CVE Vulnerability Advisory Database

[Affected Scope] Systems running Microsoft Windows operating systems utilizing the Ancillary Function Driver for WinSock (afd.sys)

[Impact] An authorized local attacker can exploit kernel memory corruption to execute arbitrary code with SYSTEM privileges, leading to complete system compromise

[Mitigation] Immediately apply the latest cumulative security updates provided by Microsoft and restrict unauthorized local access

[Affected Scope] Apple devices running iOS/iPadOS prior to 18.7.3 and 26.2, macOS Tahoe prior to 26.2, and Safari prior to 26.2

[Impact] Processing maliciously crafted web content may lead to arbitrary code execution (RCE), with active exploitation reported in highly targeted attacks

[Mitigation] Immediately apply the official security updates (version 26.2 / 18.7.3 or later) provided by Apple

[Affected Scope] Windows operating systems utilizing the Windows Cloud Files Mini Filter Driver (cldflt.sys)

[Impact] Local authorized attackers can corrupt kernel memory to elevate privileges to SYSTEM and execute arbitrary code

[Mitigation] Immediately apply the official Microsoft security updates and monitor mini-filter driver activities

[Affected Scope] Desktop Window Manager (DWM) component in Microsoft Windows 10, Windows 11, and Windows Server operating systems

[Impact] An authorized local attacker can exploit a Use-After-Free vulnerability to execute arbitrary code with SYSTEM privileges, leading to complete host takeover

[Mitigation] Immediately apply the official Microsoft cumulative security updates and monitor unpatched systems for anomalous DWM crashes

[Affected Scope] Windows 10, Windows 11, and Windows Server operating systems utilizing the Common Log File System (CLFS.sys) driver.

[Impact] An authorized local attacker can execute arbitrary code in kernel mode and elevate privileges to NT AUTHORITY\SYSTEM.

[Mitigation] Immediately apply the latest cumulative security updates released by Microsoft (March 2025 Patch Tuesday or later).

[Affected Scope] Systems running Microsoft Windows operating systems utilizing the Win32k kernel subsystem

[Impact] An authorized local attacker can elevate privileges to SYSTEM level, gaining full control over the affected system

[Mitigation] Immediately apply the latest cumulative security updates provided by Microsoft and restrict unauthorized local access

[Affected Scope] Most versions of Windows 10, 11, and Windows Server 2008 through 2022

[Impact] Local attackers can exploit kernel memory corruption to execute arbitrary code with SYSTEM privileges

[Mitigation] Immediately apply the Microsoft August 2024 security updates and monitor for unauthorized local account activities

[Affected Scope] All supported versions of Windows 10, Windows 11, and Windows Server

[Impact] A locally authenticated attacker can exploit this vulnerability to execute arbitrary code with SYSTEM privileges, leading to full host compromise

[Mitigation] Immediately apply the Microsoft official cumulative security updates released in August 2024 or later

[Affected Scope] Linux kernel versions utilizing the network subsystem, particularly environments running UDP socket-based applications

[Impact] Local attackers can exploit an RCU synchronization race condition to trigger a Use-After-Free (UAF), potentially leading to local privilege escalation (LPE) to root or system-wide Denial of Service (DoS)

[Mitigation] Immediately upgrade the Linux kernel to the latest patched stable release and perform a system reboot

[Affected Scope] Systems running Linux Kernel utilizing the ALSA (Advanced Linux Sound Architecture) PCM subsystem

[Impact] A local attacker can trigger a Use-After-Free (UAF) condition to corrupt kernel memory, leading to complete system compromise with Ring 0 privileges

[Mitigation] Upgrade the Linux kernel past commit 56b88b50565cd8b946a2d00b0c83927b7ebb055e, or blacklist the vulnerable sound modules

[Affected Scope] Google Chrome users on desktop platforms prior to version 98.0.4758.102

[Impact] A remote attacker can exploit heap corruption and potentially execute arbitrary code by enticing a user to visit a crafted HTML page

[Mitigation] Immediately update Google Chrome to the latest stable version (98.0.4758.102 or higher)

[Affected Scope] Microsoft Windows operating systems, including Windows 10, Windows 11, and Windows Server 2016/2019/2022 utilizing the Win32k kernel driver

[Impact] Local attackers can execute arbitrary code in kernel mode, escalating privileges from a standard user to SYSTEM, with active exploitation observed in the wild by APT groups

[Mitigation] Immediately apply the official Microsoft Latest Cumulative Update (LCU) and restrict local execution privileges on unpatched systems

[Affected Scope] Event Tracing for Windows (ETW) subsystem in Windows 10, Windows 11, and Windows Server families

[Impact] Local attackers can exploit a Use-After-Free (UAF) vulnerability to execute arbitrary code with SYSTEM privileges, leading to full system compromise

[Mitigation] Immediately apply the official Microsoft Cumulative Update (LCU) and restrict local access on unpatched systems

[Affected Scope] Windows client and server environments running Internet Explorer 9, 10, and 11

[Impact] Remote attackers can execute arbitrary code with the privileges of the active user, potentially leading to full system compromise via malicious web pages

[Mitigation] Apply the official Microsoft cumulative security updates immediately and transition legacy workflows to modern secure browsers

[Affected Scope] Windows 7, 8.1, 10, and Windows Server 2008, 2012, 2016, 2019 utilizing the Win32k subsystem

[Impact] Local attackers can execute arbitrary code in kernel mode (SYSTEM privileges), completely bypassing OS security boundaries

[Mitigation] Apply official Microsoft cumulative security updates immediately and restrict local execution privileges on unpatched systems

[Affected Scope] Adobe Flash Player versions 31.0.0.153 and earlier, and 31.0.0.108 and earlier

[Impact] Successful exploitation allows remote attackers to execute arbitrary code on the target system via crafted malicious Flash content (SWF)

[Mitigation] Immediately update Adobe Flash Player to the patched version or completely uninstall Flash Player due to its End-of-Life (EOL) status

[Affected Scope] Internet Explorer and Microsoft Office applications utilizing the VBScript engine on Windows 7, 8.1, 10, and Windows Server 2008, 2012, 2016

[Impact] Remote attackers can execute arbitrary code with the privileges of the current user via malicious web pages or crafted Office documents

[Mitigation] Apply the official Microsoft cumulative security updates or disable VBScript execution via registry modifications

[Affected Scope] Legacy and modern Windows operating systems including Windows 7, 8.1, 10, and Windows Server 2008, 2012, 2016 utilizing the win32k.sys driver.

[Impact] A local attacker can execute a specially crafted application to gain elevated SYSTEM privileges, completely bypassing OS security boundaries.

[Mitigation] Apply the official Microsoft security patches immediately and restrict execution privileges for untrusted local users.

[Affected Scope] Adobe Flash Player 13.x through 18.x and 11.x legacy versions on Windows, OS X, and Linux

[Impact] Remote attackers can execute arbitrary code or cause a denial of service (memory corruption) via crafted Flash content

[Mitigation] Since Adobe Flash Player has reached End-of-Life (EOL), the recommended mitigation is to completely uninstall Flash Player from all systems

[Affected Scope] Microsoft Internet Explorer versions 6 through 11

[Impact] Remote attackers can bypass sandbox restrictions and elevate privileges to execute arbitrary code in the context of the current user

[Mitigation] Apply the MS14-051 cumulative security update, disable Internet Explorer, and transition to modern secure browsers like Microsoft Edge