CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Apple iOS, macOS, iPadOS Pointer Authentication (PAC) Bypass Vulnerability (CVE-2025-31201) Critical Security Advisory
[Affected Scope] Apple devices running iOS < 18.4.1, iPadOS < 18.4.1, macOS Sequoia < 15.4.1, tvOS < 18.4.1, and visionOS < 2.4.1
[Impact] Attackers with arbitrary read/write capabilities can bypass hardware-level Pointer Authentication (PAC) to execute arbitrary code with kernel privileges
[Mitigation] Immediately apply the official security updates released by Apple (iOS 18.4.1, macOS 15.4.1, etc.)
GIGABYTE GDrv.sys Kernel Driver Arbitrary Memory Write Local Privilege Escalation (LPE) Vulnerability (CVE-2018-19320)
[Affected Scope] GIGABYTE APP Center v1.05.21 and earlier, AORUS GRAPHICS ENGINE before 1.57, XTREME GAMING ENGINE before 1.26, and OC GURU II v2.08 containing the GDrv.sys driver
[Impact] A local attacker with low privileges can perform arbitrary kernel-mode (Ring 0) memory read/write operations, leading to complete system takeover and security agent bypass
[Mitigation] Update the affected GIGABYTE utilities to their latest secure versions and enforce Windows Defender Application Control (WDAC) or driver blocklists to prevent the vulnerable driver from loading