CVE Vulnerability Advisory Database

[Affected Scope] All web servers, browsers, Node.js environments, and backend applications using Google Brotli library versions 1.0.3 through 1.2.0

[Impact] Remote unauthenticated attackers can corrupt decoder state memory via crafted compressed streams, leading to sensitive data disclosure, DoS, or Remote Code Execution (RCE)

[Mitigation] Immediately update Brotli libraries and dependent packages to the latest secure versions (1.0.10, 1.1.1, 1.2.1 or higher)

[Affected Scope] All Apple devices running versions prior to iOS 18.7.11/26.7.1 and macOS Sequoia 15.8.1/Tahoe 26.7.1.

[Impact] Processing a maliciously crafted file can lead to arbitrary code execution with system privileges, resulting in full device compromise.

[Mitigation] Immediately apply the latest security patches provided by Apple (e.g., iOS 18.7.11, macOS 15.8.1) and restart the device.

[Affected Scope] Google Chrome versions prior to 153.0.8010.36 and Chromium-based browsers

[Impact] Remote attackers can execute arbitrary code within the browser sandbox via a crafted HTML page

[Mitigation] Immediately update Google Chrome to version 153.0.8010.36 or later

[Affected Scope] Linux kernel systems utilizing UDPv6 sockets with MSG_MORE and MSG_SPLICE_PAGES flags

[Impact] Unprivileged local users can trigger a heap out-of-bounds write, leading to system crash (Denial of Service) or Local Privilege Escalation (LPE)

[Mitigation] Apply the latest stable kernel patches from upstream or your Linux distribution vendor, and restrict unprivileged user namespaces if immediate patching is not feasible

[Affected Scope] Linux systems utilizing ebtables SNAT targets within bridge netfilter configurations.

[Impact] Local attackers can trigger kernel memory corruption, leading to Denial of Service (DoS) or Privilege Escalation.

[Mitigation] Apply the latest kernel security patches provided by your distribution and reboot.

[Affected Scope] Google Chrome and Chromium-based browsers prior to version 149.0.7827.103

[Impact] Remote attackers can execute arbitrary code inside the V8 sandbox via a crafted HTML page

[Mitigation] Immediately update Google Chrome to the latest stable version (149.0.7827.103 or higher)

[Affected Scope] Linux kernel network stack (skbuff) and systems utilizing IPsec (ESP).

[Impact] Local attackers can exploit the packet coalescing process to overwrite kernel memory (e.g., page cache), potentially leading to privilege escalation.

[Mitigation] Immediately apply the latest kernel security patches provided by your distribution and reboot the system.

[Affected Scope] Palo Alto Networks PAN-OS software running on PA-Series and VM-Series firewalls with the User-ID™ Authentication Portal (Captive Portal) service enabled.

[Impact] An unauthenticated remote attacker can execute arbitrary code with root privileges on the firewall by sending specially crafted packets.

[Mitigation] Apply the latest security patches immediately, and restrict access to the User-ID™ Authentication Portal to trusted internal IP addresses only.

[Affected Scope] Google Chrome and Chromium-based browsers prior to version 146.0.7680.75

[Impact] Remote attackers can execute arbitrary code or cause a denial of service (system crash) via a crafted HTML page

[Mitigation] Immediately update Google Chrome to the latest stable version (146.0.7680.75 or higher)

[Affected Scope] FortiOS versions 6.4 through 7.6 and FortiSwitchManager versions 7.0 through 7.2.

[Impact] Unauthenticated remote attackers can execute arbitrary code or commands with system privileges by sending crafted packets, leading to full system compromise.

[Mitigation] Immediately apply the latest firmware updates provided by Fortinet and restrict exposure of management interfaces and VPN services to the public internet.

[Affected Scope] WatchGuard Firebox appliances running Fireware OS configured with IKEv2 mobile user VPN or branch office VPN using a dynamic gateway peer, or where these configurations were previously deleted but a static gateway peer VPN remains.

[Impact] A critical vulnerability (CVSS 9.8) allowing unauthenticated remote attackers to trigger an out-of-bounds write (CWE-787) in the iked process via crafted IKEv2 packets, leading to arbitrary code execution (RCE) with root privileges.

