CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
GitLab CE/EE Unauthenticated Remote Code Execution (RCE) Advisory (CVE-2026-97229)
[Affected Scope] GitLab CE/EE versions 19.2 (< 19.2.8), 19.3 (< 19.3.5), and 19.4 (< 19.4.2)
[Impact] Unauthenticated attackers can execute arbitrary code on the GitLab server via crafted CI/CD configurations, leading to full system compromise
[Mitigation] Immediate upgrade to patched versions 19.2.8, 19.3.5, or 19.4.2 is mandatory
Android Integer Overflow Local Privilege Escalation and Code Execution Vulnerability (CVE-2025-48595)
[Affected Scope] Multiple components within the Android Operating System (OS)
[Impact] Local privilege escalation (LPE) and arbitrary code execution without requiring additional privileges or user interaction, actively exploited in the wild
[Mitigation] Immediately apply the Android June 2026 Security Patch Level or later
Qualcomm Chipset Memory Corruption Vulnerability via Alignment Miscalculation (CVE-2026-21385) Security Advisory
[Affected Scope] Mobile and embedded devices powered by Qualcomm chipsets running affected Android kernel versions
[Impact] Local attackers can trigger an integer overflow (CWE-190) during memory alignment, leading to memory corruption and local privilege escalation (LPE) to kernel level
[Mitigation] Immediately apply the March 2026 security patches released by Qualcomm and Android OEMs
Windows Fast FAT Driver Integer Overflow and Local Code Execution Vulnerability (CVE-2025-24985) Technical Advisory
[Affected Scope] Microsoft Windows operating systems utilizing the Windows Fast FAT File System Driver (fastfat.sys)
[Impact] Local unauthorized attackers can execute arbitrary code with SYSTEM privileges by exploiting kernel-level memory corruption
[Mitigation] Apply the official Microsoft security updates immediately, or restrict auto-mounting of untrusted storage media and virtual disk images
Windows Hyper-V Elevation of Privilege Vulnerability (CVE-2024-38080) Security Advisory
[Affected Scope] Windows 10, Windows 11, and Windows Server environments running the Hyper-V virtualization platform
[Impact] Local attackers with low-privilege access can exploit an integer overflow (CWE-190) to execute arbitrary code with SYSTEM privileges, leading to complete host compromise
[Mitigation] Immediately apply Microsoft's July 2024 cumulative security updates and restrict local access to virtualization hosts
Qualcomm Graphics Linux Driver Integer Overflow Memory Corruption Vulnerability (CVE-2023-33107) Analysis and Mitigation Guide
[Affected Scope] Devices powered by Qualcomm Snapdragon chipsets running Linux or Android kernel-based graphics drivers
[Impact] Local attackers can trigger kernel memory corruption via malicious IOCTL calls, leading to Local Privilege Escalation (LPE) to Root/Kernel level
[Mitigation] Apply the official security patches released by Qualcomm and device OEMs in or after December 2023
Google Chrome Skia Graphics Library Integer Overflow Vulnerability (CVE-2023-6345) Technical Advisory
[Affected Scope] Google Chrome and Chromium-based browsers prior to version 119.0.6045.199
[Impact] A remote attacker who has compromised the renderer process can exploit this vulnerability via a malicious file to escape the browser sandbox and execute arbitrary code
[Mitigation] Immediately update Google Chrome and Chromium-based browsers to the latest stable channel (119.0.6045.199 or higher)
Apple iOS, macOS, watchOS Kernel Integer Overflow Vulnerability (CVE-2023-32434) Technical Advisory
[Affected Scope] Systems running iOS/iPadOS prior to 15.7.7 and 16.5.1, macOS Big Sur/Monterey/Ventura prior to specific patched releases, and watchOS prior to 8.8.1 and 9.5.2
[Impact] A local application can exploit this vulnerability to execute arbitrary code with kernel privileges, leading to complete system compromise. Active exploitation has been reported in the wild
[Mitigation] Immediately apply the official security updates provided by Apple (e.g., iOS 16.5.1, macOS 13.4.1)
Google Chrome Skia Graphics Library Integer Overflow Vulnerability (CVE-2023-2136) Technical Analysis and Remediation Guide
[Affected Scope] Google Chrome and Chromium-based browsers prior to version 112.0.5615.137
[Impact] A remote attacker who has compromised the renderer process can potentially perform a sandbox escape and execute arbitrary code via a crafted HTML page
[Mitigation] Immediately update Google Chrome and Chromium-based browsers to the latest stable version (112.0.5615.137 or higher)
Windows Graphics Component Integer Overflow Remote Code Execution Vulnerability (CVE-2023-21823) Analysis and Mitigation Guide
[Affected Scope] All Windows systems utilizing the Windows Graphics component, including Windows 10, Windows 11, and Windows Server 2008-2022
[Impact] Local attackers can exploit an integer overflow (CWE-190) to execute arbitrary code with SYSTEM privileges, leading to complete system compromise
[Mitigation] Apply the official Microsoft security updates immediately and ensure Windows Graphics-related Store apps are updated to their latest versions
Linux Kernel legacy_parse_param Heap Buffer Overflow Vulnerability (CVE-2022-0185) Technical Advisory
[Affected Scope] Linux kernel versions 5.1 and lateral, specifically environments utilizing filesystems that fallback to legacy handling and have unprivileged user namespaces enabled
[Impact] An unprivileged local attacker can trigger a heap-based buffer overflow in kernel memory, leading to local privilege escalation (LPE) to root
[Mitigation] Apply the official kernel security patches immediately, or disable unprivileged user namespaces as a temporary workaround
Apple WebKit Integer Overflow Remote Code Execution Vulnerability (CVE-2021-30663) Analysis and Mitigation Guide
[Affected Scope] Apple devices running versions prior to iOS 14.5, iPadOS 14.5, macOS Big Sur 11.3, tvOS 14.6, and Safari 14.1.1
[Impact] Processing maliciously crafted web content may lead to arbitrary code execution (RCE) on the target device
[Mitigation] Immediately apply the official software updates provided by Apple (iOS 14.5.1, macOS 11.3.1, or later)
Apple WebKit Integer Overflow Remote Code Execution Vulnerability (CVE-2021-30952) Analysis and Mitigation Guide
[Affected Scope] iOS/iPadOS before 15.2, macOS Monterey before 12.1, Safari before 15.2, tvOS before 15.2, watchOS before 8.3
[Impact] Processing maliciously crafted web content may lead to arbitrary code execution on the target system.
