CVE Vulnerability Advisory Database

[Affected Scope] Linux kernel systems utilizing UDPv6 sockets with MSG_MORE and MSG_SPLICE_PAGES flags

[Impact] Unprivileged local users can trigger a heap out-of-bounds write, leading to system crash (Denial of Service) or Local Privilege Escalation (LPE)

[Mitigation] Apply the latest stable kernel patches from upstream or your Linux distribution vendor, and restrict unprivileged user namespaces if immediate patching is not feasible

[Affected Scope] Linux systems utilizing ebtables SNAT targets within bridge netfilter configurations.

[Impact] Local attackers can trigger kernel memory corruption, leading to Denial of Service (DoS) or Privilege Escalation.

[Mitigation] Apply the latest kernel security patches provided by your distribution and reboot.

[Affected Scope] Linux kernel network stack (skbuff) and systems utilizing IPsec (ESP).

[Impact] Local attackers can exploit the packet coalescing process to overwrite kernel memory (e.g., page cache), potentially leading to privilege escalation.

[Mitigation] Immediately apply the latest kernel security patches provided by your distribution and reboot the system.

[Affected Scope] Windows operating systems utilizing the Windows Cloud Files Mini Filter Driver (cldflt.sys)

[Impact] Local authorized attackers can corrupt kernel memory to elevate privileges to SYSTEM and execute arbitrary code

[Mitigation] Immediately apply the official Microsoft security updates and monitor mini-filter driver activities

[Affected Scope] All systems and services utilizing the Linux Kernel Crypto API (AF_ALG) interface.

[Impact] Internal socket state inconsistency and potential Denial of Service (DoS) due to concurrent write operations.

[Mitigation] Update to the latest stable kernel version provided by your distribution and reboot.

[Affected Scope] Linux systems utilizing in-kernel TLS (ktls) offload or software implementation.

[Impact] Remote attackers can trigger memory corruption or kernel panic, potentially leading to full system compromise (RCE).

[Mitigation] Immediately update the Linux kernel to the latest stable version provided by your distribution.

[Affected Scope] Junos OS versions prior to 21.2R3-S9, 21.4R3-S10, 22.2R3-S6, 22.4R3-S6, 23.2R2-S3, 23.4R2-S4, and 24.2R1-S2/24.2R2

[Impact] A highly privileged local attacker with shell access can inject arbitrary code to compromise the integrity of the device

[Mitigation] Immediately upgrade to the recommended patched Junos OS releases and restrict local shell access to authorized administrators only

[Affected Scope] Microsoft Windows operating systems utilizing the Windows Fast FAT File System Driver (fastfat.sys)

[Impact] Local unauthorized attackers can execute arbitrary code with SYSTEM privileges by exploiting kernel-level memory corruption

[Mitigation] Apply the official Microsoft security updates immediately, or restrict auto-mounting of untrusted storage media and virtual disk images

[Affected Scope] Windows 10, 11, and Windows Server systems with the Hyper-V virtualization role enabled

[Impact] Local attackers can exploit a Use-After-Free (UAF) vulnerability to execute arbitrary code with kernel-level (SYSTEM) privileges, leading to complete host compromise

[Mitigation] Immediately apply the February 2025 Microsoft Cumulative Security Updates and disable unnecessary Hyper-V services

[Affected Scope] Windows Server and Desktop operating systems with the Windows Hyper-V virtualization role enabled

[Impact] A local attacker can exploit a heap-based buffer overflow (CWE-122) to execute arbitrary code with SYSTEM privileges, leading to complete host compromise

[Mitigation] Apply the official Microsoft security patches immediately, or temporarily disable non-essential Hyper-V services to reduce the attack surface

[Affected Scope] Systems running the Linux kernel with the ALSA (Advanced Linux Sound Architecture) USB-Audio driver enabled.

[Impact] A local attacker can trigger an out-of-bounds read by connecting a malicious USB audio device, potentially leading to kernel memory disclosure or system crash (DoS).

[Mitigation] Apply the latest Linux kernel security patches and restrict unauthorized USB device connections and driver loading.

[Affected Scope] All supported versions of Windows 10, Windows 11, and Windows Server

[Impact] A locally authenticated attacker can exploit this vulnerability to execute arbitrary code with SYSTEM privileges, leading to full host compromise

[Mitigation] Immediately apply the Microsoft official cumulative security updates released in August 2024 or later

[Affected Scope] Windows 10, 11, and Windows Server 2008 through 2022 environments

[Impact] A local attacker with low privileges can exploit a race condition to execute arbitrary code with SYSTEM privileges, leading to complete system compromise

[Mitigation] Immediately apply the Microsoft August 2024 security updates and restrict local access on unpatched systems

[Affected Scope] Windows 10, Windows 11, and Windows Server operating systems

[Impact] Local attackers can exploit a TOCTOU race condition in the kernel to execute arbitrary code with SYSTEM privileges

[Mitigation] Immediately apply the latest Microsoft Cumulative Updates and restrict local access on unpatched systems

[Affected Scope] iOS and iPadOS prior to 16.7.8 / 17.4, macOS Monterey prior to 12.7.6, macOS Ventura prior to 13.6.7, macOS Sonoma prior to 14.4, and other Apple OS platforms

[Impact] A local attacker with arbitrary kernel read and write capabilities can bypass critical kernel memory protections, leading to complete system compromise and arbitrary code execution

[Mitigation] Immediately apply the official security updates provided by Apple (iOS 17.4, macOS Sonoma 14.4, etc.) to all affected devices

[Affected Scope] Multiple versions of Windows operating systems, including Windows 10, Windows 11, and Windows Server 2016/2019/2022.

[Impact] Local attackers can escalate privileges to SYSTEM level, bypass security agents, and execute arbitrary code in kernel space.

[Mitigation] Apply the official Microsoft cumulative security updates immediately and audit systems for indicators of compromise (IoCs).

[Affected Scope] iPhone and iPad devices running iOS 16.6 and prior

[Impact] A local attacker can bypass sandbox restrictions to elevate privileges to kernel level, leading to complete device compromise

[Mitigation] Immediately update affected devices to iOS 16.7.1 / iPadOS 16.7.1 or later

[Affected Scope] Apple iOS and iPadOS prior to 15.7.8 / 16.6, macOS Big Sur prior to 11.7.9, macOS Monterey prior to 12.6.8, macOS Ventura prior to 13.5, tvOS prior to 16.6, and watchOS prior to 9.6

[Impact] A local application can bypass kernel memory protections and modify sensitive kernel states, leading to complete system compromise and arbitrary code execution

[Mitigation] Immediately apply the official security updates provided by Apple (iOS 15.7.8 / 16.6, macOS 13.5, etc.) and enforce updates via MDM

[Affected Scope] Systems running iOS/iPadOS prior to 15.7.7 and 16.5.1, macOS Big Sur/Monterey/Ventura prior to specific patched releases, and watchOS prior to 8.8.1 and 9.5.2

[Impact] A local application can exploit this vulnerability to execute arbitrary code with kernel privileges, leading to complete system compromise. Active exploitation has been reported in the wild

[Mitigation] Immediately apply the official security updates provided by Apple (e.g., iOS 16.5.1, macOS 13.4.1)

[Affected Scope] Microsoft Windows operating systems including Windows 10, 11, and Windows Server 2016, 2019, 2022 utilizing the CLFS driver

[Impact] A local attacker with low privileges can execute arbitrary code in kernel mode, leading to complete system takeover with SYSTEM privileges

[Mitigation] Immediately apply the official Microsoft cumulative security updates (February 2023 Patch Tuesday) and monitor unpatched assets