CVE Vulnerability Advisory Database

[Affected Scope] Most supported Windows 10, 11, and Windows Server 2016, 2019, 2022 operating system kernel environments.

[Impact] A local attacker with low privileges can exploit an untrusted pointer dereference (CWE-822) to execute arbitrary code with SYSTEM privileges.

[Mitigation] Immediately apply the latest Windows Cumulative Updates (June 2024 or later) and monitor for Indicators of Compromise (IoCs).

[Affected Scope] Windows 10, Windows 11, and Windows Server operating systems

[Impact] Local attackers can exploit a TOCTOU race condition in the kernel to execute arbitrary code with SYSTEM privileges

[Mitigation] Immediately apply the latest Microsoft Cumulative Updates and restrict local access on unpatched systems

[Affected Scope] Linux kernel versions utilizing the network subsystem, particularly environments running UDP socket-based applications

[Impact] Local attackers can exploit an RCU synchronization race condition to trigger a Use-After-Free (UAF), potentially leading to local privilege escalation (LPE) to root or system-wide Denial of Service (DoS)

[Mitigation] Immediately upgrade the Linux kernel to the latest patched stable release and perform a system reboot

[Affected Scope] PHP versions 8.1.x (before 8.1.29), 8.2.x (before 8.2.20), and 8.3.x (before 8.3.8) running on Windows with Apache and PHP-CGI configuration under specific system code pages

[Impact] Unauthenticated remote attackers can inject arbitrary command-line options into the PHP binary, leading to remote code execution (RCE) and source code disclosure

[Mitigation] Immediately upgrade to patched PHP versions (8.1.29, 8.2.20, 8.3.8 or later) or apply Apache Rewrite rules to block malicious query strings

[Affected Scope] Arm Bifrost GPU Kernel Driver and Valhall GPU Kernel Driver from r34p0 through r40p0.

[Impact] A local non-privileged user can exploit this vulnerability to access already freed memory, potentially leading to arbitrary code execution and kernel privilege escalation.

[Mitigation] Immediately upgrade the Arm Mali GPU kernel driver to version r41p0 or later.

[Affected Scope] Roundcube Webmail versions prior to 1.5.7 and 1.6.x versions prior to 1.6.7

[Impact] Remote attackers can execute arbitrary JavaScript code in the victim's browser session by sending a crafted email containing malicious SVG animate attributes, leading to session hijacking

[Mitigation] Immediately upgrade Roundcube Webmail to the patched versions (1.5.7, 1.6.7, or later)

[Affected Scope] SolarWinds Serv-U FTP Server versions 15.4.2 Hotfix 1 and prior

[Impact] Unauthenticated remote attackers can exploit a directory traversal vulnerability to read sensitive host system and configuration files

[Mitigation] Immediately upgrade to SolarWinds Serv-U version 15.4.2 Hotfix 2 or later

[Affected Scope] Ivanti Endpoint Manager (EPM) 2022 SU5 and prior (Core Server component)

[Impact] Unauthenticated attackers within the same network can exploit an SQL injection vulnerability to execute arbitrary code with SYSTEM privileges

[Mitigation] Immediately apply the official security patch (EPM 2022 SU6 or later) and restrict network access to the Core Server

[Affected Scope] Rejetto HTTP File Server (HFS) up to and including version 2.3m

[Impact] Unauthenticated remote attackers can execute arbitrary commands on the host system by sending a specially crafted HTTP request

[Mitigation] Immediately discontinue the use of HFS 2.x, migrate to the completely redesigned HFS 3, or restrict network access

[Affected Scope] Progress Telerik Report Server 2024 Q1 (10.0.24.305) and earlier versions hosted on IIS

[Impact] Unauthenticated remote attackers can bypass authentication mechanisms to gain administrative access, access restricted functionality, or potentially execute arbitrary code

[Mitigation] Immediately upgrade Telerik Report Server to the latest secure version (2024 Q2 10.1.24.514 or later) and restrict IIS access to trusted IPs

[Affected Scope] Check Point Security Gateways connected to the internet with Remote Access VPN or Mobile Access Software Blades enabled

[Impact] Unauthenticated remote attackers can read sensitive system files (e.g., /etc/shadow, password hashes, configuration files), potentially leading to credential theft and full network compromise

[Mitigation] Immediately apply the official hotfix provided in Check Point Advisory sk182336, audit system logs for IoCs, and rotate all sensitive credentials

[Affected Scope] Google Chrome and Chromium-based browsers prior to version 125.0.6422.112

[Impact] A remote attacker can execute arbitrary code inside the browser sandbox via a crafted HTML page

[Mitigation] Immediately update Google Chrome and Chromium-based browsers to the latest stable version (125.0.6422.112 or higher)

[Affected Scope] Justice AV Solutions (JAVS) Viewer Setup version 8.3.7.250-1.

[Impact] A remote, privileged threat actor can execute unauthorized PowerShell commands and gain full control over the affected system via a signed malicious binary.

[Mitigation] Immediately uninstall the compromised software and reinstall a clean, verified version from the official vendor website.

[Affected Scope] Google Chrome and Chromium-based browsers prior to version 125.0.6422.60

[Impact] A remote attacker can execute arbitrary code within the browser sandbox by enticing a user to visit a specially crafted HTML page

[Mitigation] Immediately update Google Chrome and Chromium-based browsers to the latest stable version (125.0.6422.60 or higher)

[Affected Scope] Windows 10, Windows 11, and Windows Server operating systems utilizing the Desktop Window Manager (DWM) Core Library

[Impact] Local attackers can trigger a heap-based buffer overflow to execute arbitrary code with SYSTEM privileges, leading to full host compromise

[Mitigation] Immediately apply the Microsoft May 2024 Patch Tuesday cumulative security updates and restrict unauthorized local access

[Affected Scope] Windows client and server operating systems utilizing the Windows MSHTML platform

[Impact] Attackers can bypass security warnings and protection mechanisms to execute remote code via malicious files loading OLE objects with user interaction

[Mitigation] Immediately apply the official Microsoft cumulative security updates and restrict execution of untrusted files and email attachments

[Affected Scope] Google Chrome and Chromium-based browsers prior to version 124.0.6367.207

[Impact] A remote attacker can trigger an out-of-bounds memory write via a crafted HTML page, potentially leading to arbitrary code execution or denial of service (DoS)

[Mitigation] Immediately update Google Chrome to the latest stable version (124.0.6367.207 or higher) and enforce automatic update policies across the enterprise

[Affected Scope] Google Chrome and Chromium-based browsers prior to version 124.0.6367.201

[Impact] A remote attacker who has compromised the renderer process can exploit this vulnerability via a crafted HTML page to escape the browser sandbox and execute arbitrary code

[Mitigation] Immediately update Google Chrome to the latest stable version (124.0.6367.201 or higher) and enforce auto-update policies across the enterprise

[Affected Scope] Apple OS versions prior to iOS 17.5, macOS Sonoma 14.5, and Safari 17.5.

[Impact] An attacker with existing read/write capabilities can bypass PAC to gain full system control or execute arbitrary code.

[Mitigation] Immediately update to the latest OS versions (iOS 17.5, macOS 14.5, etc.) provided by Apple.

[Affected Scope] Apache OFBiz versions prior to 18.12.13

[Impact] Unauthenticated remote attackers can bypass security filters via path traversal, access internal APIs, and execute arbitrary system commands (RCE) on the target server.

[Mitigation] Immediately upgrade Apache OFBiz to the official patched version 18.12.13 or later.