CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Git Submodule Path CRLF Parsing Flaw and Symlink-Based Remote Code Execution (CVE-2025-48384)
[Affected Scope] All Git versions prior to v2.43.7, v2.44.4, v2.45.4, v2.46.4, v2.47.3, v2.48.2, v2.49.1, and v2.50.1
[Impact] A remote attacker can craft a malicious repository with specially designed submodule paths and symlinks, leading to arbitrary post-checkout hook execution and full system compromise upon cloning.
[Mitigation] Immediately upgrade Git clients to the patched versions (e.g., v2.50.1) and avoid recursively cloning untrusted repositories.
Microsoft Windows Mount Manager Elevation of Privilege Vulnerability (CVE-2015-1769, MS15-085)
[Affected Scope] Windows Vista, 7, 8, 8.1, 10, and Windows Server 2008, 2012 legacy environments
[Impact] A physically proximate attacker can execute arbitrary code with SYSTEM privileges by connecting a crafted USB device, leading to full system compromise
[Mitigation] Apply the MS15-085 security update immediately and restrict unauthorized USB storage devices via Group Policy