Vulnerabilities

Palo Alto Networks PAN-OS Code Injection Vulnerability

A remote code execution (RCE) vulnerability in the management interface of Palo Alto Networks PAN-OS® software enables an authenticated attacker with network access to execute arbitrary code with root privileges on the firewall. The security risk posed by this issue is minimized by restricting access to the management interface to only trusted internal IP addresses according to our recommended 

No products entered. The advisory names Palo Alto Networks PAN-OS.

CVE-2026-0322 Full triage →

Microsoft Windows Command Injection Vulnerability

Improper neutralization of special elements used in a command ('command injection') in Windows Shell allows an unauthorized attacker to bypass a security feature over a network.

No products entered. The advisory names Microsoft Windows Server.

CVE-2026-96951 Full triage →

Ivanti Connect Secure Authentication Bypass by Spoofing Vulnerability

Authentication bypass by spoofing in ICS before version 25.1.3.0 allows a remote unauthenticated attacker to execute arbitrary commands. This does not impact ICS version 22.7R2.14 or prior.

No products entered. The advisory names Ivanti Connect Secure.

CVE-2026-104935 Full triage →

Atlassian Multiple Products Files or Directories Accessible to External Parties Vulnerability

This is a vulnerability in Bitbucket Data Center, Confluence Data Center, Jira Service Management Data Center, Jira Software Data Center, Bamboo Data Center. Crowd Data Center, Crucible and Fisheye. This Arbitrary File Access vulnerability allows an unauthenticated attacker to access specific files within the web application root directory in affected versions. Exploitation requires prior knowledg

No products entered. The advisory names Atlassian Confluence.

CVE-2026-21589 Full triage →

Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability

Vulnerability in NetScaler ADC and NetScaler Gateway. This issue affects ADC: before 14.1-73.41, before 13.1-64.28, before 14.1-73.41 FIPS, and before 13.1-37.282; Gateway: before 14.1-73.41 and before 13.1-64.28.

No products entered. The advisory names Citrix NetScaler ADC.

CVE-2026-88779 Full triage →

Apple Multiple Products Out-of-Bounds Write Vulnerability

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.1 and iPadOS 26.7.1, macOS Sequoia 15.8.1, macOS Tahoe 26.7.1. Processing a maliciously crafted file may lead to arbitrary code execution. Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individuals on versions o

No products entered. The advisory names Apple macOS.

CVE-2026-86950 Full triage →

Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability

Vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1.37.279 FIPS and NDcPP; Gateway: before 14.1-73.37 and before 13.1-64.23 leading to Remote Code Execution or Denial of Service

No products entered. The advisory names Citrix NetScaler ADC.

CVE-2026-88772 Full triage →

Citrix NetScaler Improper Input Validation Vulnerability

Improper input validation vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1.37.279 FIPS and NDcPP; Gateway: before 14.1-73.37 and before 13.1-64.23 leading to an unauthenticated attacker to execute arbitrary commands.

No products entered. The advisory names Citrix NetScaler ADC.

CVE-2026-88771 Full triage →

WordPress Core Remote File Inclusion Vulnerability

An unauthenticated attacker can make `get_page_template()` page-template resolution include a chosen readable local `.php` file outside the active theme directories. If relevant pre-conditions for both the server and the active theme are met, this can lead to RCE.

No products entered. The advisory names WordPress WordPress core.

CVE-2026-87902 Full triage →

Google Chromium V8 Out of Bounds Write Vulnerability

Out of bounds write in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)

No products entered. The advisory names Google Chrome.

CVE-2026-87491 Full triage →

Microsoft Windows Heap-Based Buffer Overflow Vulnerability

Heap-based buffer overflow in Windows ALPC allows an authorized attacker to elevate privileges locally.

No products entered. The advisory names Microsoft Windows Server.

CVE-2026-85880 Full triage →

Microsoft Windows Link Following Vulnerability

Improper link resolution before file access ('link following') in Windows Update Stack allows an authorized attacker to elevate privileges locally.

No products entered. The advisory names Microsoft Windows Server.

CVE-2026-81963 Full triage →

Google Chromium V8 Type Confusion Vulnerability

Type confusion in V8 in Google Chrome prior to 152.0.7977.82 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

No products entered. The advisory names Google Chrome.

