CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Windows CLFS Driver Heap-Based Buffer Overflow Elevation of Privilege Vulnerability (CVE-2024-49138) Technical Advisory
[Affected Scope] Windows 10, 11, and Windows Server systems utilizing the Common Log File System (CLFS) driver
[Impact] Local attackers can exploit this vulnerability to execute arbitrary code in kernel mode, escalating privileges to SYSTEM
[Mitigation] Apply the latest Microsoft cumulative security updates immediately and restrict unauthorized creation of CLFS log (.blf) files
Linux Kernel uvcvideo Driver Out-of-Bounds Write Vulnerability (CVE-2024-53104)
[Affected Scope] Systems running the Linux kernel with the UVC (USB Video Class) driver enabled
[Impact] A local attacker can trigger an out-of-bounds write in kernel memory via a malicious USB device, leading to Local Privilege Escalation (LPE) or Kernel Panic (DoS)
[Mitigation] Apply the latest stable Linux kernel security patches or blacklist the uvcvideo kernel module if not required
Qualcomm HLOS Memory Map Management Use-After-Free Vulnerability (CVE-2024-43047) Analysis and Mitigation Guide
[Affected Scope] Android and embedded devices powered by Qualcomm chipsets utilizing specific HLOS (High-Level Operating System) memory drivers
[Impact] Local attackers with low privileges can trigger a Use-After-Free (UAF) condition, leading to kernel memory corruption and full local privilege escalation (LPE) to root
[Mitigation] Apply the official security patches released by OEMs (October 2024 or later) and restrict access to kernel memory drivers using strict SELinux policies
Arm Mali GPU Kernel Driver Use-After-Free Vulnerability (CVE-2024-4610) Analysis and Mitigation Guide
[Affected Scope] Arm Bifrost GPU Kernel Driver and Valhall GPU Kernel Driver from r34p0 through r40p0.
[Impact] A local non-privileged user can exploit this vulnerability to access already freed memory, potentially leading to arbitrary code execution and kernel privilege escalation.
[Mitigation] Immediately upgrade the Arm Mali GPU kernel driver to version r41p0 or later.
Qualcomm KGSL GPU Driver Memory Corruption Vulnerability (CVE-2023-33106) Analysis and Mitigation Guide
[Affected Scope] Android and embedded devices powered by Qualcomm Snapdragon chipsets utilizing specific KGSL GPU driver versions
[Impact] Local attackers can trigger kernel memory corruption via crafted IOCTL calls, leading to Local Privilege Escalation (LPE) and arbitrary code execution with root privileges
[Mitigation] Immediately apply the official security patches released by device OEMs and Qualcomm in or after December 2023
Windows Common Log File System (CLFS) Driver Elevation of Privilege Vulnerability (CVE-2023-36424) Analysis and Mitigation Guide
[Affected Scope] Microsoft Windows operating systems utilizing the CLFS driver, including Windows 10, 11, and Windows Server 2016, 2019, 2022
[Impact] A locally authenticated attacker can execute a specially crafted application to elevate privileges to NT AUTHORITY\SYSTEM, gaining full control over the system
[Mitigation] Immediately apply the latest cumulative security updates provided by Microsoft and monitor unpatched assets
Linux Kernel ALSA PCM Use-After-Free Local Privilege Escalation Vulnerability (CVE-2023-0266) Analysis and Mitigation Guide
[Affected Scope] Systems running Linux Kernel utilizing the ALSA (Advanced Linux Sound Architecture) PCM subsystem
[Impact] A local attacker can trigger a Use-After-Free (UAF) condition to corrupt kernel memory, leading to complete system compromise with Ring 0 privileges
[Mitigation] Upgrade the Linux kernel past commit 56b88b50565cd8b946a2d00b0c83927b7ebb055e, or blacklist the vulnerable sound modules
Arm Mali GPU Kernel Driver Use-After-Free Vulnerability (CVE-2022-38181) Technical Analysis and Hardening Guide
[Affected Scope] Android and embedded devices utilizing Arm Mali GPU Bifrost (r0p0 to r38p1, r39p0), Valhall (r19p0 to r38p1, r39p0), and Midgard (r4p0 to r32p0) drivers
[Impact] Local unprivileged attackers can exploit a Use-After-Free (UAF) condition in GPU memory operations to gain arbitrary kernel code execution and full root privileges
[Mitigation] Apply the latest security patches provided by chipset vendors and OEMs, and immediately upgrade vulnerable driver versions
Windows Common Log File System (CLFS) Driver Out-of-Bounds Write Elevation of Privilege Vulnerability (CVE-2022-37969) Analysis and Mitigation Guide
[Affected Scope] Almost all active versions of Windows OS, including Windows 7, 8.1, 10, 11, and Windows Server 2008 through 2022.