[Mitigation] Immediately apply the official software updates provided by Apple to upgrade to the patched versions.
Apple iOS, iPadOS, macOS, watchOS Integer Overflow Remote Code Execution Vulnerability (CVE-2021-30860, FORCEDENTRY)
[Affected Scope] Apple iOS before 14.8, iPadOS before 14.8, macOS Big Sur before 11.6, macOS Catalina (prior to Security Update 2021-005), and watchOS before 7.6.2
[Impact] Processing a maliciously crafted PDF or image file can lead to arbitrary code execution without user interaction (Zero-Click), potentially resulting in complete device compromise
[Mitigation] Immediately apply the official security updates provided by Apple (iOS 14.8, macOS 11.6, etc.) and consider enabling Lockdown Mode for high-risk environments
Google Chrome V8 Engine Integer Overflow Heap Corruption Vulnerability (CVE-2018-6065) Technical Advisory
[Affected Scope] Google Chrome versions prior to 65.0.3325.146 and applications utilizing affected V8 JavaScript engine releases
[Impact] Remote attackers can trigger heap corruption and potentially execute arbitrary code via a specially crafted HTML page
[Mitigation] Immediately upgrade Google Chrome to the latest stable channel (65.0.3325.146 or higher) and apply OS-level package updates
Linux Kernel create_elf_tables() Integer Overflow Local Privilege Escalation Vulnerability (CVE-2018-14634, Mutagen Astronomer)
[Affected Scope] Linux kernel versions 2.6.x, 3.10.x, and 4.14.x, primarily affecting Red Hat Enterprise Linux and derivative distributions.
[Impact] An unprivileged local attacker can exploit this vulnerability via SUID binaries to trigger an integer overflow, achieving full root-level privilege escalation.
[Mitigation] Apply the official vendor kernel patches immediately and reboot the system, or implement temporary SUID restrictions and SystemTap mitigations.
Adobe Flash Player and AIR Integer Overflow Remote Code Execution Vulnerability (CVE-2016-1010)
[Affected Scope] Adobe Flash Player before 18.0.0.333, 19.x through 21.x before 21.0.0.182 on Windows/OS X, before 11.2.202.577 on Linux, and Adobe AIR/SDK before 21.0.0.176
[Impact] Successful exploitation allows remote attackers to trigger an integer overflow, leading to arbitrary code execution under the context of the current user
[Mitigation] Immediately uninstall legacy Adobe Flash Player and AIR components, or upgrade to patched versions if operating in isolated legacy environments
Adobe Flash Player and AIR Integer Overflow Remote Code Execution (RCE) Vulnerability (CVE-2015-8651)
[Affected Scope] Adobe Flash Player before 18.0.0.324, 19.x/20.x before 20.0.0.267 on Windows/OS X, before 11.2.202.559 on Linux, and Adobe AIR before 20.0.0.233
[Impact] Successful exploitation allows remote attackers to execute arbitrary code and compromise the host system via specially crafted Flash content (.swf)
[Mitigation] Immediately uninstall legacy Adobe Flash Player components or upgrade Adobe AIR to the latest secure version
Adobe Reader and Acrobat Integer Overflow Remote Code Execution Vulnerability (CVE-2013-2729)
[Affected Scope] Adobe Reader and Acrobat 9.x before 9.5.5, 10.x before 10.1.7, and 11.x before 11.0.03
[Impact] Attackers can execute arbitrary code with the privileges of the logged-in user and compromise the host system via a specially crafted PDF document
[Mitigation] Immediately update affected installations to patched versions (9.5.5, 10.1.7, 11.0.03 or later) or migrate to the latest Adobe Acrobat Reader DC
Linux Kernel fb_mmap Integer Overflow Local Privilege Escalation Vulnerability (CVE-2013-2596)
[Affected Scope] Linux kernel versions before 3.8.9, including certain Android 4.1.2 builds and embedded Linux systems
[Impact] Local attackers can exploit an integer overflow to map the entire kernel memory space with read-write permissions, leading to full root privilege escalation
[Mitigation] Upgrade the Linux kernel to version 3.8.9 or higher, and restrict access permissions to framebuffer device files