CVE Vulnerability Advisory Database

[Affected Scope] PHP 8.1, 8.2, and 8.3 environments without the latest security patches.

[Impact] Remote attackers can achieve arbitrary code execution (RCE) by exploiting memory corruption in the PHP global state.

[Mitigation] Immediately update PHP to the latest security release and restart PHP-FPM/Web server processes.

[Affected Scope] All web applications and server environments running on the PHP engine.

[Impact] Unauthenticated remote attackers can trigger Out-of-Memory (OOM) conditions to execute arbitrary code (RCE) with system privileges.

[Mitigation] Immediately apply official PHP security patches and restrict abnormal memory allocation via php.ini configurations.

[Affected Scope] Systems running Microsoft Windows operating systems utilizing the Ancillary Function Driver for WinSock (afd.sys)

[Impact] An authorized local attacker can exploit kernel memory corruption to execute arbitrary code with SYSTEM privileges, leading to complete system compromise

[Mitigation] Immediately apply the latest cumulative security updates provided by Microsoft and restrict unauthorized local access

[Affected Scope] Google Chrome versions prior to 146.0.7680.178

[Impact] A remote attacker who has compromised the renderer process can execute arbitrary code via a crafted HTML page

[Mitigation] Immediately update Google Chrome to the latest stable version (146.0.7680.178 or higher)

[Affected Scope] Google Chrome browser versions prior to 145.0.7632.75

[Impact] Remote attackers can execute arbitrary code inside the browser sandbox via a crafted HTML page

[Mitigation] Immediately update Google Chrome to the latest stable version (145.0.7632.75 or higher)

[Affected Scope] Apple devices running iOS/iPadOS prior to 18.7.3 and 26.2, macOS Tahoe prior to 26.2, and Safari prior to 26.2

[Impact] Processing maliciously crafted web content may lead to arbitrary code execution (RCE), with active exploitation reported in highly targeted attacks

[Mitigation] Immediately apply the official security updates (version 26.2 / 18.7.3 or later) provided by Apple

[Affected Scope] Windows operating systems utilizing the Windows Cloud Files Mini Filter Driver (cldflt.sys)

[Impact] Local authorized attackers can corrupt kernel memory to elevate privileges to SYSTEM and execute arbitrary code

[Mitigation] Immediately apply the official Microsoft security updates and monitor mini-filter driver activities

[Affected Scope] macOS Ventura prior to 13.5, iOS/iPadOS prior to 16.6, iOS/iPadOS prior to 15.8.7, and Safari prior to 16.6

[Impact] Processing maliciously crafted web content may lead to memory corruption, potentially allowing remote attackers to execute arbitrary code on the target device

[Mitigation] Immediately apply the official software updates provided by Apple to upgrade operating systems and Safari to the patched versions

[Affected Scope] Android Operating System and Chrome browser environments

[Impact] Local attackers can escape the Chrome sandbox and escalate privileges to system_server without any user interaction or additional execution privileges

[Mitigation] Immediately apply the Android Security Bulletin - September 2025 patch or later to all affected devices

[Affected Scope] Android devices equipped with Qualcomm Adreno GPU drivers and running Google Chrome browser

[Impact] Remote attackers can exploit GPU rendering pipelines to trigger memory corruption, potentially leading to sandbox escape and arbitrary code execution

[Mitigation] Apply the latest security patches released by Qualcomm and device OEMs, and update Google Chrome to the latest version

[Affected Scope] Windows and Windows Server operating systems utilizing the WinSock Ancillary Function Driver (afd.sys)

[Impact] An authorized local attacker can execute arbitrary code in kernel mode, elevating privileges to SYSTEM, which is actively exploited in the wild

[Mitigation] Immediately apply the official Microsoft security updates and restrict unauthorized local access to critical systems

[Affected Scope] All supported versions of Microsoft Windows and Windows Server utilizing the Common Log File System (CLFS) driver.

[Impact] An authorized local attacker can exploit this vulnerability to execute arbitrary code with SYSTEM privileges, leading to complete host compromise.

[Mitigation] Immediately apply the latest cumulative security updates provided by Microsoft and restrict unauthorized local interactive access.

[Affected Scope] Desktop Window Manager (DWM) component in Microsoft Windows 10, Windows 11, and Windows Server operating systems

[Impact] An authorized local attacker can exploit a Use-After-Free vulnerability to execute arbitrary code with SYSTEM privileges, leading to complete host takeover

[Mitigation] Immediately apply the official Microsoft cumulative security updates and monitor unpatched systems for anomalous DWM crashes

[Affected Scope] Windows 10, Windows 11, and Windows Server operating systems utilizing the Common Log File System (CLFS.sys) driver.

[Impact] An authorized local attacker can execute arbitrary code in kernel mode and elevate privileges to NT AUTHORITY\SYSTEM.

[Mitigation] Immediately apply the latest cumulative security updates released by Microsoft (March 2025 Patch Tuesday or later).

[Affected Scope] Systems running Microsoft Windows operating systems utilizing the Win32k kernel subsystem

[Impact] An authorized local attacker can elevate privileges to SYSTEM level, gaining full control over the affected system

[Mitigation] Immediately apply the latest cumulative security updates provided by Microsoft and restrict unauthorized local access

[Affected Scope] Apple operating systems prior to iOS 18.3, iPadOS 18.3, macOS Sequoia 15.3, and other legacy versions

[Impact] A malicious application can exploit a Use-After-Free vulnerability to elevate privileges to system/kernel level and execute arbitrary code

[Mitigation] Immediately upgrade all affected Apple devices to the latest patched versions (iOS 18.3, macOS 15.3, etc.) via official software update channels

[Affected Scope] Windows Server and Desktop operating systems running Windows Hyper-V virtualization environments

[Impact] A local attacker with low privileges can exploit a Use-After-Free (UAF) vulnerability to execute arbitrary code with SYSTEM privileges, leading to complete host compromise

[Mitigation] Immediately apply the February 2025 Microsoft Patch Tuesday security updates and restrict local access to virtualization hosts

[Affected Scope] Windows 10, 11, and Windows Server systems with the Hyper-V virtualization role enabled

[Impact] Local attackers can exploit a Use-After-Free (UAF) vulnerability to execute arbitrary code with kernel-level (SYSTEM) privileges, leading to complete host compromise

[Mitigation] Immediately apply the February 2025 Microsoft Cumulative Security Updates and disable unnecessary Hyper-V services

[Affected Scope] Firefox < 131.0.2, Firefox ESR < 128.3.1, Firefox ESR < 115.16.1, Thunderbird < 131.0.1, Thunderbird < 128.3.1, and Thunderbird < 115.16.0

[Impact] An attacker can achieve arbitrary remote code execution (RCE) within the browser's content process, with active exploitation reported in the wild

[Mitigation] Immediately update all affected installations to the latest patched versions (Firefox 131.0.2+, ESR 128.3.1+, ESR 115.16.1+, Thunderbird 131.0.1+, 128.3.1+, 115.16.0+)

[Affected Scope] Android and embedded devices powered by Qualcomm chipsets utilizing specific HLOS (High-Level Operating System) memory drivers

[Impact] Local attackers with low privileges can trigger a Use-After-Free (UAF) condition, leading to kernel memory corruption and full local privilege escalation (LPE) to root

[Mitigation] Apply the official security patches released by OEMs (October 2024 or later) and restrict access to kernel memory drivers using strict SELinux policies