CVE Vulnerability Advisory Database

Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.

Showing 1–2 of 2 advisories (Page 1/1)

CVE-2023-260833.3/LOWEPSS 1.2%CISA KEV

2023-04-06

ARM Mali GPU Kernel Driver Memory Leak and Information Disclosure Vulnerability (CVE-2023-26083) Technical Advisory

[Affected Scope] ARM Mali GPU Kernel Drivers (Midgard r6p0-r32p0, Bifrost r0p0-r42p0, Valhall r19p0-r42p0, Avalon r41p0-r42p0)

[Impact] A local non-privileged user can perform valid GPU processing operations to expose sensitive kernel metadata, facilitating KASLR bypass and local privilege escalation (LPE)

[Mitigation] Apply official security patches from chipset vendors and OEMs, and immediately upgrade device firmware to the latest version

mali-gpu kernel-driver memory-leak CWE-401 local-privilege-escalation

Full Advisory & Mitigation

CVE-2015-03107.8/HIGHEPSS 15.1%CISA KEV

2015-01-23

Adobe Flash Player ASLR Bypass via Memory Address Disclosure (CVE-2015-0310)

[Affected Scope] Adobe Flash Player on Windows, OS X, and Linux within specific version ranges prior to January 2015 patches

[Impact] Attackers can bypass the Address Space Layout Randomization (ASLR) protection mechanism, significantly increasing the success rate of subsequent Remote Code Execution (RCE) attacks

[Mitigation] Immediately uninstall Adobe Flash Player or upgrade to the patched versions, and disable Flash execution in all web browsers

ASLR-Bypass Memory-Leak CWE-200 Exploited-In-The-Wild

Full Advisory & Mitigation