CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Google Pixel Cellular Modem Privilege Escalation Vulnerability (CVE-2026-58704) Security Advisory
[Affected Scope] Google Pixel devices and Android hardware utilizing specific cellular modem chipsets.
[Impact] Remote (proximal/adjacent) attackers can bypass permissions to escalate privileges without user interaction, leading to full modem compromise.
[Mitigation] Immediately apply the September 2026 or later Android security patches (2026-09-01).
Microsoft Outlook Remote NTLM Credential Theft & Elevation of Privilege Vulnerability (CVE-2023-23397) Critical Security Advisory
[Affected Scope] All supported desktop versions of Microsoft Outlook for Windows, including Outlook 2013, 2016, LTSC 2021, and Microsoft 365 Apps
[Impact] Attackers can trigger the vulnerability silently without user interaction (Zero-Click) simply by sending a malicious email, leaking the user's NTLM hash to external servers for NTLM relay attacks
[Mitigation] Apply the official Microsoft security updates immediately, block outbound SMB traffic (TCP port 445) at the perimeter, and run the Exchange audit script to purge malicious items