control of the affected system.

[Mitigation] Apply the official Microsoft security update (MS15-135) or upgrade to the latest Windows 10 cumulative update.

[Affected Scope] Linux kernel before version 3.5.5 running on v6k and v7 ARM platforms, including affected Android devices

[Impact] Local attackers can exploit missing address validation in get_user and put_user APIs to read or write arbitrary kernel memory, leading to full root privilege escalation

[Mitigation] Upgrade the Linux kernel to version 3.5.5 or higher, or apply the latest security patches provided by your OS/device vendor