CVE Vulnerability Advisory Database

[Affected Scope] NetScaler ADC and Gateway versions prior to 14.1-73.41 and 13.1-64.28.

[Impact] Unauthenticated remote attackers can cause a Denial of Service (DoS) and system crash by sending specially crafted packets.

[Mitigation] Immediately apply the latest security patches provided by Citrix.

[Affected Scope] Citrix NetScaler ADC and Gateway versions prior to 14.1-73.37 and 13.1-64.23, including FIPS/NDcPP editions.

[Impact] Unauthenticated remote attackers can exploit memory buffer vulnerabilities (CWE-119) to achieve Remote Code Execution (RCE) or trigger a Denial of Service (DoS).

[Mitigation] This vulnerability is listed in CISA KEV and is actively exploited; immediately update to the latest patched firmware versions.

[Affected Scope] Citrix NetScaler ADC and NetScaler Gateway appliances configured as a Gateway (SSL VPN, ICA Proxy, CVPN, RDP Proxy) or AAA virtual server

[Impact] Unauthenticated remote attackers can trigger a memory overflow, leading to unpredictable behavior, Denial of Service (DoS), or potential Remote Code Execution (RCE)

[Mitigation] Immediately apply the official security patches provided by Citrix and restrict external access to affected virtual servers

[Affected Scope] Google Chrome and Chromium-based browsers prior to version 146.0.7680.75

[Impact] A remote attacker can execute arbitrary code inside the browser sandbox renderer process by enticing a user to visit a specially crafted HTML page

[Mitigation] Immediately update Google Chrome to the latest stable version (146.0.7680.75 or higher)

[Affected Scope] Apple devices running iOS before 26.3, iPadOS before 26.3, macOS Tahoe before 26.3, tvOS before 26.3, visionOS before 26.3, and watchOS before 26.3

[Impact] An attacker with local memory write capabilities can exploit this vulnerability to execute arbitrary code with elevated privileges, potentially compromising the entire system

[Mitigation] Apply the official software updates immediately to upgrade systems to version 26.3 or later

[Affected Scope] Google Chrome and Chromium-based browsers (such as Microsoft Edge) on macOS prior to version 143.0.7499.110

[Impact] A remote attacker can trigger out-of-bounds memory access via a crafted HTML page, potentially leading to arbitrary code execution (RCE) or renderer process crashes

[Mitigation] Immediately update all Chromium-based browsers to the latest stable version (143.0.7499.110 or higher) and enforce automated update policies across the enterprise

[Affected Scope] Citrix NetScaler ADC and NetScaler Gateway versions 13.1, 14.1, 13.1-FIPS, and NDcPP configured with Gateway/AAA virtual servers, IPv6-bound HTTP/SSL/HTTP_QUIC LB virtual servers, or HDX-type CR virtual servers

[Impact] Unauthenticated remote attackers can trigger a memory overflow by sending crafted network packets, leading to Remote Code Execution (RCE) or complete Denial of Service (DoS) of the appliance

[Mitigation] Immediately upgrade to the patched versions recommended in Citrix Advisory CTX694938, restrict external access, and audit system logs for indicators of compromise

[Affected Scope] Apple devices running Safari versions prior to 18.6, iOS/iPadOS prior to 18.6, macOS Sequoia prior to 15.6, tvOS prior to 18.6, visionOS prior to 2.6, and watchOS prior to 11.6

[Impact] Processing maliciously crafted web content may lead to memory corruption, potentially allowing remote attackers to execute arbitrary code (RCE) or cause a denial of service (DoS) on the target device

[Mitigation] Immediately apply the latest official security updates provided by Apple (Safari 18.6, iOS 18.6, macOS 15.6, etc.)

[Affected Scope] Citrix NetScaler ADC and NetScaler Gateway configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) or AAA virtual server

[Impact] Unauthenticated remote attackers can trigger a memory overflow by sending crafted packets, leading to control flow hijacking, Remote Code Execution (RCE), or Denial of Service (DoS)

[Mitigation] Immediately upgrade to the latest patched firmware versions provided by Citrix, and restrict access to exposed gateway interfaces until patched

[Affected Scope] Apple iOS and iPadOS prior to 18.4.1, macOS Sequoia prior to 15.4.1, tvOS prior to 18.4.1, visionOS prior to 2.4.1, and watchOS prior to 11.5

