CVE Vulnerability Advisory Database

[Affected Scope] Apple operating systems prior to iOS 18.7.2, macOS Sequoia 15.7.2, and other legacy versions

[Impact] A local malicious application can trigger unexpected system termination or write directly to kernel memory, potentially leading to privilege escalation

[Mitigation] Immediately apply the official security updates released by Apple (iOS 18.7.2, macOS 15.7.2, etc.)

[Affected Scope] Cisco Secure Firewall ASA (Adaptive Security Appliance) and FTD (Threat Defense) software with VPN web server features enabled

[Impact] An authenticated remote attacker with valid VPN credentials can execute arbitrary code with root privileges, leading to complete compromise of the device

[Mitigation] Apply official vendor security patches immediately, enforce Multi-Factor Authentication (MFA) on all VPN accounts, and monitor HTTP traffic logs

[Affected Scope] Apple devices running Safari versions prior to 18.6, iOS/iPadOS prior to 18.6, macOS Sequoia prior to 15.6, tvOS prior to 18.6, visionOS prior to 2.6, and watchOS prior to 11.6

[Impact] Processing maliciously crafted web content may lead to memory corruption, potentially allowing remote attackers to execute arbitrary code (RCE) or cause a denial of service (DoS) on the target device

[Mitigation] Immediately apply the latest official security updates provided by Apple (Safari 18.6, iOS 18.6, macOS 15.6, etc.)

[Affected Scope] Apple iOS and iPadOS prior to 16.6.1, macOS Monterey prior to 12.6.9, macOS Ventura prior to 13.5.2, iOS/iPadOS prior to 15.7.9, and macOS Big Sur prior to 11.7.10

[Impact] Processing a maliciously crafted image can trigger a buffer overflow, leading to arbitrary code execution (RCE) and potential system takeover

[Mitigation] Immediately apply the official security updates (iOS 16.6.1, macOS 13.5.2, etc.) and consider enabling Lockdown Mode for high-risk environments

[Affected Scope] Specific firmware versions of Zyxel ATP, USG FLEX, USG FLEX 50(W), USG20(W)-VPN, VPN, and ZyWALL/USG series

[Impact] Unauthenticated remote attackers can cause denial-of-service (DoS) conditions or execute arbitrary code on the affected device

[Mitigation] Immediately upgrade the device firmware to the latest patched version (v5.36 Patch 2 or v4.73 Patch 2 or higher)

[Affected Scope] Zyxel ATP, USG FLEX, USG FLEX 50(W), USG20(W)-VPN, VPN, and ZyWALL/USG series firmware within specific version ranges.

[Impact] An unauthenticated remote attacker can trigger denial-of-service (DoS) conditions or execute arbitrary code on the affected device.

[Mitigation] Immediately upgrade to the latest patched firmware version provided by the vendor and restrict external access to management interfaces.

[Affected Scope] D-Link GO-RT-AC750 hardware revA (firmware v101b03 and prior) and revB (firmware FWv200b02 and prior).

[Impact] Unauthenticated remote attackers can execute arbitrary code with root privileges or cause a complete system compromise by sending crafted HTTP requests to the WAN/LAN interface.

[Mitigation] Apply the latest firmware updates immediately, or replace end-of-life (EoL) devices and disable remote WAN management interfaces.

[Affected Scope] Systems running unpatched versions impacted by CVE-2021-30983

[Impact] A buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS 15.2 and iPadOS 15.2. An application may be ...

[Mitigation] Apply vendor security patches and restrict external network exposure.

[Affected Scope] Google Chrome versions prior to 86.0.4240.111 and FreeType library versions prior to 2.10.4

[Impact] Remote attackers can trigger heap corruption and potentially execute arbitrary code via a specially crafted HTML page or font file

[Mitigation] Immediately upgrade Google Chrome to version 86.0.4240.111 or later, and update the FreeType library to version 2.10.4 or higher

[Affected Scope] SonicWall firewall appliances running SonicOS Gen 6 (prior to 6.5.4.7, 6.5.1.12, 6.0.5.3), SonicOSv (prior to 6.5.4.v), and Gen 7 (prior to 7.0.0.0)

[Impact] An unauthenticated remote attacker can trigger a Denial of Service (DoS) or potentially execute arbitrary code with root privileges by sending a specially crafted HTTP request to the firewall

