CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Linux Kernel Dirty Pipe Local Privilege Escalation Vulnerability (CVE-2022-0847)
[Affected Scope] Linux kernel versions 5.8 and outstanding up to versions prior to 5.16.11, 5.15.25, and 5.10.102
[Impact] An unprivileged local user can write arbitrary data to the page cache of read-only files, leading to full root privilege escalation
[Mitigation] Immediately upgrade the Linux kernel to the latest patched stable release and reboot the system
Apple macOS and iOS XNU Kernel Memory Information Disclosure Vulnerability (CVE-2020-27950)
[Affected Scope] Apple devices running macOS Big Sur prior to 11.0.1, iOS/iPadOS prior to 14.2, and watchOS prior to 7.1
[Impact] A local attacker can execute a malicious application to disclose sensitive kernel memory, allowing them to bypass Kernel Address Space Layout Randomization (KASLR) and facilitate subsequent privilege escalation
[Mitigation] Apply the official security updates provided by Apple to upgrade the operating system to the latest patched version
Mozilla Firefox and Thunderbird Uninitialized Memory Information Disclosure (CVE-2013-1675)
[Affected Scope] Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and Thunderbird ESR 17.x before 17.0.6
[Impact] Remote attackers can extract sensitive process memory data via crafted web content, potentially bypassing memory protection mechanisms
[Mitigation] Immediately upgrade all affected installations to Firefox 21.0 / Thunderbird 17.0.6 or later