CVE Vulnerability Advisory Database

[Affected Scope] All web servers, browsers, Node.js environments, and backend applications using Google Brotli library versions 1.0.3 through 1.2.0

[Impact] Remote unauthenticated attackers can corrupt decoder state memory via crafted compressed streams, leading to sensitive data disclosure, DoS, or Remote Code Execution (RCE)

[Mitigation] Immediately update Brotli libraries and dependent packages to the latest secure versions (1.0.10, 1.1.1, 1.2.1 or higher)

[Affected Scope] Palo Alto Networks PAN-OS software running on PA-Series and VM-Series firewalls with the User-ID™ Authentication Portal (Captive Portal) service enabled.

[Impact] An unauthenticated remote attacker can execute arbitrary code with root privileges on the firewall by sending specially crafted packets.

[Mitigation] Apply the latest security patches immediately, and restrict access to the User-ID™ Authentication Portal to trusted internal IP addresses only.

[Affected Scope] FortiOS versions 6.4 through 7.6 and FortiSwitchManager versions 7.0 through 7.2.

[Impact] Unauthenticated remote attackers can execute arbitrary code or commands with system privileges by sending crafted packets, leading to full system compromise.

[Mitigation] Immediately apply the latest firmware updates provided by Fortinet and restrict exposure of management interfaces and VPN services to the public internet.

[Affected Scope] WatchGuard Firebox appliances running Fireware OS configured with IKEv2 mobile user VPN or branch office VPN using a dynamic gateway peer, or where these configurations were previously deleted but a static gateway peer VPN remains.

[Impact] A critical vulnerability (CVSS 9.8) allowing unauthenticated remote attackers to trigger an out-of-bounds write (CWE-787) in the iked process via crafted IKEv2 packets, leading to arbitrary code execution (RCE) with root privileges.

[Mitigation] Since this vulnerability is actively exploited and listed in the CISA KEV catalog, immediately upgrade to the patched Fireware OS version and restrict or disable IKEv2 services where possible.

[Affected Scope] WatchGuard Firebox appliances running Fireware OS with IKEv2 Mobile User VPN or Branch Office VPN (BOVPN) configured with a dynamic gateway peer (including legacy configurations where static peers remain active)

[Impact] Unauthenticated remote attackers can execute arbitrary code with system privileges by sending specially crafted IKEv2 packets, leading to complete compromise of the appliance

[Mitigation] Immediately upgrade to the patched Fireware OS version, or temporarily disable IKEv2 VPN services and restrict access to trusted IP addresses

[Affected Scope] Samsung Android mobile devices and the embedded libimagecodec.quram.so library prior to the SMR Sep-2025 Release 1 security patch

[Impact] Remote attackers can execute arbitrary code with high privileges without user interaction by tricking the system into processing a specially crafted image file

[Mitigation] Immediately apply the Samsung official software update (SMR Sep-2025 Release 1 or later) and restrict automatic downloading of media files from untrusted sources

[Affected Scope] Samsung Android mobile devices running security patch levels prior to SMR Apr-2025 Release 1

[Impact] Remote attackers can execute arbitrary code with high privileges and compromise the device without user interaction by triggering an out-of-bounds write during image decoding.

[Mitigation] Immediately apply the Samsung April 2025 Security Maintenance Release (SMR Apr-2025 Release 1) or later.

[Affected Scope] Apple devices running iOS/iPadOS versions prior to 15.8.5, 16.7.12, 18.6.2, iPadOS 17.7.10, or macOS versions prior to Sequoia 15.6.1, Sonoma 14.7.8, and Ventura 13.7.8

[Impact] Processing a maliciously crafted image file may lead to memory corruption, allowing remote attackers to execute arbitrary code or gain full system control without user interaction

[Mitigation] Immediately apply the official security patches provided by Apple (iOS 15.8.5, 16.7.12, 18.6.2, iPadOS 17.7.10, macOS 15.6.1, etc.)

