CVE Vulnerability Advisory Database

Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.

Showing 1–2 of 2 advisories (Page 1/1)

CVE-2022-01858.4/HIGHEPSS 25.1%CISA KEV

2022-02-11

Linux Kernel legacy_parse_param Heap Buffer Overflow Vulnerability (CVE-2022-0185) Technical Advisory

[Affected Scope] Linux kernel versions 5.1 and lateral, specifically environments utilizing filesystems that fallback to legacy handling and have unprivileged user namespaces enabled

[Impact] An unprivileged local attacker can trigger a heap-based buffer overflow in kernel memory, leading to local privilege escalation (LPE) to root

[Mitigation] Apply the official kernel security patches immediately, or disable unprivileged user namespaces as a temporary workaround

CWE-190 CWE-191 heap-overflow privilege-escalation kernel-exploit

Full Advisory & Mitigation

CVE-2014-04979.8/CRITICALEPSS 99.9%CISA KEV

2014-02-05

Adobe Flash Player Integer Underflow Remote Code Execution Vulnerability (CVE-2014-0497)

[Affected Scope] Adobe Flash Player before 11.7.700.261, 11.8.x through 12.0.x before 12.0.0.44 on Windows/macOS, and before 11.2.202.336 on Linux

[Impact] Remote attackers can execute arbitrary code and gain full control of the target system by enticing users to visit a website containing a specially crafted Flash (.swf) file

[Mitigation] Immediately uninstall legacy Adobe Flash Player or upgrade to patched versions, and disable Flash execution in all web browsers

cve-2014-0497 integer-underflow cwe-191 remote-code-execution kev-active

Full Advisory & Mitigation