CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Check Point Quantum Security Gateway Remote Code Execution (RCE) Vulnerability (CVE-2026-85102)
[Affected Scope] All Check Point Quantum Security Gateway versions with VPN Blade enabled.
[Impact] Unauthenticated remote attackers can execute arbitrary code with root privileges, leading to full gateway compromise.
[Mitigation] Immediately apply the latest Jumbo Hotfix and enforce strict certificate validation policies.
Apple iOS, iPadOS, and macOS Certificate Validation Bypass Vulnerability (CVE-2023-41991) Analysis and Mitigation Guide
[Affected Scope] Apple devices running iOS versions prior to 16.7, iPadOS versions prior to 16.7, and macOS Ventura versions prior to 13.6
[Impact] A malicious application can bypass signature and certificate validation, allowing it to execute with elevated privileges and compromise the system. This has been actively exploited in the wild
[Mitigation] Immediately update all affected devices to iOS/iPadOS 16.7 or later, and macOS Ventura 13.6 or later
Android WorkSource Parcel Mismatch Local Privilege Escalation Vulnerability (CVE-2023-20963)
[Affected Scope] Android operating system versions 11, 12, 12L, and 13
[Impact] Local attackers can escalate privileges to the SYSTEM level without any user interaction or additional execution privileges
[Mitigation] Immediately update the system to the March 2023 Android Security Patch Level (2023-03-01) or later
Active Directory Domain Services Privilege Escalation Vulnerability (CVE-2022-26923) Analysis and Mitigation Guide
[Affected Scope] All Windows Server Domain Controllers in environments where Active Directory Certificate Services (ADCS) is enabled.
[Impact] A low-privileged domain user can obtain a certificate for the Domain Controller's computer account, leading to full Domain Admin privilege escalation.
[Mitigation] Apply the official Microsoft cumulative security updates and harden the dNSHostName mapping validation on ADCS.
Cisco Small Business RV Series Routers Multiple Vulnerabilities Advisory (CVE-2022-20703)
[Affected Scope] Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers
[Impact] Unauthenticated attackers can execute arbitrary code, elevate privileges, bypass authentication, and run unsigned software
[Mitigation] Apply the official Cisco firmware updates immediately and restrict access to the management interface
Windows CryptoAPI Elliptic Curve Cryptography (ECC) Certificate Validation Bypass Vulnerability (CVE-2020-0601, CurveBall)
[Affected Scope] Microsoft Windows 10, Windows Server 2016, and Windows Server 2019 systems utilizing the Crypt32.dll library.
[Impact] Attackers can spoof code-signing certificates to execute malicious binaries as trusted software, or perform Man-in-the-Middle (MitM) attacks to decrypt HTTPS traffic.
[Mitigation] Apply the official Microsoft security updates immediately and monitor network traffic for non-standard ECC parameters.