CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Samsung Android Kernel Pointer Disclosure ASLR Bypass Vulnerability (CVE-2023-21492) Technical Analysis and Remediation Guide
[Affected Scope] Samsung Android mobile devices running firmware versions prior to the SMR May-2023 Release 1 security update
[Impact] A privileged local attacker can read exposed kernel pointers in system log files to bypass ASLR (Address Space Layout Randomization), facilitating subsequent kernel-level code execution
[Mitigation] Apply the Samsung May 2023 security update (SMR May-2023 Release 1) or later, and restrict access to sensitive system logs
Microsoft Internet Explorer ASLR Bypass Vulnerability (CVE-2015-0071, MS15-009) Technical Analysis and Mitigation Guide
[Affected Scope] Microsoft Internet Explorer 9, 10, and 11
[Impact] Attackers can bypass Address Space Layout Randomization (ASLR) protections via crafted web content, significantly increasing the success rate of subsequent Remote Code Execution (RCE) attacks
[Mitigation] Apply the MS15-009 cumulative security update, transition to Microsoft Edge, and enforce system-wide exploit mitigations (Force ASLR)
Adobe Flash Player ASLR Bypass via Memory Address Disclosure (CVE-2015-0310)
[Affected Scope] Adobe Flash Player on Windows, OS X, and Linux within specific version ranges prior to January 2015 patches
[Impact] Attackers can bypass the Address Space Layout Randomization (ASLR) protection mechanism, significantly increasing the success rate of subsequent Remote Code Execution (RCE) attacks
[Mitigation] Immediately uninstall Adobe Flash Player or upgrade to the patched versions, and disable Flash execution in all web browsers