CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Google Pixel Firmware Information Disclosure Vulnerability due to Uninitialized Data (CVE-2024-29745)
[Affected Scope] Google Pixel devices and Android operating system
[Impact] Local attackers can disclose sensitive system memory information without requiring additional execution privileges or user interaction
[Mitigation] Immediately apply the April 2024 Google Pixel security update and upgrade to the latest firmware version
Apple iOS, iPadOS, and macOS Environment Variable Handling Information Disclosure (CVE-2020-9934)
[Affected Scope] Apple iOS and iPadOS versions prior to 13.6, and macOS Catalina versions prior to 10.15.6
[Impact] A local attacker can exploit improper validation of environment variables to bypass security boundaries and view sensitive user information
[Mitigation] Immediately update affected devices to iOS/iPadOS 13.6, macOS Catalina 10.15.6, or later versions