CVE-2026-85046 Full triage →

Citrix NetScaler Authentication Bypass Using an Alternate Path or Channel Vulnerability

Vulnerability in NetScaler ADC and NetScaler Gateway. This issue affects ADC: from 14.1 through 73.32 and from 13.1 through 63.21; Gateway: from 14.1 through 73.32 and from 13.1 through 63.21.

No products entered. The advisory names Citrix NetScaler ADC.

CVE-2026-19490 Full triage →

Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free Vulnerability

Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

No products entered. The advisory names Microsoft Windows Server.

CVE-2026-68820 Full triage →

Apple macOS Improper Authentication Vulnerability

An authentication issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.7.9, macOS Sonoma 14.8.9, macOS Tahoe 26.6.1, macOS Tahoe 26.7. An attacker on the network may be able to authenticate to Screen Sharing without valid credentials.

No products entered. The advisory names Apple macOS.

CVE-2026-65400 Full triage →

Broadcom VMware vCenter Path Traversal Vulnerability

VMware vCenter contains a directory traversal vulnerability in the Syslog server. A malicious actor with network access to vCenter may exploit this issue to execute arbitrary code.

No products entered. The advisory names VMware vCenter Server.

CVE-2026-59310 Full triage →

WordPress Core Interpretation Conflict Vulnerability

WordPress 6.9.x before 6.9.5 and 7.0.x before 7.0.2 is affected by a REST API batch endpoint route confusion issue which, combined with the author__not_in WP_Query SQL Injection (CVE-2026-60137), could allow an attacker to perform SQL Injection and achieve Remote Code Execution.

No products entered. The advisory names WordPress WordPress core.

CVE-2026-63030 Full triage →

WordPress Core SQL Injection Vulnerability

WordPress 6.8.x before 6.8.6, 6.9.x before 6.9.5, and 7.0.x before 7.0.2 does not properly sanitise the author__not_in parameter of WP_Query, which could allow SQL Injection when a plugin or theme passes untrusted input to the parameter.

No products entered. The advisory names WordPress WordPress core.

CVE-2026-60137 Full triage →

Microsoft Active Directory Federation Services Insufficient Granularity of Access Control Vulnerability

Insufficient granularity of access control in Active Directory Federation Services (AD FS) allows an authorized attacker to elevate privileges locally.

No products entered. The advisory names Microsoft Windows Server.

CVE-2026-56155 Full triage →

Citrix NetScaler ADC and NetScaler Gateway Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability

Memory overflow vulnerability NetScaler ADC and NetScaler Gateway leading to unpredictable or erroneous behavior and Denial of Service if the appliance is configured as a Gateway (SSL VPN, ICA Proxy, CVPN, RDP Proxy) or AAA virtual server

No products entered. The advisory names Citrix NetScaler ADC.

CVE-2026-8452 Full triage →

Google Chromium V8 Out-of-Bounds Read and Write Vulnerability

Out of bounds read and write in V8 in Google Chrome prior to 149.0.7827.103 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)

No products entered. The advisory names Google Chrome.

CVE-2026-11645 Full triage →

Microsoft Exchange Server Cross-Site Scripting Vulnerability

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network.

No products entered. The advisory names Microsoft Exchange Server.

CVE-2026-42897 Full triage →

Palo Alto Networks PAN-OS Authentication Bypass Vulnerability

Authentication bypass vulnerabilities in the GlobalProtect portal and gateway of Palo Alto Networks PAN-OS® software allows the attacker to bypass security restrictions and establish an unauthorized VPN connection. Panorama and Cloud NGFW are not impacted by these issues.

No products entered. The advisory names Palo Alto Networks PAN-OS.

CVE-2026-0257 Full triage →

Ivanti Endpoint Manager Mobile (EPMM) Improper Input Validation Vulnerability

An Improper Input Validation in Ivanti EPMM before versions 12.6.1.1, 12.7.0.1, and 12.8.0.1 allows a remotely authenticated user with administrative access to achieve remote code execution.

No products entered. The advisory names Ivanti Connect Secure.

