CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Windows ALPC Heap-Based Buffer Overflow Privilege Escalation Vulnerability (CVE-2026-85880) Security Advisory
[Affected Scope] Locally authenticated users across Microsoft Windows operating systems
[Impact] Local attackers can elevate privileges to SYSTEM level, gaining full control over the target system and executing arbitrary code
[Mitigation] Apply the official Microsoft security patches immediately and restrict local access on unpatched assets
Citrix NetScaler ADC and Gateway Memory Disclosure Vulnerability (CVE-2025-5777, CitrixBleed 2.0) Urgent Security Advisory
[Affected Scope] Citrix NetScaler ADC and Gateway appliances configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) or AAA virtual server
[Impact] Unauthenticated remote attackers can exploit insufficient input validation to read sensitive system memory, potentially exposing active session tokens and credentials
[Mitigation] Immediately apply the official security patches provided by Citrix (CTX693420) and terminate all active user sessions
Linux Kernel HID Subsystem Memory Information Disclosure Vulnerability (CVE-2024-50302)
[Affected Scope] All Linux kernel-based systems utilizing HID (Human Interface Device) drivers
[Impact] Local attackers can exploit uninitialized memory buffers to leak sensitive kernel memory contents via specially-crafted HID reports
[Mitigation] Apply the latest stable kernel updates provided by your Linux distribution and reboot the system
Google Pixel Firmware Information Disclosure Vulnerability due to Uninitialized Data (CVE-2024-29745)
[Affected Scope] Google Pixel devices and Android operating system
[Impact] Local attackers can disclose sensitive system memory information without requiring additional execution privileges or user interaction
[Mitigation] Immediately apply the April 2024 Google Pixel security update and upgrade to the latest firmware version
Windows Win32k Kernel Memory Handling Local Privilege Escalation Vulnerability (CVE-2019-1458) Analysis and Mitigation Guide
[Affected Scope] Windows 7, 8.1, 10 and Windows Server 2008, 2012, 2016, 2019 utilizing the Win32k subsystem
[Impact] A local attacker can execute arbitrary code in kernel mode (SYSTEM privileges), completely bypassing security controls and compromising the host
[Mitigation] Immediately apply the official Microsoft cumulative security updates (KB) and restrict unauthorized local executable execution