CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Linux Kernel IPv6 Socket Memory Corruption Vulnerability (CVE-2026-53362) Analysis and Mitigation Guide
[Affected Scope] Linux kernel systems utilizing UDPv6 sockets with MSG_MORE and MSG_SPLICE_PAGES flags
[Impact] Unprivileged local users can trigger a heap out-of-bounds write, leading to system crash (Denial of Service) or Local Privilege Escalation (LPE)
[Mitigation] Apply the latest stable kernel patches from upstream or your Linux distribution vendor, and restrict unprivileged user namespaces if immediate patching is not feasible
Google Chrome WebRTC Heap Buffer Overflow Vulnerability (CVE-2023-7024) Security Advisory
[Affected Scope] Google Chrome and Chromium-based browsers prior to version 120.0.6099.129
[Impact] A remote attacker can exploit heap corruption via a crafted HTML page, potentially leading to arbitrary code execution (RCE)
[Mitigation] Immediately update Google Chrome to the latest stable version (120.0.6099.129 or higher)
Google Chrome and libvpx VP8 Encoding Heap Buffer Overflow Vulnerability (CVE-2023-5217) Security Advisory
[Affected Scope] Google Chrome versions prior to 117.0.5938.132 and libvpx versions prior to 1.13.1.
[Impact] A remote attacker can trigger heap corruption via a crafted HTML page, potentially leading to arbitrary remote code execution (RCE).
[Mitigation] Immediately update Google Chrome to the latest version and upgrade the libvpx library dependency to v1.13.1 or higher in all environments.
Google Chrome and libwebp Heap Buffer Overflow Vulnerability (CVE-2023-4863)
[Affected Scope] Google Chrome prior to 116.0.5845.187 and libwebp library prior to 1.3.2
[Impact] A remote attacker can trigger an out-of-bounds memory write and potentially execute arbitrary code via a crafted HTML page containing a malicious WebP image
[Mitigation] Immediately update Google Chrome to version 116.0.5845.187 or higher, and upgrade libwebp dependency to 1.3.2 or above
Fortinet FortiOS and FortiProxy SSL-VPN Heap-based Buffer Overflow Remote Code Execution Vulnerability (CVE-2022-42475) Security Advisory
[Affected Scope] FortiOS versions 7.2.0 to 7.2.2, 7.0.0 to 7.0.8, 6.4.0 to 6.4.10, 6.2.0 to 6.2.11, 6.0.15 and earlier; FortiProxy versions 7.2.0 to 7.2.1, 7.0.7 and earlier
[Impact] An unauthenticated remote attacker can execute arbitrary code or commands with root privileges on the target system by sending specifically crafted HTTP/HTTPS requests
[Mitigation] Immediately upgrade to the patched firmware versions or disable the SSL-VPN service and restrict access using local-in policies if patching is delayed
Google Chrome GPU Heap Buffer Overflow Vulnerability (CVE-2022-4135) Analysis and Mitigation Guide
[Affected Scope] Google Chrome and Chromium-based browsers prior to version 107.0.5304.121
[Impact] A remote attacker who has compromised the renderer process can bypass the browser sandbox and potentially execute arbitrary code via a crafted HTML page
[Mitigation] Immediately update Google Chrome and Chromium-based browsers to the latest stable version (107.0.5304.121 or higher)
Google Chrome & WebRTC Heap Buffer Overflow Vulnerability (CVE-2022-2294) Technical Advisory
[Affected Scope] Google Chrome prior to version 103.0.5060.114 and other applications utilizing the WebRTC library
[Impact] A remote attacker can trigger heap corruption and potentially execute arbitrary code or cause a Denial of Service (DoS) via a crafted HTML page
[Mitigation] Immediately update Google Chrome and Chromium-based browsers to version 103.0.5060.114 or later