CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
WordPress Core Remote Code Execution (RCE) Vulnerability Alert (CVE-2026-119977)
[Affected Scope] WordPress Core versions 4.7 through 7.1.3
[Impact] Unauthenticated attackers can execute arbitrary code on the server by exploiting predictable staging paths during the core upgrade process
[Mitigation] Immediately upgrade to WordPress 7.1.4 or later and restrict web access to the upgrade staging directories
Linux Kernel POSIX CPU Timers Race Condition Vulnerability (CVE-2025-38352) Technical Advisory
[Affected Scope] Linux kernel deployments where CONFIG_POSIX_CPU_TIMERS_TASK_WORK is disabled or not supported
[Impact] Local attackers can exploit a race condition to trigger a kernel panic (DoS) or potentially achieve Local Privilege Escalation (LPE) via memory corruption
[Mitigation] Apply the official stable kernel patches or ensure CONFIG_POSIX_CPU_TIMERS_TASK_WORK=y is enabled in the kernel configuration
VMware ESXi and Workstation TOCTOU Out-of-Bounds Write Vulnerability (CVE-2025-22224) Analysis and Mitigation Guide
[Affected Scope] VMware ESXi and Workstation products
[Impact] A malicious actor with local administrative privileges on a guest VM can execute arbitrary code within the host's VMX process, leading to a virtual machine escape
[Mitigation] Apply the latest security patches provided by Broadcom and restrict administrative access within guest virtual machines
Windows Kernel Elevation of Privilege Vulnerability (CVE-2024-30088) Security Advisory
[Affected Scope] Windows 10, Windows 11, and Windows Server operating systems
[Impact] Local attackers can exploit a TOCTOU race condition in the kernel to execute arbitrary code with SYSTEM privileges
[Mitigation] Immediately apply the latest Microsoft Cumulative Updates and restrict local access on unpatched systems
Apple iOS, iPadOS, and macOS Pointer Authentication (PAC) Bypass Vulnerability (CVE-2022-48618, CISA KEV)
[Affected Scope] Apple operating systems prior to iOS 16.2, iPadOS 16.2, macOS Ventura 13.1, watchOS 9.2, and tvOS 16.2
[Impact] A local attacker with arbitrary read and write capabilities can bypass Pointer Authentication (PAC) to achieve full kernel-level code execution
[Mitigation] Immediately update affected devices to iOS 16.2, iPadOS 16.2, macOS Ventura 13.1, or later versions
Microsoft Outlook Security Feature Bypass Vulnerability (CVE-2023-35311) Security Advisory
[Affected Scope] Broad range of Microsoft Office products including Microsoft Outlook 2013, 2016, 2019, 2021, and Microsoft 365 Apps for Enterprise
[Impact] Attackers can bypass Outlook security warning prompts via specially crafted links, potentially leading to subsequent Remote Code Execution (RCE)
[Mitigation] Immediately apply the official Microsoft security patches and restrict untrusted link execution via Group Policy (GPO) or registry hardening
Red Hat and Linux libuser /etc/passwd Direct Modification Vulnerability (CVE-2015-3246) Advisory
[Affected Scope] Linux systems utilizing libuser versions before 0.56.13-8 and 0.60 before 0.60-7, specifically via the userhelper utility in the usermode package
[Impact] Local attackers can cause a Denial of Service (DoS) by corrupting the /etc/passwd file, or combine this with CVE-2015-3245 to achieve full root privilege escalation
[Mitigation] Immediately update the libuser and usermode packages to the latest patched versions using your system package manager