CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Linux Kernel legacy_parse_param Heap Buffer Overflow Vulnerability (CVE-2022-0185) Technical Advisory
[Affected Scope] Linux kernel versions 5.1 and lateral, specifically environments utilizing filesystems that fallback to legacy handling and have unprivileged user namespaces enabled
[Impact] An unprivileged local attacker can trigger a heap-based buffer overflow in kernel memory, leading to local privilege escalation (LPE) to root
[Mitigation] Apply the official kernel security patches immediately, or disable unprivileged user namespaces as a temporary workaround
Windows NTFS Kernel Integer Underflow (CWE-191) Local Privilege Escalation Vulnerability (CVE-2021-31956) Technical Analysis and Mitigation Guide
[Affected Scope] NTFS file system driver in Windows 10, Windows 11, and Windows Server families
[Impact] Local attackers can trigger kernel memory corruption to execute arbitrary code with SYSTEM privileges
[Mitigation] Immediately apply the official Microsoft Latest Cumulative Update (LCU) and restrict local access
Adobe Flash Player Integer Underflow Remote Code Execution Vulnerability (CVE-2014-0497)
[Affected Scope] Adobe Flash Player before 11.7.700.261, 11.8.x through 12.0.x before 12.0.0.44 on Windows/macOS, and before 11.2.202.336 on Linux
[Impact] Remote attackers can execute arbitrary code and gain full control of the target system by enticing users to visit a website containing a specially crafted Flash (.swf) file
[Mitigation] Immediately uninstall legacy Adobe Flash Player or upgrade to patched versions, and disable Flash execution in all web browsers