CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
F5 BIG-IP APM OAuth Authorization Server Remote Code Execution (RCE) Vulnerability (CVE-2026-94127)
[Affected Scope] F5 BIG-IP APM virtual servers configured with an OAuth Authorization Server profile.
[Impact] Unauthenticated attackers can execute arbitrary code with system privileges via specially crafted traffic, leading to full system compromise.
[Mitigation] Immediately apply the latest security patches or Hotfixes provided by F5, and consider disabling the OAuth Authorization Server profile until patched.
Windows ALPC Heap-Based Buffer Overflow Privilege Escalation Vulnerability (CVE-2026-85880) Security Advisory
[Affected Scope] Locally authenticated users across Microsoft Windows operating systems
[Impact] Local attackers can elevate privileges to SYSTEM level, gaining full control over the target system and executing arbitrary code
[Mitigation] Apply the official Microsoft security patches immediately and restrict local access on unpatched assets
Fortinet FortiOS and FortiSwitchManager Heap Buffer Overflow RCE (CVE-2025-25249)
[Affected Scope] FortiOS versions 6.4 through 7.6 and FortiSwitchManager versions 7.0 through 7.2.
[Impact] Unauthenticated remote attackers can execute arbitrary code or commands with system privileges by sending crafted packets, leading to full system compromise.
[Mitigation] Immediately apply the latest firmware updates provided by Fortinet and restrict exposure of management interfaces and VPN services to the public internet.
Windows NTFS Heap-Based Buffer Overflow Vulnerability (CVE-2025-24993) Technical Advisory
[Affected Scope] Systems running Windows Operating Systems utilizing the NTFS file system driver (ntfs.sys)
[Impact] A local authorized attacker can exploit this vulnerability to trigger a heap-based buffer overflow, leading to local privilege escalation (LPE) and arbitrary code execution with SYSTEM privileges
[Mitigation] Immediately apply the latest Microsoft cumulative security updates and restrict the mounting of untrusted external storage media and disk images
FreeType Heap Out-of-Bounds Write Vulnerability (CVE-2025-27363) Security Advisory
[Affected Scope] FreeType versions 2.13.0 and below
[Impact] Heap buffer overflow during TrueType GX and variable font parsing, potentially leading to arbitrary code execution (RCE) with active in-the-wild exploitation detected
[Mitigation] Immediately upgrade FreeType to a non-vulnerable version (2.13.1 or newer)
VMware vCenter Server DCERPC Protocol Heap Overflow Remote Code Execution Vulnerability (CVE-2024-38812) Critical Security Advisory
[Affected Scope] VMware vCenter Server versions 7.0 and 8.0, VMware Cloud Foundation versions 4.x and 5.x
[Impact] An unauthenticated remote attacker can trigger a heap overflow via specially crafted DCERPC packets, potentially executing arbitrary code with root privileges
[Mitigation] Immediately apply the official Broadcom security patches (vCenter 8.0 U3b / 7.0 U3s or later) and restrict network access to vCenter management ports
VMware vCenter Server DCERPC Protocol Heap Overflow Remote Code Execution Vulnerability (CVE-2024-37079) Security Advisory
[Affected Scope] VMware vCenter Server versions 7.0 and 8.0, and VMware Cloud Foundation versions 4.x and 5.x.
[Impact] An unauthenticated remote attacker can trigger a heap-based buffer overflow to execute arbitrary code with root privileges by sending crafted network packets.
[Mitigation] Immediately upgrade to the patched versions (vCenter 8.0 U2b / 7.0 U3r or higher) and restrict network access to DCERPC-related ports.