CVE-2026-6973 Full triage →

Palo Alto Networks PAN-OS Out-of-bounds Write Vulnerability

A buffer overflow vulnerability in the User-ID™ Authentication Portal (aka Captive Portal) service of Palo Alto Networks PAN-OS software allows an unauthenticated attacker to execute arbitrary code with root privileges on the PA-Series and VM-Series firewalls by sending specially crafted packets. The risk of this issue is greatly reduced if you secure access to the User-ID™ Authentication Portal

No products entered. The advisory names Palo Alto Networks PAN-OS.

CVE-2026-0300 Full triage →

Linux Kernel Incorrect Resource Transfer Between Spheres Vulnerability

In the Linux kernel, the following vulnerability has been resolved: crypto: algif_aead - Revert to operating out-of-place This mostly reverts commit 72548b093ee3 except for the copying of the associated data. There is no benefit in operating in-place in algif_aead since the source and destination come from different mappings. Get rid of all the complexity added for in-place operation and just

No products entered. The advisory names Red Hat Enterprise Linux and Canonical Ubuntu.

CVE-2026-31431 Full triage →

Microsoft Internet Key Exchange (IKE) Service Extensions Double Free Vulnerability

Double free in Windows IKE Extension allows an unauthorized attacker to execute code over a network.

No products entered. The advisory names Microsoft Windows Server.

CVE-2026-33824 Full triage →

Microsoft Windows Protection Mechanism Failure Vulnerability

Protection mechanism failure in Windows Shell allows an unauthorized attacker to perform spoofing over a network.

No products entered. The advisory names Microsoft Windows Server.

CVE-2026-32202 Full triage →

Fortinet Multiple Products Path Traversal Vulnerability

An Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') [CWE-22] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.4, FortiOS 7.4.0 through 7.4.9, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiOS 6.4 all versions, FortiPAM 1.7.0, FortiPAM 1.6 all versions, FortiPAM 1.5 all versions, FortiPAM 1.4 all versions, FortiPAM 1.3 all versions, FortiPAM 1.2 all versio

No products entered. The advisory names Fortinet FortiGate (FortiOS).

CVE-2025-61624 Full triage →

Apache Tomcat Missing Encryption of Sensitive Data Vulnerability

Missing Encryption of Sensitive Data vulnerability in Apache Tomcat due to the fix for CVE-2026-29146 allowing the bypass of the EncryptInterceptor. This issue affects Apache Tomcat: 11.0.20, 10.1.53, 9.0.116. Users are recommended to upgrade to version 11.0.21, 10.1.54 or 9.0.117, which fix the issue.

No products entered. The advisory names Red Hat Enterprise Linux.

CVE-2026-34486 Full triage →

Google Dawn Use-After-Free Vulnerability

Use after free in Dawn in Google Chrome prior to 146.0.7680.178 allowed a remote attacker who had compromised the renderer process to execute arbitrary code via a crafted HTML page. (Chromium security severity: High)

No products entered. The advisory names Google Chrome.

CVE-2026-5281 Full triage →

Citrix NetScaler Out-of-Bounds Read Vulnerability

Insufficient input validation in NetScaler ADC and NetScaler Gateway when configured as a SAML IDP leading to memory overread

No products entered. The advisory names Citrix NetScaler ADC.

CVE-2026-3055 Full triage →

Google Chromium V8 Improper Restriction of Operations Within the Bounds of a Memory Buffer Vulnerability

Inappropriate implementation in V8 in Google Chrome prior to 146.0.7680.75 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)

No products entered. The advisory names Google Chrome.

CVE-2026-3910 Full triage →

Google Skia Out-of-Bounds Write Vulnerability

Out of bounds write in Skia in Google Chrome prior to 146.0.7680.75 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. (Chromium security severity: High)

No products entered. The advisory names Google Chrome.

CVE-2026-3909 Full triage →

Google Chromium CSS Use-After-Free Vulnerability

Use after free in CSS in Google Chrome prior to 145.0.7632.75 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)

No products entered. The advisory names Google Chrome.

