CVE Vulnerability Advisory Database

[Affected Scope] Microsoft Office, Microsoft 365 Apps, and Access Database Engine Redistributable packages

[Impact] Successful exploitation allows an attacker to execute arbitrary remote code (RCE) with the privileges of the active user by tricking them into opening a crafted database file

[Mitigation] Apply the official Microsoft security updates immediately and restrict execution of untrusted database files

[Affected Scope] SAP NetWeaver (Visual Composer 7.0 RT) versions 7.30, 7.31, 7.40, and 7.50

[Impact] An authenticated non-administrative attacker can upload malicious files and execute arbitrary OS commands with the privileges of the Java Server process, leading to full system compromise or denial of service

[Mitigation] Immediately apply the official patch specified in SAP Security Note 3084487 and restrict access to vulnerable upload endpoints

[Affected Scope] Apple iOS before 14.8, iOS before 12.5.5, macOS Big Sur before 11.6, macOS Catalina (prior to Security Update 2021-005), and watchOS before 7.6.2

[Impact] A sandboxed process or local attacker can bypass sandbox restrictions, escalate privileges, and gain unauthorized access to sensitive system resources

[Mitigation] Immediately apply the official security updates provided by Apple (iOS 14.8, macOS 11.6, etc.)

[Affected Scope] Systems running unpatched versions impacted by CVE-2021-30983

[Impact] A buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS 15.2 and iPadOS 15.2. An application may be ...

[Mitigation] Apply vendor security patches and restrict external network exposure.

[Affected Scope] iOS/iPadOS before 15.2, macOS Monterey before 12.1, Safari before 15.2, tvOS before 15.2, watchOS before 8.3

[Impact] Processing maliciously crafted web content may lead to arbitrary code execution on the target system.

[Mitigation] Immediately apply the official software updates provided by Apple to upgrade to the patched versions.

[Affected Scope] Apple iOS and iPadOS devices running versions prior to 14.8.1 or 15.1

[Impact] A malicious local application can exploit this vulnerability to execute arbitrary code with kernel privileges, leading to complete device compromise

[Mitigation] Immediately update affected devices to iOS/iPadOS 14.8.1, 15.1, or later versions

[Affected Scope] Apple iOS and iPadOS prior to 15.0.2, macOS Monterey prior to 12.0.1, Big Sur prior to 11.6.1, tvOS prior to 15.1, and watchOS prior to 8.1

[Impact] A local application can execute arbitrary code with kernel privileges, leading to complete system compromise; active exploitation in the wild has been reported

[Mitigation] Immediately update all affected Apple devices to the latest patched OS versions (iOS 15.0.2 / macOS 12.0.1 or later)

[Affected Scope] Java applications utilizing XStream library versions prior to 1.4.18, and third-party solutions like VMware NSX Manager embedding this library

[Impact] Unauthenticated remote attackers can execute arbitrary system commands on the host by manipulating the processed XML input stream

[Mitigation] Upgrade XStream to version 1.4.18 or higher, and configure XStream's security framework with a strict whitelist

[Affected Scope] Atlassian Jira Server and Data Center versions before 8.5.14, 8.6.0 before 8.13.6, and 8.14.0 before 8.16.1

[Impact] Unauthenticated remote attackers can exploit a path traversal vulnerability to read sensitive configuration files, such as '/WEB-INF/web.xml'

[Mitigation] Immediately upgrade Jira instances to the patched versions (8.5.14, 8.13.6, 8.16.1, or later) and apply WAF access control rules

[Affected Scope] Sunhillo SureLine versions prior to 8.7.0.1.1

[Impact] Unauthenticated remote attackers can execute arbitrary OS commands on the target system using shell metacharacters

[Mitigation] Immediately upgrade Sunhillo SureLine to version 8.7.0.1.1 or later, and restrict external network access

[Affected Scope] Event Tracing for Windows (ETW) subsystem in Windows 10, Windows 11, and Windows Server families