Fortinet FortiOS and FortiProxy SSL-VPN Heap-based Buffer Overflow Vulnerability (CVE-2023-27997) Technical Advisory
[Affected Scope] FortiOS versions 7.2.4 and below, 7.0.11 and below, 6.4.12 and below, 6.0.16 and below; FortiProxy versions 7.2.3 and below, 7.0.9 and below, 2.0.12 and below, and all 1.2/1.1 versions with SSL-VPN enabled
[Impact] An unauthenticated remote attacker can execute arbitrary code or commands with root privileges on the target appliance via specifically crafted HTTP requests
[Mitigation] Immediately upgrade FortiOS and FortiProxy to the patched versions, or disable the SSL-VPN service as a temporary workaround
Linux Kernel legacy_parse_param Heap Buffer Overflow Vulnerability (CVE-2022-0185) Technical Advisory
[Affected Scope] Linux kernel versions 5.1 and lateral, specifically environments utilizing filesystems that fallback to legacy handling and have unprivileged user namespaces enabled
[Impact] An unprivileged local attacker can trigger a heap-based buffer overflow in kernel memory, leading to local privilege escalation (LPE) to root
[Mitigation] Apply the official kernel security patches immediately, or disable unprivileged user namespaces as a temporary workaround
Linux Kernel Netfilter x_tables Heap Out-of-Bounds Write Local Privilege Escalation (CVE-2021-22555) Analysis and Mitigation Guide
[Affected Scope] Linux Kernel versions since v2.6.19-rc1 that lack the official security patch, particularly environments with user namespaces enabled
[Impact] A local attacker can trigger heap memory corruption to escalate privileges to root or cause a system-wide Denial of Service (DoS)
[Mitigation] Upgrade the Linux kernel to the latest stable release, or apply temporary workarounds to restrict unprivileged user namespace creation
Sudo Heap-Based Buffer Overflow Local Privilege Escalation Vulnerability (CVE-2021-3156, Baron Samedit)
[Affected Scope] Unix-like operating systems running Sudo versions 1.8.2 through 1.8.31p2, and 1.9.0 through 1.9.5p1
[Impact] A local non-privileged attacker can exploit this vulnerability via 'sudoedit -s' with a trailing backslash to escalate privileges to root
[Mitigation] Immediately upgrade Sudo to version 1.9.5p2 or later, or restrict execution permissions for sudoedit as a temporary workaround
Windows Kernel Elevation of Privilege Vulnerability (CVE-2020-1027) Technical Analysis and Mitigation Guide
[Affected Scope] Multiple versions of Windows OS including Windows 7, 8.1, 10, and Windows Server 2008, 2012, 2016, 2019
[Impact] A local attacker can execute arbitrary code in kernel mode and gain full SYSTEM privileges on the target machine
[Mitigation] Apply the official Microsoft security updates immediately and restrict local execution privileges for non-privileged users
VMware ESXi and Horizon DaaS OpenSLP Heap Overwrite Remote Code Execution Vulnerability (CVE-2019-5544)
[Affected Scope] OpenSLP service running on VMware ESXi and Horizon DaaS appliances.
[Impact] Unauthenticated remote attackers can execute arbitrary code or fully compromise the host by sending malicious SLP messages over the network.
[Mitigation] Apply official VMware security patches immediately, or disable the SLP service and block port 427 (TCP/UDP) as a temporary workaround.
Exim Mail Server Remote Code Execution (RCE) Vulnerability Analysis and Mitigation Guide (CVE-2019-16928)
[Affected Scope] Exim mail server versions 4.92 through 4.92.2
[Impact] Unauthenticated remote attackers can trigger a heap-based buffer overflow by sending a crafted, long EHLO command, leading to arbitrary code execution or complete denial of service (DoS)
[Mitigation] Immediately upgrade Exim to the latest stable version (4.92.3 or higher) and restrict SMTP command lengths as a temporary workaround
Cisco IOS and IOS XE DHCP Option 82 Encapsulation Heap Overflow Vulnerability (CVE-2018-0172) Analysis and Mitigation Guide
[Affected Scope] Cisco IOS and IOS XE Software with DHCP Option 82 relay functionality enabled
[Impact] Unauthenticated, remote attackers can trigger a heap overflow and force a device reload, leading to a complete Denial of Service (DoS)
[Mitigation] Apply official Cisco software updates immediately, or disable DHCP Option 82 relay features and restrict untrusted DHCP traffic
Adobe Reader and Acrobat Remote Code Execution Vulnerability (CVE-2010-0188) Analysis and Mitigation Guide
[Affected Scope] Adobe Reader and Acrobat 8.x before 8.2.1 and 9.x before 9.3.1
[Impact] Remote Code Execution (RCE) or Denial of Service (DoS) via specially crafted PDF documents
[Mitigation] Apply official Adobe security patches immediately and restrict opening untrusted PDF files
Adobe Reader and Acrobat Heap-Based Buffer Overflow Vulnerability (CVE-2009-3459) Analysis and Mitigation Guide
[Affected Scope] Adobe Reader and Acrobat versions 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2
[Impact] Remote attackers can execute arbitrary code and compromise the host system by tricking a user into opening a specially crafted PDF file
[Mitigation] Immediately upgrade to the patched versions (7.1.4, 8.1.7, or 9.2 and above) and restrict opening untrusted PDF attachments