CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Windows Kernel Race Condition and Double Free Vulnerability (CVE-2025-62215) Local Privilege Escalation Advisory
[Affected Scope] Windows operating system kernel components and environments utilizing shared resources
[Impact] An authorized local attacker can trigger a race condition to cause kernel memory corruption, leading to local privilege escalation (LPE) to SYSTEM level
[Mitigation] Immediately apply the official Microsoft cumulative security updates and restrict local access privileges on unpatched systems
Linux Kernel af_alg_sendmsg Race Condition Vulnerability Advisory (CVE-2025-39964)
[Affected Scope] All systems and services utilizing the Linux Kernel Crypto API (AF_ALG) interface.
[Impact] Internal socket state inconsistency and potential Denial of Service (DoS) due to concurrent write operations.
[Mitigation] Update to the latest stable kernel version provided by your distribution and reboot.
Windows Search Remote Code Execution Vulnerability (CVE-2023-36884) Security Advisory & Mitigation Guide
[Affected Scope] All endpoint systems running Microsoft Windows and Microsoft Office suites
[Impact] Remote attackers can execute arbitrary code with system privileges via specially crafted documents, leading to full system compromise
[Mitigation] Apply the official Microsoft cumulative security updates immediately, or implement the registry-based workaround
Windows User Profile Service Elevation of Privilege Vulnerability (CVE-2022-26904) Analysis and Mitigation Guide
[Affected Scope] Most Windows operating system versions, including Windows 10, 11, and Windows Server 2008 through 2022
[Impact] A locally authenticated attacker can exploit a race condition to execute arbitrary code with SYSTEM privileges, leading to complete system compromise
[Mitigation] Immediately apply the official Microsoft cumulative security updates and restrict multi-user interactive logins on unpatched systems
Linux Kernel & Android af_unix.c Use-After-Free Local Privilege Escalation Vulnerability (CVE-2021-0920)
[Affected Scope] Android kernel and Linux kernel implementations of AF_UNIX sockets
[Impact] Local attackers can exploit this to gain System execution privileges without any user interaction, leading to full device compromise
[Mitigation] Apply the Android November 2021 security patch or update to the latest upstream Linux kernel version
Samsung Mobile MFC Charger Driver Race Condition Vulnerability (CVE-2021-25395) Technical Advisory
[Affected Scope] Samsung mobile devices running firmware versions prior to SMR (Security Maintenance Release) MAY-2021 Release 1
[Impact] Local attackers with compromised radio privileges can bypass signature checks via a race condition, leading to arbitrary code execution in the kernel context
[Mitigation] Apply the official Samsung security update (SMR MAY-2021 Release 1 or later) immediately and restrict unauthorized application installation
Samsung Mobile MFC Charger Driver Race Condition Use-After-Free (CVE-2021-25394) Technical Analysis and Hardening Guide
[Affected Scope] Samsung mobile devices running firmware versions prior to SMR (Samsung Security Maintenance Release) MAY-2021 Release 1.
[Impact] A local attacker with compromised radio privileges can trigger a race condition to perform an arbitrary write in kernel memory, leading to local privilege escalation (LPE).
[Mitigation] Apply the official Samsung security update (SMR MAY-2021 Release 1 or later) and restrict unauthorized local application execution.
Google Chrome Audio Component Data Race Remote Code Execution Vulnerability (CVE-2021-21166)
[Affected Scope] Google Chrome prior to version 89.0.4389.72
[Impact] Remote attackers can trigger heap corruption via a crafted HTML page, potentially leading to arbitrary code execution within the browser process
[Mitigation] Immediately update Google Chrome to the latest stable version (89.0.4389.72 or higher)
Mozilla Firefox and Thunderbird ReadableStream Race Condition Use-After-Free Vulnerability (CVE-2020-6820)
[Affected Scope] Firefox < 74.0.1, Firefox ESR < 68.6.1, and Thunderbird < 68.7.0
[Impact] Remote attackers can execute arbitrary code or escape the browser sandbox via a race condition leading to a Use-After-Free (UAF) state, which has been actively exploited in targeted attacks
[Mitigation] Immediately upgrade all installations of Firefox, Firefox ESR, and Thunderbird to the latest patched versions
Mozilla Firefox and Thunderbird nsDocShell Use-After-Free Remote Code Execution Vulnerability (CVE-2020-6819)
[Affected Scope] Firefox < 74.0.1, Firefox ESR < 68.6.1, and Thunderbird < 68.7.0
[Impact] A race condition leading to a Use-After-Free (UAF) allows remote attackers to execute arbitrary code or cause a Denial of Service (DoS) via targeted web-based exploits
[Mitigation] Immediately update all affected Mozilla browser and mail client installations to the latest patched versions
Linux Kernel Copy-on-Write Race Condition Local Privilege Escalation (Dirty COW, CVE-2016-5195)
[Affected Scope] All Linux distributions and Android systems running Linux kernel versions 2.x through 4.x before 4.8.3
[Impact] A local attacker can exploit a race condition to write to read-only memory mappings, gaining root privileges on the target system
[Mitigation] Apply the latest kernel security patches provided by your OS vendor and reboot the system
Linux Kernel futex_requeue Local Privilege Escalation Vulnerability (CVE-2014-3153, Towelroot)
[Affected Scope] All Linux distributions and Android devices running Linux kernel versions up to and including 3.14.5
[Impact] A local unprivileged user can exploit this vulnerability to corrupt kernel memory and gain full root privileges on the target system
[Mitigation] Upgrade the Linux kernel to the latest patched version provided by your OS vendor and reboot the system
Linux Kernel n_tty_write Race Condition Local Privilege Escalation (CVE-2014-0196)
[Affected Scope] All Linux systems running Linux kernel versions up to and including 3.14.3
[Impact] Local attackers can exploit a race condition to corrupt kernel memory, leading to a denial of service (system crash) or full root privilege escalation
[Mitigation] Apply the latest kernel security updates provided by your OS vendor and reboot the system