[Mitigation] Immediately upgrade to the patched firmware versions provided by SonicWall and restrict external access to the management interface

[Affected Scope] Sophos XG Firewall v17.0, v17.1, and v17.5 (v17.5 MR12 and prior) with Clientless VPN Access feature enabled

[Impact] Unauthenticated remote attackers can execute arbitrary code (RCE) or cause a Denial of Service (DoS) on the firewall via specially crafted HTTP/S requests

[Mitigation] Apply official hotfix HF062020.1, upgrade to the latest firmware, and restrict WAN access to the User Portal and SSL VPN ports

[Affected Scope] PHP versions 7.1.x below 7.1.33, 7.2.x below 7.2.24, and 7.3.x below 7.3.11 running in certain Nginx + PHP-FPM configurations

[Impact] Unauthenticated remote attackers can trigger an out-of-bounds memory write in the PHP-FPM process, leading to arbitrary remote code execution (RCE) on the target web server

[Mitigation] Immediately upgrade PHP to patched versions (7.1.33, 7.2.24, 7.3.11 or higher) and configure Nginx with 'try_files' to verify file existence before passing requests to FastCGI

[Affected Scope] All Exim versions before 4.90.1 with active SMTP listener

[Impact] Unauthenticated remote attackers can execute arbitrary code with root privileges by sending specially crafted Base64 messages

[Mitigation] Immediately upgrade Exim mail servers to the latest stable version (4.90.1 or higher) and restrict SMTP access

[Affected Scope] NETGEAR WNR2000v3 (before 1.1.2.14), WNR2000v4 (before 1.0.0.66), and WNR2000v5 (before 1.0.0.42) devices.

[Impact] Unauthenticated remote attackers can bypass authentication and execute arbitrary code with root privileges via a buffer overflow in the web administration interface.

[Mitigation] Apply the official firmware updates immediately and disable remote WAN management on the affected routers.

[Affected Scope] Microsoft Internet Information Services (IIS) 6.0 with WebDAV service enabled on Windows Server 2003 R2.

[Impact] Unauthenticated remote attackers can execute arbitrary code with system privileges and fully compromise the host by sending a specially crafted HTTP PROPFIND request.

[Mitigation] Since Windows Server 2003 is End-of-Life (EoL), immediately migrate to a supported OS version or disable the IIS WebDAV service.

[Affected Scope] NETGEAR WNR2000v5 wireless routers.

[Impact] Unauthenticated remote attackers can execute arbitrary system commands with root privileges and fully compromise the device by sending a specially crafted HTTP request.

[Mitigation] Immediately apply the official firmware update from the vendor and disable remote management interfaces.

[Affected Scope] Cisco Adaptive Security Appliance (ASA) Software through 9.4.2.3 on ASA 5500, 5500-X, ASAv, Firepower 9300, PIX, and FWSM devices

[Impact] Remote authenticated attackers can exploit this vulnerability to execute arbitrary code (RCE) with elevated privileges or cause a denial of service (DoS) via crafted IPv4 SNMP packets

[Mitigation] Apply official Cisco software updates immediately, restrict SNMP access using strict Access Control Lists (ACLs), and rotate SNMP community strings

[Affected Scope] Windows Vista SP2, 7 SP1, 8.1, 10, and Windows Server 2008, 2012 R2 with Secondary Logon service enabled

[Impact] Local authenticated attackers can execute arbitrary code with SYSTEM privileges via a crafted application, leading to complete system compromise

[Mitigation] Apply the official MS16-032 security patch immediately, or disable the Secondary Logon (seclogon) service as a temporary workaround

[Affected Scope] Microsoft Office 2003 SP3 and Office 2011 for Mac.

[Impact] Remote attackers can execute arbitrary code with the privileges of the active user by tricking them into opening a crafted Office document containing malicious PNG data.

[Mitigation] Apply the official MS13-051 security patch immediately, or upgrade legacy, end-of-life Office installations to a supported version.

[Affected Scope] Adobe Reader and Acrobat 9.x before 9.5.4, 10.x before 10.1.6, and 11.x before 11.0.02

[Impact] Remote attackers can bypass sandbox protections and execute arbitrary code on the target system via a specially crafted PDF document.

[Mitigation] Immediately update affected installations to the official patched versions (9.5.4, 10.1.6, 11.0.02 or later).