CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Microsoft Office Security Feature Bypass Vulnerability (CVE-2026-21509) Analysis and Mitigation Guide
[Affected Scope] All Microsoft Office suites and local environments processing untrusted document inputs.
[Impact] Attackers can bypass local security decisions, leading to unauthorized macro execution and arbitrary code execution.
[Mitigation] Apply official Microsoft security patches immediately and enforce strict macro blocking policies for untrusted files.
Google Android Pixel Local Privilege Escalation Vulnerability (CVE-2024-32896) Technical Advisory
[Affected Scope] Google Pixel devices and Android-based endpoints running security patch levels prior to 2024-06-01
[Impact] Local attackers can exploit a logic error to bypass security boundaries and achieve local privilege escalation (LPE) without requiring elevated execution privileges
[Mitigation] Immediately apply the official Google June 2024 or later security update to all affected devices
Google Android Pixel Bootloader Logic Error Local Privilege Escalation Vulnerability (CVE-2024-29748)
[Affected Scope] Google Pixel devices and Android operating system versions prior to April 2024 security patch
[Impact] Local attackers can bypass memory protection mechanisms during bootloader transitions to dump memory, extract cryptographic keys, and escalate privileges
[Mitigation] Apply the Google April 2024 Pixel Security Update immediately to patch the bootloader logic