[Impact] Local attackers can exploit a Use-After-Free (UAF) vulnerability to execute arbitrary code with SYSTEM privileges, leading to full system compromise

[Mitigation] Immediately apply the official Microsoft Cumulative Update (LCU) and restrict local access on unpatched systems

[Affected Scope] Windows 10, 11, and Windows Server systems running the User Profile Service (ProfSvc)

[Impact] A locally authenticated attacker can exploit a logical flaw to execute arbitrary code with SYSTEM privileges, leading to full system compromise

[Mitigation] Apply the official Microsoft cumulative security updates immediately, or restrict multi-user and RDP access if patching is delayed

[Affected Scope] End-of-life (EOL) SonicWall Secure Remote Access (SRA) appliances running all 8.x firmware and 9.0.0.9-26sv or earlier

[Impact] Unauthenticated remote attackers can execute arbitrary SQL commands via crafted payloads, potentially leading to credential theft, database compromise, and remote code execution (RCE)

[Mitigation] Since the affected products are EOL, immediately decommission the SRA appliances and migrate to supported SMA (Secure Mobile Access) series, or restrict external access via firewall rules

[Affected Scope] Atlassian Confluence Server and Data Center versions prior to 7.4.10, and versions from 7.5.0 prior to 7.12.3

[Impact] Unauthenticated remote attackers can bypass authorization checks via the '/s/' endpoint to view restricted resources and sensitive internal files

[Mitigation] Immediately upgrade affected instances to official patched versions (7.4.10, 7.12.3, or later), or restrict suspicious requests to the '/s/' endpoint using a WAF or reverse proxy

[Affected Scope] Microsoft Exchange Server 2013, 2016, and 2019

[Impact] High-privileged remote attackers can execute arbitrary code and gain full system control over the Exchange Server

[Mitigation] Immediately apply the official Microsoft Cumulative Updates (CU) and Security Updates (SU), and restrict external access

[Affected Scope] Linux Kernel versions since v2.6.19-rc1 that lack the official security patch, particularly environments with user namespaces enabled

[Impact] A local attacker can trigger heap memory corruption to escalate privileges to root or cause a system-wide Denial of Service (DoS)

[Mitigation] Upgrade the Linux kernel to the latest stable release, or apply temporary workarounds to restrict unprivileged user namespace creation

[Affected Scope] All GitLab versions starting from 10.5 where internal network requests for webhooks are enabled

[Impact] Unauthenticated attackers can bypass registration restrictions to trigger SSRF, accessing sensitive internal network resources and metadata

[Mitigation] Upgrade to the latest patched GitLab version immediately, or disable the 'Allow requests to the local network from web hooks and services' setting

[Affected Scope] Samsung mobile devices running firmware versions prior to SMR (Security Maintenance Release) MAY-2021 Release 1

[Impact] Local attackers with compromised radio privileges can bypass signature checks via a race condition, leading to arbitrary code execution in the kernel context

[Mitigation] Apply the official Samsung security update (SMR MAY-2021 Release 1 or later) immediately and restrict unauthorized application installation

[Affected Scope] Samsung mobile devices running firmware versions prior to SMR (Samsung Security Maintenance Release) MAY-2021 Release 1.

[Impact] A local attacker with compromised radio privileges can trigger a race condition to perform an arbitrary write in kernel memory, leading to local privilege escalation (LPE).

[Mitigation] Apply the official Samsung security update (SMR MAY-2021 Release 1 or later) and restrict unauthorized local application execution.

[Affected Scope] OpenPLC ScadaBR through version 0.9.1 on Linux and through version 1.12.4 on Windows

[Impact] Attackers can inject malicious scripts permanently via system_settings.shtm, leading to administrator session hijacking and unauthorized SCADA control

[Mitigation] Apply the latest security patches, restrict external access, and deploy Web Application Firewall (WAF) rules to sanitize input parameters