CVE-2026-2441 Full triage →

Apple Multiple Buffer Overflow Vulnerability

A memory corruption issue was addressed with improved state management. This issue is fixed in iOS 26.3 and iPadOS 26.3, macOS Tahoe 26.3, tvOS 26.3, visionOS 26.3, watchOS 26.3. An attacker with memory write capability may be able to execute arbitrary code. Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individuals

No products entered. The advisory names Apple macOS.

CVE-2026-20700 Full triage →

Microsoft Windows Improper Privilege Management Vulnerability

Improper privilege management in Windows Remote Desktop allows an authorized attacker to elevate privileges locally.

No products entered. The advisory names Microsoft Windows Server.

CVE-2026-21533 Full triage →

Microsoft Windows NULL Pointer Dereference Vulnerability

Null pointer dereference in Windows Remote Access Connection Manager allows an unauthorized attacker to deny service locally.

No products entered. The advisory names Microsoft Windows Server.

CVE-2026-21525 Full triage →

Microsoft Windows Type Confusion Vulnerability

Access of resource using incompatible type ('type confusion') in Desktop Window Manager allows an authorized attacker to elevate privileges locally.

No products entered. The advisory names Microsoft Windows Server.

CVE-2026-21519 Full triage →

Microsoft MSHTML Framework Protection Mechanism Failure Vulnerability

Protection mechanism failure in MSHTML Framework allows an unauthorized attacker to bypass a security feature over a network.

No products entered. The advisory names Microsoft Windows Server.

CVE-2026-21513 Full triage →

Microsoft Windows Shell Protection Mechanism Failure Vulnerability

Protection mechanism failure in Windows Shell allows an unauthorized attacker to bypass a security feature over a network.

No products entered. The advisory names Microsoft Windows Server.

CVE-2026-21510 Full triage →

Fortinet FortiOS Exposure of Sensitive Information to an Unauthorized Actor Vulnerability

An Exposure of Sensitive Information to an Unauthorized Actor vulnerability [CWE-200] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.1, FortiOS 7.4.0 through 7.4.6, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiOS 6.4 all versions may allow a remote unauthenticated attacker to bypass the patch developed for the symbolic link persistency mechanism observed in some post-exploit cases

No products entered. The advisory names Fortinet FortiGate (FortiOS).

CVE-2025-68686 Full triage →

Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability

A code injection in Ivanti Endpoint Manager Mobile allowing attackers to achieve unauthenticated remote code execution.

No products entered. The advisory names Ivanti Connect Secure.

CVE-2026-1340 Full triage →

Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability

A code injection in Ivanti Endpoint Manager Mobile allowing attackers to achieve unauthenticated remote code execution.

No products entered. The advisory names Ivanti Connect Secure.

CVE-2026-1281 Full triage →

Fortinet Multiple Products Authentication Bypass Using an Alternate Path or Channel Vulnerability

An Authentication Bypass Using an Alternate Path or Channel vulnerability [CWE-288] vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.5, FortiAnalyzer 7.4.0 through 7.4.9, FortiAnalyzer 7.2.0 through 7.2.11, FortiAnalyzer 7.0.0 through 7.0.15, FortiManager 7.6.0 through 7.6.5, FortiManager 7.4.0 through 7.4.9, FortiManager 7.2.0 through 7.2.11, FortiManager 7.0.0 through 7.0.15, FortiNAC-F

No products entered. The advisory names Fortinet FortiGate (FortiOS).

CVE-2026-24858 Full triage →

Microsoft Windows Information Disclosure Vulnerability

Exposure of sensitive information to an unauthorized actor in Desktop Windows Manager allows an authorized attacker to disclose information locally.

No products entered. The advisory names Microsoft Windows Server.

CVE-2026-20805 Full triage →

Fortinet Multiple Products Heap-based Buffer Overflow Vulnerability

A heap-based buffer overflow vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2.0 through 7.2.11, FortiOS 7.0.0 through 7.0.17, FortiOS 6.4 all versions, FortiSwitchManager 7.2.0 through 7.2.6, FortiSwitchManager 7.0.0 through 7.0.5 allows attacker to execute unauthorized code or commands via specially crafted packets

No products entered. The advisory names Fortinet FortiGate (FortiOS).