[Mitigation] Since this vulnerability is actively exploited and listed in the CISA KEV catalog, immediately upgrade to the patched Fireware OS version and restrict or disable IKEv2 services where possible.

[Affected Scope] Google Chrome and Chromium-based browsers (such as Microsoft Edge) on macOS prior to version 143.0.7499.110

[Impact] A remote attacker can trigger out-of-bounds memory access via a crafted HTML page, potentially leading to arbitrary code execution (RCE) or renderer process crashes

[Mitigation] Immediately update all Chromium-based browsers to the latest stable version (143.0.7499.110 or higher) and enforce automated update policies across the enterprise

[Affected Scope] WatchGuard Firebox appliances running Fireware OS with IKEv2 Mobile User VPN or Branch Office VPN (BOVPN) configured with a dynamic gateway peer (including legacy configurations where static peers remain active)

[Impact] Unauthenticated remote attackers can execute arbitrary code with system privileges by sending specially crafted IKEv2 packets, leading to complete compromise of the appliance

[Mitigation] Immediately upgrade to the patched Fireware OS version, or temporarily disable IKEv2 VPN services and restrict access to trusted IP addresses

[Affected Scope] Samsung Android mobile devices and the embedded libimagecodec.quram.so library prior to the SMR Sep-2025 Release 1 security patch

[Impact] Remote attackers can execute arbitrary code with high privileges without user interaction by tricking the system into processing a specially crafted image file

[Mitigation] Immediately apply the Samsung official software update (SMR Sep-2025 Release 1 or later) and restrict automatic downloading of media files from untrusted sources

[Affected Scope] Samsung Android mobile devices running security patch levels prior to SMR Apr-2025 Release 1

[Impact] Remote attackers can execute arbitrary code with high privileges and compromise the device without user interaction by triggering an out-of-bounds write during image decoding.

[Mitigation] Immediately apply the Samsung April 2025 Security Maintenance Release (SMR Apr-2025 Release 1) or later.

[Affected Scope] Apple devices running iOS/iPadOS versions prior to 15.8.5, 16.7.12, 18.6.2, iPadOS 17.7.10, or macOS versions prior to Sequoia 15.6.1, Sonoma 14.7.8, and Ventura 13.7.8

[Impact] Processing a maliciously crafted image file may lead to memory corruption, allowing remote attackers to execute arbitrary code or gain full system control without user interaction

[Mitigation] Immediately apply the official security patches provided by Apple (iOS 15.8.5, 16.7.12, 18.6.2, iPadOS 17.7.10, macOS 15.6.1, etc.)

[Affected Scope] Google Chrome and Chromium-based browsers (including Microsoft Edge) prior to version 137.0.7151.68

[Impact] A remote attacker can trigger heap corruption and potentially execute arbitrary code within the browser renderer process via a crafted HTML page

[Mitigation] Immediately update all affected browsers to the latest stable version (137.0.7151.68 or higher) and enforce automatic update policies

[Affected Scope] Multiple Fortinet appliance product lines including FortiCamera, FortiMail, FortiNDR, FortiRecorder, and FortiVoice

[Impact] Unauthenticated remote attackers can execute arbitrary code or commands with root privileges by sending crafted HTTP requests containing a malicious hash cookie

[Mitigation] Immediately upgrade to the patched firmware versions provided by the vendor and restrict external access to management interfaces

[Affected Scope] Ivanti Connect Secure (before 22.7R2.6), Policy Secure (before 22.7R1.4), and ZTA Gateways (before 22.8R2.2)

[Impact] Unauthenticated remote attackers can trigger a stack-based buffer overflow to execute arbitrary code with root privileges on the target gateway

[Mitigation] Immediately apply the official security patches provided by the vendor and restrict access to external-facing management interfaces

[Affected Scope] Devices running iOS 15/16/17/18, iPadOS, macOS Sequoia, visionOS, watchOS, and Safari browser

[Impact] Processing maliciously crafted web content may allow an attacker to break out of the Web Content sandbox and execute arbitrary code, with active exploitation reported in targeted attacks

[Mitigation] Immediately apply the official security updates released by Apple, including iOS 18.3.2 and macOS 15.3.2