CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Windows Kernel Race Condition and Double Free Vulnerability (CVE-2025-62215) Local Privilege Escalation Advisory
[Affected Scope] Windows operating system kernel components and environments utilizing shared resources
[Impact] An authorized local attacker can trigger a race condition to cause kernel memory corruption, leading to local privilege escalation (LPE) to SYSTEM level
[Mitigation] Immediately apply the official Microsoft cumulative security updates and restrict local access privileges on unpatched systems
Linux Kernel af_alg_sendmsg Race Condition Vulnerability Advisory (CVE-2025-39964)
[Affected Scope] All systems and services utilizing the Linux Kernel Crypto API (AF_ALG) interface.
[Impact] Internal socket state inconsistency and potential Denial of Service (DoS) due to concurrent write operations.
[Mitigation] Update to the latest stable kernel version provided by your distribution and reboot.
Linux Kernel POSIX CPU Timers Race Condition Vulnerability (CVE-2025-38352) Technical Advisory
[Affected Scope] Linux kernel deployments where CONFIG_POSIX_CPU_TIMERS_TASK_WORK is disabled or not supported
[Impact] Local attackers can exploit a race condition to trigger a kernel panic (DoS) or potentially achieve Local Privilege Escalation (LPE) via memory corruption
[Mitigation] Apply the official stable kernel patches or ensure CONFIG_POSIX_CPU_TIMERS_TASK_WORK=y is enabled in the kernel configuration