[Affected Scope] Multiple Fortinet appliance product lines including FortiCamera, FortiMail, FortiNDR, FortiRecorder, and FortiVoice

[Impact] Unauthenticated remote attackers can execute arbitrary code or commands with root privileges by sending crafted HTTP requests containing a malicious hash cookie

[Mitigation] Immediately upgrade to the patched firmware versions provided by the vendor and restrict external access to management interfaces

[Affected Scope] Ivanti Connect Secure (before 22.7R2.6), Policy Secure (before 22.7R1.4), and ZTA Gateways (before 22.8R2.2)

[Impact] Unauthenticated remote attackers can trigger a stack-based buffer overflow to execute arbitrary code with root privileges on the target gateway

[Mitigation] Immediately apply the official security patches provided by the vendor and restrict access to external-facing management interfaces

[Affected Scope] Devices running iOS 15/16/17/18, iPadOS, macOS Sequoia, visionOS, watchOS, and Safari browser

[Impact] Processing maliciously crafted web content may allow an attacker to break out of the Web Content sandbox and execute arbitrary code, with active exploitation reported in targeted attacks

[Mitigation] Immediately apply the official security updates released by Apple, including iOS 18.3.2 and macOS 15.3.2

[Affected Scope] Systems running unpatched versions impacted by CVE-2025-0282

[Impact] A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.5, Ivanti Policy Secure before version 22.7R1.2, and Ivanti Neu...

[Mitigation] Apply vendor security patches and restrict external network exposure.

[Affected Scope] VMware vCenter Server versions 7.0 and 8.0, VMware Cloud Foundation versions 4.x and 5.x

[Impact] An unauthenticated remote attacker can trigger a heap overflow via specially crafted DCERPC packets, potentially executing arbitrary code with root privileges

[Mitigation] Immediately apply the official Broadcom security patches (vCenter 8.0 U3b / 7.0 U3s or later) and restrict network access to vCenter management ports

[Affected Scope] VMware vCenter Server versions 7.0 and 8.0, and VMware Cloud Foundation versions 4.x and 5.x.

[Impact] An unauthenticated remote attacker can trigger a heap-based buffer overflow to execute arbitrary code with root privileges by sending crafted network packets.

[Mitigation] Immediately upgrade to the patched versions (vCenter 8.0 U2b / 7.0 U3r or higher) and restrict network access to DCERPC-related ports.

[Affected Scope] FortiOS versions 6.0 through 7.4.2 and FortiProxy versions 1.0 through 7.4.2 with SSL-VPN service enabled

[Impact] Unauthenticated remote attackers can execute arbitrary code or commands on the target system via specially crafted HTTP requests

[Mitigation] Immediately upgrade to the patched firmware versions, or disable the SSL-VPN service as a temporary workaround

[Affected Scope] VMware vCenter Server 7.0 and 8.0 series, VMware Cloud Foundation 4.x and 5.x series

[Impact] An unauthenticated attacker with network access can trigger an out-of-bounds write, potentially leading to remote code execution (RCE) with administrative privileges

[Mitigation] Apply the official security patches immediately, and restrict network access to the vCenter DCERPC port (default 2012/tcp) using firewalls

[Affected Scope] FortiOS versions 7.2.4 and below, 7.0.11 and below, 6.4.12 and below, 6.0.16 and below; FortiProxy versions 7.2.3 and below, 7.0.9 and below, 2.0.12 and below, and all 1.2/1.1 versions with SSL-VPN enabled

[Impact] An unauthenticated remote attacker can execute arbitrary code or commands with root privileges on the target appliance via specifically crafted HTTP requests

[Mitigation] Immediately upgrade FortiOS and FortiProxy to the patched versions, or disable the SSL-VPN service as a temporary workaround

[Affected Scope] FortiOS versions 7.2.0 to 7.2.2, 7.0.0 to 7.0.8, 6.4.0 to 6.4.10, 6.2.0 to 6.2.11, 6.0.15 and earlier; FortiProxy versions 7.2.0 to 7.2.1, 7.0.7 and earlier

[Impact] An unauthenticated remote attacker can execute arbitrary code or commands with root privileges on the target system by sending specifically crafted HTTP/HTTPS requests

[Mitigation] Immediately upgrade to the patched firmware versions or disable the SSL-VPN service and restrict access using local-in policies if patching is delayed

[Affected Scope] Google Chrome and Chromium-based browsers prior to version 107.0.5304.121

[Impact] A remote attacker who has compromised the renderer process can bypass the browser sandbox and potentially execute arbitrary code via a crafted HTML page

[Mitigation] Immediately update Google Chrome and Chromium-based browsers to the latest stable version (107.0.5304.121 or higher)

[Affected Scope] Apple iOS versions prior to 15.3, iPadOS versions prior to 15.3, macOS Big Sur versions prior to 11.6.3, and macOS Monterey versions prior to 12.2

[Impact] A malicious application can exploit this vulnerability to execute arbitrary code with kernel privileges, leading to complete system compromise. Active exploitation in the wild has been reported

[Mitigation] Immediately apply the official software updates provided by Apple to patch the vulnerable kernel components