CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Windows NTFS Information Disclosure Vulnerability (CVE-2025-24984) Technical Advisory
[Affected Scope] All Windows operating system deployments utilizing the NTFS file system
[Impact] An unauthorized attacker with physical access can extract sensitive information written in plaintext within NTFS system log files
[Mitigation] Apply the latest Microsoft cumulative security updates immediately and enforce BitLocker Full Disk Encryption (FDE)
Samsung Android Kernel Pointer Disclosure ASLR Bypass Vulnerability (CVE-2023-21492) Technical Analysis and Remediation Guide
[Affected Scope] Samsung Android mobile devices running firmware versions prior to the SMR May-2023 Release 1 security update
[Impact] A privileged local attacker can read exposed kernel pointers in system log files to bypass ASLR (Address Space Layout Randomization), facilitating subsequent kernel-level code execution
[Mitigation] Apply the Samsung May 2023 security update (SMR May-2023 Release 1) or later, and restrict access to sensitive system logs