CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
ARM Mali GPU Kernel Driver Memory Leak and Information Disclosure Vulnerability (CVE-2023-26083) Technical Advisory
[Affected Scope] ARM Mali GPU Kernel Drivers (Midgard r6p0-r32p0, Bifrost r0p0-r42p0, Valhall r19p0-r42p0, Avalon r41p0-r42p0)
[Impact] A local non-privileged user can perform valid GPU processing operations to expose sensitive kernel metadata, facilitating KASLR bypass and local privilege escalation (LPE)
[Mitigation] Apply official security patches from chipset vendors and OEMs, and immediately upgrade device firmware to the latest version
Cisco IOS and IOS XE IKEv2 Packet Processing Remote Denial of Service and Memory Leak Vulnerability (CVE-2018-0158)
[Affected Scope] Cisco devices running Cisco IOS or Cisco IOS XE Software with the IKEv2 protocol enabled.
[Impact] An unauthenticated, remote attacker can trigger a continuous memory leak by sending crafted IKEv2 packets, eventually causing a device reload and a complete Denial of Service (DoS) condition.
[Mitigation] Apply the official Cisco software updates or restrict access to IKEv2 ports (UDP 500/4500) using Infrastructure Access Control Lists (iACLs).