CVE Vulnerability Advisory Database

[Affected Scope] Google Chrome and Chromium-based browsers prior to version 149.0.7827.103

[Impact] Remote attackers can execute arbitrary code inside the V8 sandbox via a crafted HTML page

[Mitigation] Immediately update Google Chrome to the latest stable version (149.0.7827.103 or higher)

[Affected Scope] Citrix NetScaler ADC and NetScaler Gateway appliances configured to act as a SAML Identity Provider (IDP)

[Impact] Unauthenticated remote attackers can trigger an out-of-bounds memory read, potentially exposing highly sensitive session tokens, credentials, or SSL private keys, and facilitating remote code execution

[Mitigation] Immediately apply the official security updates provided by Citrix, or temporarily disable the SAML IDP configuration if patching cannot be performed immediately

[Affected Scope] Citrix NetScaler ADC and Gateway appliances configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) or AAA virtual server

[Impact] Unauthenticated remote attackers can exploit insufficient input validation to read sensitive system memory, potentially exposing active session tokens and credentials

[Mitigation] Immediately apply the official security patches provided by Citrix (CTX693420) and terminate all active user sessions

[Affected Scope] Google Chrome and Chromium-based browsers (including Microsoft Edge) prior to version 137.0.7151.68

[Impact] A remote attacker can trigger heap corruption and potentially execute arbitrary code within the browser renderer process via a crafted HTML page

[Mitigation] Immediately update all affected browsers to the latest stable version (137.0.7151.68 or higher) and enforce automatic update policies

[Affected Scope] Windows 10, Windows 11, and Windows Server families utilizing the NTFS file system driver

[Impact] Local authorized attackers can disclose sensitive kernel memory information, potentially facilitating subsequent privilege escalation (EoP) attacks

[Mitigation] Immediately apply the February 2025 Microsoft Patch Tuesday security updates and restrict local access for unauthorized users

[Affected Scope] VMware ESXi, Workstation, and Fusion environments utilizing the Host-Guest File System (HGFS) for file sharing.

[Impact] A malicious actor with local administrative privileges on a guest VM can read out-of-bounds memory from the host's vmx process, potentially bypassing ASLR to facilitate hypervisor escape.

[Mitigation] Apply the official security patches provided by Broadcom, or disable the HGFS (Shared Folders) feature in the virtual machine configuration as a temporary workaround.

[Affected Scope] Systems running the Linux kernel with the ALSA (Advanced Linux Sound Architecture) USB-Audio driver enabled.

[Impact] A local attacker can trigger an out-of-bounds read by connecting a malicious USB audio device, potentially leading to kernel memory disclosure or system crash (DoS).

[Mitigation] Apply the latest Linux kernel security patches and restrict unauthorized USB device connections and driver loading.

[Affected Scope] Google Chrome and Chromium-based browsers prior to version 120.0.6099.224

[Impact] A remote attacker can trigger heap corruption via a crafted HTML page, potentially leading to arbitrary code execution (RCE) or sensitive information disclosure within the browser renderer process

[Mitigation] Immediately update Google Chrome and Chromium-based browsers to the latest stable version (120.0.6099.224 or higher)

[Affected Scope] Apple devices running versions prior to iOS 17.1.2, iPadOS 17.1.2, macOS Sonoma 14.1.2, and Safari 17.1.2

[Impact] Processing maliciously crafted web content may lead to out-of-bounds memory access, disclosing sensitive information and potentially enabling sandbox escape or remote code execution

[Mitigation] Immediately apply the official security updates (iOS/iPadOS 17.1.2, macOS Sonoma 14.1.2, Safari 17.1.2 or later) and enable Lockdown Mode for high-risk users

[Affected Scope] Microsoft Windows operating systems utilizing the CLFS driver, including Windows 10, 11, and Windows Server 2016, 2019, 2022

[Impact] A locally authenticated attacker can execute a specially crafted application to elevate privileges to NT AUTHORITY\SYSTEM, gaining full control over the system

[Mitigation] Immediately apply the latest cumulative security updates provided by Microsoft and monitor unpatched assets

[Affected Scope] All Apple devices running versions prior to iOS/iPadOS 15.7.6 and 16.5, macOS Ventura 13.4, tvOS 16.5, watchOS 9.5, and Safari 16.5

[Impact] Processing maliciously crafted web content may lead to out-of-bounds memory access, disclosing sensitive system information and enabling further sandbox escape or privilege escalation

[Mitigation] Immediately apply official Apple software updates to upgrade to iOS 16.5, macOS Ventura 13.4, Safari 16.5, or later

[Affected Scope] macOS Monterey prior to 12.3.1, macOS Big Sur prior to 11.6.6, and macOS Catalina prior to Security Update 2022-004.