[Impact] Processing a maliciously crafted media file containing an audio stream may lead to arbitrary remote code execution (RCE) on the target system

[Mitigation] Immediately apply the official software updates provided by Apple to patch the vulnerability

[Affected Scope] Citrix NetScaler ADC and NetScaler Gateway appliances running vulnerable firmware versions

[Impact] Unauthenticated remote attackers can trigger a Denial of Service (DoS) state or perform Out-Of-Bounds Memory Reads to access sensitive data

[Mitigation] Immediately upgrade to the latest patched firmware versions recommended by Citrix and restrict external access

[Affected Scope] Android and embedded devices powered by Qualcomm Snapdragon chipsets utilizing specific KGSL GPU driver versions

[Impact] Local attackers can trigger kernel memory corruption via crafted IOCTL calls, leading to Local Privilege Escalation (LPE) and arbitrary code execution with root privileges

[Mitigation] Immediately apply the official security patches released by device OEMs and Qualcomm in or after December 2023

[Affected Scope] All supported versions of Windows 10, 11, and Windows Server utilizing the Desktop Window Manager (DWM) core library.

[Impact] A local attacker can exploit this vulnerability to execute arbitrary code with SYSTEM privileges, leading to complete system compromise.

[Mitigation] Immediately apply the official Microsoft cumulative security updates released in November 2023 or later.

[Affected Scope] NetScaler ADC and NetScaler Gateway configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) or AAA virtual server

[Impact] Unauthenticated remote attackers can trigger a memory buffer over-read to leak active session tokens, bypassing Multi-Factor Authentication (MFA) to hijack sessions

[Mitigation] Immediately apply the official vendor security patches and terminate all active user sessions to invalidate potentially compromised tokens

[Affected Scope] Apple iOS/iPadOS prior to 15.7.8 and 16.3, macOS Monterey prior to 12.6.8, macOS Big Sur prior to 11.7.9, macOS Ventura prior to 13.2, tvOS prior to 16.3, and watchOS prior to 9.3

[Impact] Processing a maliciously crafted font file may lead to arbitrary code execution (RCE) with system privileges, and active exploitation in the wild has been reported

[Mitigation] Immediately update all affected Apple devices to the latest patched OS versions (iOS 15.7.8 / 16.3, macOS 12.6.8 / 11.7.9 / 13.2 or later)

[Affected Scope] iOS/iPadOS 15 and 16, macOS Ventura, watchOS, tvOS, and Safari versions prior to 16.5

[Impact] A remote attacker can bypass the Web Content sandbox and potentially execute arbitrary code on the host system due to a bounds check validation flaw, which is actively exploited in the wild

[Mitigation] Immediately apply the official security updates provided by Apple (iOS 16.5, macOS 13.4, Safari 16.5, etc.)

[Affected Scope] Browsers and applications utilizing WebKit and WebKitGTK engines prior to WSA-2019-0005

[Impact] Processing maliciously crafted web content can trigger memory corruption (CWE-119), potentially leading to arbitrary remote code execution (RCE)

[Mitigation] Upgrade WebKitGTK packages to the latest stable release and restrict access to untrusted web domains

[Affected Scope] Devices equipped with ARM Mali GPU Kernel Driver Midgard (r26p0 to r31p0), Bifrost (r0p0 to r35p0), and Valhall (r19p0 to r35p0) architectures

[Impact] A local non-privileged user can gain write access to read-only memory pages, leading to local privilege escalation (LPE) and arbitrary code execution

[Mitigation] Apply the official security patches and upgrade to the latest driver versions (Bifrost/Valhall r36p0+, Midgard r32p0+) provided by ARM and device OEMs

[Affected Scope] Microsoft Office, Microsoft 365 Apps, and Access Database Engine Redistributable packages

[Impact] Successful exploitation allows an attacker to execute arbitrary remote code (RCE) with the privileges of the active user by tricking them into opening a crafted database file

[Mitigation] Apply the official Microsoft security updates immediately and restrict execution of untrusted database files

[Affected Scope] Apple devices running iOS versions prior to 12.5.3 (including iPhone 5s, iPhone 6, iPad Air, iPad mini 2, iPad mini 3, and iPod touch 6th generation)

[Impact] Processing maliciously crafted web content may allow remote attackers to trigger a buffer overflow, leading to arbitrary code execution and complete device compromise

[Mitigation] Immediately update affected devices to iOS 12.5.3 or later to apply the official security patch