CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Windows NTFS Out-of-Bounds Read Vulnerability (CVE-2025-24991) Analysis and Mitigation Guide
[Affected Scope] Windows 10, Windows 11, and Windows Server families utilizing the NTFS file system driver
[Impact] Local authorized attackers can disclose sensitive kernel memory information, potentially facilitating subsequent privilege escalation (EoP) attacks
[Mitigation] Immediately apply the February 2025 Microsoft Patch Tuesday security updates and restrict local access for unauthorized users
Android 13 Notification System UI Bypass and Local Information Disclosure (CVE-2023-21237)
[Affected Scope] Android 13 operating system (Android-13, Android ID: A-251586912)
[Impact] Attackers can hide mandatory foreground service notifications without user interaction, enabling stealthy background execution and unauthorized local information disclosure
[Mitigation] Apply the official June 2023 (or later) Android security patch and restrict notification permissions for untrusted applications