[Impact] A local attacker can exploit this vulnerability to gain SYSTEM privileges, leading to complete compromise of the target system.
[Mitigation] Immediately apply the September 2022 Microsoft security updates and monitor unpatched assets for anomalous local execution.
Linux Kernel legacy_parse_param Heap Buffer Overflow Vulnerability (CVE-2022-0185) Technical Advisory
[Affected Scope] Linux kernel versions 5.1 and lateral, specifically environments utilizing filesystems that fallback to legacy handling and have unprivileged user namespaces enabled
[Impact] An unprivileged local attacker can trigger a heap-based buffer overflow in kernel memory, leading to local privilege escalation (LPE) to root
[Mitigation] Apply the official kernel security patches immediately, or disable unprivileged user namespaces as a temporary workaround
Samsung Mobile MFC Charger Driver Race Condition Use-After-Free (CVE-2021-25394) Technical Analysis and Hardening Guide
[Affected Scope] Samsung mobile devices running firmware versions prior to SMR (Samsung Security Maintenance Release) MAY-2021 Release 1.
[Impact] A local attacker with compromised radio privileges can trigger a race condition to perform an arbitrary write in kernel memory, leading to local privilege escalation (LPE).
[Mitigation] Apply the official Samsung security update (SMR MAY-2021 Release 1 or later) and restrict unauthorized local application execution.
Samsung DSP Driver Out-of-Bounds Memory Access Local Privilege Escalation (CVE-2021-25372)
[Affected Scope] Samsung mobile devices with DSP (Digital Signal Processor) driver prior to SMR Mar-2021 Release 1
[Impact] Local attackers can exploit improper boundary checks to gain out-of-bounds memory access, leading to local privilege escalation and arbitrary code execution in kernel space
[Mitigation] Apply the official Samsung security update to SMR Mar-2021 Release 1 or later
Apple iOS, macOS, tvOS, watchOS Kernel Use-After-Free Vulnerability (CVE-2019-8605) Analysis and Mitigation Guide
[Affected Scope] Apple iOS versions prior to 12.3, macOS Mojave prior to 10.14.5, tvOS prior to 12.3, and watchOS prior to 5.2.1
[Impact] A local malicious application can exploit this vulnerability to execute arbitrary code with elevated system/kernel privileges
[Mitigation] Immediately upgrade to patched OS versions (iOS 12.3, macOS 10.14.5, tvOS 12.3, watchOS 5.2.1 or later)
Linux Kernel perf_event_open Integer Validation Vulnerability leading to Local Privilege Escalation (CVE-2013-2094)
[Affected Scope] Linux kernel versions 2.6.37 through 3.8.8
[Impact] Local unprivileged users can exploit this vulnerability via a crafted perf_event_open system call to execute arbitrary code with root privileges
[Mitigation] Upgrade the Linux kernel to version 3.8.9 or higher, or restrict unprivileged access to performance events by configuring perf_event_paranoid
Linux Kernel fb_mmap Integer Overflow Local Privilege Escalation Vulnerability (CVE-2013-2596)
[Affected Scope] Linux kernel versions before 3.8.9, including certain Android 4.1.2 builds and embedded Linux systems
[Impact] Local attackers can exploit an integer overflow to map the entire kernel memory space with read-write permissions, leading to full root privilege escalation
[Mitigation] Upgrade the Linux kernel to version 3.8.9 or higher, and restrict access permissions to framebuffer device files
Linux Kernel RDS Protocol Privilege Escalation Vulnerability (CVE-2010-3904) Technical Analysis and Mitigation Guide
[Affected Scope] Linux kernel versions before 2.6.36 with the Reliable Datagram Sockets (RDS) protocol module enabled
[Impact] Local unprivileged users can exploit this vulnerability via crafted sendmsg and recvmsg system calls to gain full root privileges
[Mitigation] Upgrade the Linux kernel to a patched version, or disable the RDS kernel module by blacklisting it if not required