CVE Vulnerability Advisory Database

[Affected Scope] iPhone and iPad devices running iOS 16.6 and prior

[Impact] A local attacker can bypass sandbox restrictions to elevate privileges to kernel level, leading to complete device compromise

[Mitigation] Immediately update affected devices to iOS 16.7.1 / iPadOS 16.7.1 or later

[Affected Scope] On-premise deployments of Atlassian Confluence Data Center and Confluence Server (Atlassian Cloud instances are not affected)

[Impact] Unauthenticated remote attackers can bypass access controls to access setup endpoints, create unauthorized administrator accounts, and achieve full system compromise

[Mitigation] Immediately upgrade to the patched official versions, or restrict external access to the vulnerable /setup/* endpoints if patching cannot be applied immediately

[Affected Scope] Major Linux distributions (RHEL, Ubuntu, Debian, Fedora, etc.) running glibc version 2.34 and newer that support the GLIBC_TUNABLES environment variable.

[Impact] Local attackers can exploit a heap-based buffer overflow by crafting malicious GLIBC_TUNABLES environment variables when executing SUID binaries, leading to full root privilege escalation.

[Mitigation] Immediately update the glibc package to the latest patched version using the OS package manager and reboot the system.

[Affected Scope] Android and embedded devices utilizing ARM Mali GPU Midgard, Bifrost, Valhall, and 5th Gen architecture drivers

[Impact] A local non-privileged user can exploit improper GPU memory processing operations to access freed memory (Use-After-Free), potentially leading to local privilege escalation and sensitive kernel data exposure

[Mitigation] Apply the latest security patches and kernel driver updates provided by chipset vendors and device OEMs immediately

[Affected Scope] Google Chrome versions prior to 117.0.5938.132 and libvpx versions prior to 1.13.1.

[Impact] A remote attacker can trigger heap corruption via a crafted HTML page, potentially leading to arbitrary remote code execution (RCE).

[Mitigation] Immediately update Google Chrome to the latest version and upgrade the libvpx library dependency to v1.13.1 or higher in all environments.

[Affected Scope] Cisco IOS and Cisco IOS XE Software with the Group Encrypted Transport VPN (GET VPN) feature enabled

[Impact] An authenticated, remote attacker with administrative control over a key server or group member can execute arbitrary code or cause a device reload (DoS)

[Mitigation] Apply the official Cisco software updates and restrict GDOI/G-IKEv2 protocol access to authorized infrastructure nodes only

[Affected Scope] Progress WS_FTP Server versions prior to 8.7.4 and 8.8.2 with Ad Hoc Transfer module enabled

[Impact] A pre-authenticated remote attacker can execute arbitrary OS commands with IIS worker process privileges by sending a crafted .NET serialized payload

[Mitigation] Immediately upgrade to patched versions (8.7.4, 8.8.2, or higher) or disable/remove the Ad Hoc Transfer module

[Affected Scope] Juniper Networks Junos OS on SRX Series devices with the J-Web interface enabled in specific vulnerable versions

[Impact] Unauthenticated network-based attackers can send crafted requests to webauth_operation.php to upload or download arbitrary files, compromising file system integrity and potentially chaining to remote code execution (RCE)

[Mitigation] Immediately upgrade Junos OS to the recommended patched release, or disable the J-Web interface / restrict access to trusted IP addresses

[Affected Scope] Roundcube Webmail versions before 1.4.14, 1.5.x before 1.5.4, and 1.6.x before 1.6.3

[Impact] Remote attackers can execute arbitrary JavaScript code in the victim's browser session by sending a crafted text/plain email, potentially leading to session hijacking and account takeover

[Mitigation] Immediately upgrade Roundcube Webmail to the patched versions (1.4.14, 1.5.4, 1.6.3, or later) and enforce strict Content Security Policies

[Affected Scope] Apple WebKit-based browsers and applications on iOS versions prior to 16.7 and macOS prior to Sonoma 14

[Impact] Processing maliciously crafted web content may lead to arbitrary code execution on the target system

[Mitigation] Immediately update Apple operating systems to the latest versions (iOS 16.7+ / macOS Sonoma 14+)