[Impact] A local attacker can exploit this vulnerability to read sensitive kernel memory, potentially leading to the disclosure of cryptographic keys, system credentials, or memory layouts.

[Mitigation] Immediately apply the official security updates provided by Apple (macOS Monterey 12.3.1, Big Sur 11.6.6, or Security Update 2022-004 Catalina).

[Affected Scope] Almost all major Linux distributions (RedHat, Debian, Ubuntu, SUSE, etc.) with the Polkit (formerly PolicyKit) pkexec utility installed.

[Impact] A local unprivileged attacker can exploit the vulnerable pkexec binary to bypass authorization policies and gain full root administrative privileges on the target host.

[Mitigation] Apply official vendor security patches immediately, or remove the SUID permission (chmod 0755) from the pkexec binary as a temporary workaround.

[Affected Scope] Samsung mobile devices and Exynos modem interface drivers prior to SMR Oct-2021 Release 1

[Impact] Local attackers can execute arbitrary code with kernel privileges by dereferencing an invalid function pointer, leading to complete system compromise

[Mitigation] Immediately apply the official Samsung Android security update (October 2021 or later)

[Affected Scope] IoT, medical devices, industrial control systems, and network equipment utilizing Treck TCP/IP embedded protocol stack versions prior to 6.0.1.66

[Impact] An adjacent attacker can send specially crafted IPv6 packets to trigger an out-of-bounds read, leading to information disclosure or system crash/denial of service (DoS)

[Mitigation] Apply the latest firmware updates provided by your device vendors (incorporating Treck 6.0.1.66 or higher) and restrict unnecessary IPv6 traffic at the network boundary

[Affected Scope] Google Chrome prior to 57.0.2987.98 for desktop (Windows, macOS, Linux) and prior to 57.0.2987.108 for Android

[Impact] Successful exploitation allows remote attackers to execute arbitrary code within the context of the browser renderer process or bypass sandbox boundaries via a crafted HTML page

[Mitigation] Immediately update Google Chrome to the latest stable channel release (57.0.2987.98 / 108 or higher)

[Affected Scope] Microsoft Internet Explorer versions 9, 10, and 11 running on Windows operating systems.

[Impact] Remote attackers can bypass ASLR and extract sensitive process memory data by enticing users to visit a specially crafted malicious website.

[Mitigation] Apply the latest cumulative Windows security updates, disable Internet Explorer, and transition to modern secure browsers.

[Affected Scope] Trihedral VTScada (formerly VTS) versions 8.x through 11.x before 11.2.02

[Impact] Unauthenticated remote attackers can cause a denial of service (application crash) by sending crafted requests to the WAP interface

[Mitigation] Immediately upgrade VTScada to version 11.2.02 or later, and restrict external access to the WAP interface

[Affected Scope] Google Chrome browser versions prior to 49.0.2623.108 and applications utilizing vulnerable V8 JavaScript engine releases

[Impact] Remote attackers can trigger a denial of service (browser crash) or potentially execute arbitrary code via crafted JavaScript payloads that exploit memory corruption

[Mitigation] Immediately update Google Chrome to the latest stable channel (49.0.2623.108 or higher) and patch any V8-dependent runtime environments

[Affected Scope] OpenSSL versions 1.0.1 through 1.0.1f supporting TLS/DTLS Heartbeat extension

[Impact] Remote attackers can read up to 64KB of host memory per request, potentially exposing private keys, session tokens, and credentials

[Mitigation] Upgrade OpenSSL to version 1.0.1g or later immediately, revoke compromised SSL/TLS certificates, and reissue new keys