CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Windows IKE Extension Double Free Remote Code Execution Vulnerability (CVE-2026-33824)
[Affected Scope] Internet Key Exchange (IKE) Extension service running on Microsoft Windows and Windows Server operating systems
[Impact] An unauthenticated remote attacker can execute arbitrary code with system/kernel privileges over the network by sending specially crafted IKE packets
[Mitigation] Apply the official Microsoft security updates immediately, and restrict external access to IKE/IPsec ports (UDP 500/4500) as a temporary workaround
Windows Kernel Race Condition and Double Free Vulnerability (CVE-2025-62215) Local Privilege Escalation Advisory
[Affected Scope] Windows operating system kernel components and environments utilizing shared resources
[Impact] An authorized local attacker can trigger a race condition to cause kernel memory corruption, leading to local privilege escalation (LPE) to SYSTEM level
[Mitigation] Immediately apply the official Microsoft cumulative security updates and restrict local access privileges on unpatched systems
Linux Kernel af_packet.c Double Free Local Privilege Escalation Vulnerability (CVE-2021-22600) Security Advisory
[Affected Scope] Linux Kernel environments prior to specific patched versions
[Impact] A local attacker can trigger a double free via crafted system calls, leading to kernel memory corruption, Denial of Service (DoS), or local privilege escalation to root.
[Mitigation] Upgrade the Linux kernel to the latest distribution package or rebuild with upstream commit ec6af094ea28.
Apple iOS and macOS Kernel Double-Free Vulnerability Enabling Arbitrary Code Execution with Kernel Privileges (CVE-2020-9859)
[Affected Scope] Devices running iOS/iPadOS versions prior to 13.5.1, macOS Catalina prior to 10.15.5 Supplemental Update, tvOS prior to 13.4.6, and watchOS prior to 6.2.6
[Impact] A local application can exploit this vulnerability to execute arbitrary code with elevated kernel privileges, completely compromising the operating system
[Mitigation] Immediately apply the official Apple security updates to transition to iOS/iPadOS 13.5.1, macOS Catalina 10.15.5 Supplemental Update, or later
Adobe Acrobat and Reader Double Free Remote Code Execution Vulnerability Analysis (CVE-2018-4990)
[Affected Scope] Adobe Acrobat and Reader versions 2018.011.20038 and earlier, 2017.011.30079 and earlier, and 2015.006.30417 and earlier
[Impact] Successful exploitation allows remote attackers to execute arbitrary code within the context of the current user session
[Mitigation] Immediately apply the official Adobe security updates (APSB18-09) to patch the vulnerability
Adobe Flash Player and AIR Double Free Vulnerability Analysis and Mitigation Guide (CVE-2014-0502)
[Affected Scope] Adobe Flash Player on Windows, macOS, Linux, and Adobe AIR/SDK on Android and desktop environments prior to specific patched versions
[Impact] Remote attackers can execute arbitrary code (RCE) and gain full control of the target system via crafted Flash content
[Mitigation] Upgrade to the patched versions immediately, or completely uninstall and disable Adobe Flash Player across all enterprise endpoints