[Affected Scope] Apple iOS devices prior to 16.7, iPadOS prior to 16.7, macOS Monterey prior to 12.7, and macOS Ventura prior to 13.6

[Impact] A local attacker can bypass security boundaries to elevate privileges to kernel level, enabling arbitrary code execution and full device compromise; actively exploited in the wild

[Mitigation] Immediately apply the official security updates to iOS/iPadOS 16.7, macOS Monterey 12.7, macOS Ventura 13.6, or later versions

[Affected Scope] Apple devices running iOS versions prior to 16.7, iPadOS versions prior to 16.7, and macOS Ventura versions prior to 13.6

[Impact] A malicious application can bypass signature and certificate validation, allowing it to execute with elevated privileges and compromise the system. This has been actively exploited in the wild

[Mitigation] Immediately update all affected devices to iOS/iPadOS 16.7 or later, and macOS Ventura 13.6 or later

[Affected Scope] All on-premises versions of JetBrains TeamCity prior to 2023.05.4

[Impact] Unauthenticated attackers can bypass authentication, gain administrative privileges, hijack build pipelines, and execute arbitrary code on the server

[Mitigation] Immediately upgrade TeamCity server to version 2023.05.4 or later, or apply the official security patch plugin

[Affected Scope] Trend Micro Apex One (on-prem and SaaS), Worry-Free Business Security, and Worry-Free Business Security Services

[Impact] An attacker with administrative console access can manipulate the 3rd party AV uninstaller module to execute arbitrary commands with elevated privileges

[Mitigation] Immediately apply the official security patches provided by Trend Micro and restrict access to the administrative console

[Affected Scope] Adobe ColdFusion versions 2018u18 (and earlier), 2021u8 (and earlier), and 2023u2 (and earlier)

[Impact] Unauthenticated remote attackers can bypass security filters to access administrative CFM and CFC endpoints, potentially leading to remote code execution (RCE)

[Mitigation] Immediately apply the official Adobe security patch (APSB23-47) and restrict external access to ColdFusion administrator consoles

[Affected Scope] Adobe Acrobat and Reader versions 23.003.20284 (and earlier), 20.005.30516 (and earlier), and 20.005.30514 (and earlier)

[Impact] Successful exploitation allows arbitrary code execution in the context of the current user when a victim opens a specially crafted malicious PDF file

[Mitigation] Immediately apply the official security patches provided by Adobe and restrict opening untrusted PDF documents

[Affected Scope] Microsoft Streaming Service Proxy driver (mskssrv.sys) in Windows 10, Windows 11, and Windows Server families

[Impact] Local attackers can execute arbitrary code with SYSTEM privileges, leading to full system compromise; actively exploited in the wild

[Mitigation] Apply the official Microsoft security patches immediately, or restrict access to the vulnerable driver as a temporary workaround

[Affected Scope] Broad range of Microsoft Office products including Microsoft Word 2013, 2016, 2019, 2021, and Microsoft 365 Apps

[Impact] Attackers can force the victim's system to leak NTLM credentials (hashes) to an external malicious server simply by having the victim select or preview a crafted document in the Preview Pane

[Mitigation] Apply the official Microsoft security updates immediately, block outbound SMB (TCP 445) traffic at the perimeter, and restrict outbound NTLM authentication via Group Policy

[Affected Scope] Google Chrome prior to 116.0.5845.187 and libwebp library prior to 1.3.2

[Impact] A remote attacker can trigger an out-of-bounds memory write and potentially execute arbitrary code via a crafted HTML page containing a malicious WebP image

[Mitigation] Immediately update Google Chrome to version 116.0.5845.187 or higher, and upgrade libwebp dependency to 1.3.2 or above

[Affected Scope] Apple iOS/iPadOS prior to 15.7.8 and 16.3, macOS Monterey prior to 12.6.8, macOS Big Sur prior to 11.7.9, macOS Ventura prior to 13.2, tvOS prior to 16.3, and watchOS prior to 9.3

[Impact] Processing a maliciously crafted font file may lead to arbitrary code execution (RCE) with system privileges, and active exploitation in the wild has been reported

[Mitigation] Immediately update all affected Apple devices to the latest patched OS versions (iOS 15.7.8 / 16.3, macOS 12.6.8 / 11.7.9 / 13.2 or later)