CVE Vulnerability Advisory Database

[Affected Scope] PHP 8.1, 8.2, and 8.3 environments without the latest security patches.

[Impact] Remote attackers can achieve arbitrary code execution (RCE) by exploiting memory corruption in the PHP global state.

[Mitigation] Immediately update PHP to the latest security release and restart PHP-FPM/Web server processes.

[Affected Scope] All web applications and server environments running on the PHP engine.

[Impact] Unauthenticated remote attackers can trigger Out-of-Memory (OOM) conditions to execute arbitrary code (RCE) with system privileges.

[Mitigation] Immediately apply official PHP security patches and restrict abnormal memory allocation via php.ini configurations.

[Affected Scope] Microsoft Windows operating systems utilizing Windows Runtime (WinRT), including Windows 10, Windows 11, and Windows Server 2016/2019/2022

[Impact] Successful exploitation allows an attacker to execute arbitrary code with the privileges of the active user by tricking them into opening a specially crafted file

[Mitigation] Apply the official Microsoft Cumulative Updates immediately and restrict execution of untrusted files

[Affected Scope] Systems running unpatched versions impacted by CVE-2015-1770

[Impact] Microsoft Office 2013 SP1 and 2013 RT SP1 allows remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Of...

[Mitigation] Apply vendor security patches and restrict external network exposure.