CVE Vulnerability Advisory Database

[Affected Scope] PHP 8.1, 8.2, and 8.3 environments without the latest security patches.

[Impact] Remote attackers can achieve arbitrary code execution (RCE) by exploiting memory corruption in the PHP global state.

[Mitigation] Immediately update PHP to the latest security release and restart PHP-FPM/Web server processes.

[Affected Scope] Google Chrome versions prior to 146.0.7680.178

[Impact] A remote attacker who has compromised the renderer process can execute arbitrary code via a crafted HTML page

[Mitigation] Immediately update Google Chrome to the latest stable version (146.0.7680.178 or higher)

[Affected Scope] Google Chrome browser versions prior to 145.0.7632.75

[Impact] Remote attackers can execute arbitrary code inside the browser sandbox via a crafted HTML page

[Mitigation] Immediately update Google Chrome to the latest stable version (145.0.7632.75 or higher)

[Affected Scope] macOS Ventura prior to 13.5, iOS/iPadOS prior to 16.6, iOS/iPadOS prior to 15.8.7, and Safari prior to 16.6

[Impact] Processing maliciously crafted web content may lead to memory corruption, potentially allowing remote attackers to execute arbitrary code on the target device

[Mitigation] Immediately apply the official software updates provided by Apple to upgrade operating systems and Safari to the patched versions

[Affected Scope] Android Operating System and Chrome browser environments

[Impact] Local attackers can escape the Chrome sandbox and escalate privileges to system_server without any user interaction or additional execution privileges

[Mitigation] Immediately apply the Android Security Bulletin - September 2025 patch or later to all affected devices

[Affected Scope] Android devices equipped with Qualcomm Adreno GPU drivers and running Google Chrome browser

[Impact] Remote attackers can exploit GPU rendering pipelines to trigger memory corruption, potentially leading to sandbox escape and arbitrary code execution

[Mitigation] Apply the latest security patches released by Qualcomm and device OEMs, and update Google Chrome to the latest version

[Affected Scope] All supported versions of Microsoft Windows and Windows Server utilizing the Common Log File System (CLFS) driver.

[Impact] An authorized local attacker can exploit this vulnerability to execute arbitrary code with SYSTEM privileges, leading to complete host compromise.

[Mitigation] Immediately apply the latest cumulative security updates provided by Microsoft and restrict unauthorized local interactive access.

[Affected Scope] Apple operating systems prior to iOS 18.3, iPadOS 18.3, macOS Sequoia 15.3, and other legacy versions

[Impact] A malicious application can exploit a Use-After-Free vulnerability to elevate privileges to system/kernel level and execute arbitrary code

[Mitigation] Immediately upgrade all affected Apple devices to the latest patched versions (iOS 18.3, macOS 15.3, etc.) via official software update channels

[Affected Scope] Windows Server and Desktop operating systems running Windows Hyper-V virtualization environments

[Impact] A local attacker with low privileges can exploit a Use-After-Free (UAF) vulnerability to execute arbitrary code with SYSTEM privileges, leading to complete host compromise

[Mitigation] Immediately apply the February 2025 Microsoft Patch Tuesday security updates and restrict local access to virtualization hosts

[Affected Scope] Windows 10, 11, and Windows Server systems with the Hyper-V virtualization role enabled

[Impact] Local attackers can exploit a Use-After-Free (UAF) vulnerability to execute arbitrary code with kernel-level (SYSTEM) privileges, leading to complete host compromise

[Mitigation] Immediately apply the February 2025 Microsoft Cumulative Security Updates and disable unnecessary Hyper-V services

[Affected Scope] Firefox < 131.0.2, Firefox ESR < 128.3.1, Firefox ESR < 115.16.1, Thunderbird < 131.0.1, Thunderbird < 128.3.1, and Thunderbird < 115.16.0

[Impact] An attacker can achieve arbitrary remote code execution (RCE) within the browser's content process, with active exploitation reported in the wild

[Mitigation] Immediately update all affected installations to the latest patched versions (Firefox 131.0.2+, ESR 128.3.1+, ESR 115.16.1+, Thunderbird 131.0.1+, 128.3.1+, 115.16.0+)

[Affected Scope] Android and embedded devices powered by Qualcomm chipsets utilizing specific HLOS (High-Level Operating System) memory drivers

[Impact] Local attackers with low privileges can trigger a Use-After-Free (UAF) condition, leading to kernel memory corruption and full local privilege escalation (LPE) to root

[Mitigation] Apply the official security patches released by OEMs (October 2024 or later) and restrict access to kernel memory drivers using strict SELinux policies

[Affected Scope] Linux kernel versions utilizing the network subsystem, particularly environments running UDP socket-based applications

[Impact] Local attackers can exploit an RCU synchronization race condition to trigger a Use-After-Free (UAF), potentially leading to local privilege escalation (LPE) to root or system-wide Denial of Service (DoS)

[Mitigation] Immediately upgrade the Linux kernel to the latest patched stable release and perform a system reboot

[Affected Scope] Arm Bifrost GPU Kernel Driver and Valhall GPU Kernel Driver from r34p0 through r40p0.

[Impact] A local non-privileged user can exploit this vulnerability to access already freed memory, potentially leading to arbitrary code execution and kernel privilege escalation.

[Mitigation] Immediately upgrade the Arm Mali GPU kernel driver to version r41p0 or later.

[Affected Scope] Google Chrome and Chromium-based browsers prior to version 124.0.6367.201

[Impact] A remote attacker who has compromised the renderer process can exploit this vulnerability via a crafted HTML page to escape the browser sandbox and execute arbitrary code

[Mitigation] Immediately update Google Chrome to the latest stable version (124.0.6367.201 or higher) and enforce auto-update policies across the enterprise

[Affected Scope] Linux kernel versions from v5.14 up to v6.6.14 with the nf_tables module enabled

[Impact] Local unprivileged users can trigger kernel memory corruption, leading to arbitrary code execution and full root privilege escalation

[Mitigation] Apply the official kernel patch or restrict unprivileged user namespace creation as an immediate workaround

[Affected Scope] Apple devices running iOS and iPadOS versions prior to 17, or iOS and iPadOS versions prior to 15.8.7

[Impact] A local malicious application can exploit a Use-After-Free vulnerability to execute arbitrary code with kernel privileges, leading to complete system compromise

[Mitigation] Immediately apply official Apple software updates to upgrade to iOS 17, iOS 15.8.7, or later versions

[Affected Scope] Linux systems utilizing the Netfilter (nftables) subsystem within the Linux kernel

[Impact] Local attackers can trigger kernel memory corruption, leading to arbitrary code execution with root privileges and complete system compromise

[Mitigation] Apply the latest kernel security patches from your distribution vendor, or restrict unprivileged user namespace creation as an immediate workaround

[Affected Scope] Android and embedded devices powered by Qualcomm chipsets utilizing DSP (Digital Signal Processor) services

[Impact] Local attackers with low privileges can trigger a Use-After-Free condition via remote calls from HLOS to DSP, leading to kernel-level privilege escalation and arbitrary code execution (actively exploited in the wild)

[Mitigation] Immediately apply the Qualcomm December 2023 security patch or the latest Android security update provided by your device OEM

[Affected Scope] Android and embedded devices utilizing ARM Mali GPU Midgard, Bifrost, Valhall, and 5th Gen architecture drivers

[Impact] A local non-privileged user can exploit improper GPU memory processing operations to access freed memory (Use-After-Free), potentially leading to local privilege escalation and sensitive kernel data exposure

[Mitigation] Apply the latest security patches and kernel driver updates provided by chipset vendors and device OEMs immediately