CVE-2025-25249 Full triage →

Apple Multiple Products Use-After-Free WebKit Vulnerability

A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.2, iOS 18.7.3 and iPadOS 18.7.3, iOS 26.2 and iPadOS 26.2, macOS Tahoe 26.2, tvOS 26.2, visionOS 26.2, watchOS 26.2. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been exploited in an extremely sophisticated at

No products entered. The advisory names Apple macOS.

CVE-2025-43529 Full triage →

Apple Multiple Products Classic Buffer Overflow Vulnerability

A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1, watchOS 26.1. A malicious application may be able to cause unexpected system termination or write kernel memory.

No products entered. The advisory names Apple macOS.

CVE-2025-43520 Full triage →

Apple Multiple Products Improper Locking Vulnerability

A memory corruption issue was addressed with improved lock state checking. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1, watchOS 26.1. A malicious application may cause unexpected changes in memory shared between processes.

No products entered. The advisory names Apple macOS.

CVE-2025-43510 Full triage →

Google Chromium Out of Bounds Memory Access Vulnerability

Out of bounds memory access in ANGLE in Google Chrome on Mac prior to 143.0.7499.110 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. (Chromium security severity: High)

No products entered. The advisory names Google Chrome and Apple macOS.

CVE-2025-14174 Full triage →

Microsoft Windows Use After Free Vulnerability

Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.

No products entered. The advisory names Microsoft Windows Server.

CVE-2025-62221 Full triage →

Fortinet Multiple Products Improper Verification of Cryptographic Signature Vulnerability

A improper verification of cryptographic signature vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2.0 through 7.2.11, FortiOS 7.0.0 through 7.0.17, FortiProxy 7.6.0 through 7.6.3, FortiProxy 7.4.0 through 7.4.10, FortiProxy 7.2.0 through 7.2.14, FortiProxy 7.0.0 through 7.0.21, FortiSwitchManager 7.2.0 through 7.2.6, FortiSwitchManager 7.0.0 through 7

No products entered. The advisory names Fortinet FortiGate (FortiOS).

CVE-2025-59718 Full triage →

Google Chromium V8 Type Confusion Vulnerability

Type Confusion in V8 in Google Chrome prior to 142.0.7444.175 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

No products entered. The advisory names Google Chrome.

CVE-2025-13223 Full triage →

Microsoft Windows Race Condition Vulnerability

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Kernel allows an authorized attacker to elevate privileges locally.

No products entered. The advisory names Microsoft Windows Server.

CVE-2025-62215 Full triage →

Microsoft Windows Link Following Vulnerability

Improper link resolution before file access ('link following') in Host Process for Windows Tasks allows an authorized attacker to elevate privileges locally.

No products entered. The advisory names Microsoft Windows Server.

CVE-2025-60710 Full triage →

Apple Multiple products Use-After-Free Vulnerability

A use-after-free issue was addressed with improved memory management. This issue is fixed in macOS Ventura 13.5, iOS 16.6 and iPadOS 16.6, Safari 16.6, iOS 15.8.7 and iPadOS 15.8.7. Processing maliciously crafted web content may lead to memory corruption.

No products entered. The advisory names Apple macOS.

CVE-2023-43000 Full triage →

Microsoft Windows Server Update Service (WSUS) Deserialization of Untrusted Data Vulnerability

Deserialization of untrusted data in Windows Server Update Service allows an unauthorized attacker to execute code over a network.

No products entered. The advisory names Microsoft Windows Server.

CVE-2025-59287 Full triage →

Microsoft Windows Improper Access Control Vulnerability

Improper access control in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally.

No products entered. The advisory names Microsoft Windows Server.

CVE-2025-59230 Full triage →

Microsoft Windows Untrusted Pointer Dereference Vulnerability

Microsoft is aware of vulnerabilities in the third party Agere Modem driver that ships natively with supported Windows operating systems. This is an announcement of the upcoming removal of ltmdm64.sys driver. The driver has been removed in the October cumulative update. Fax modem hardware dependent on this specific driver will no longer work on Windows. Microsoft recommends removing any existing

No products entered. The advisory names Microsoft Windows Server.

CVE-2025-24990 Full triage →

Cisco IOS and IOS XE Software SNMP Denial of Service and Remote Code Execution Vulnerability

A vulnerability in the Simple Network Management Protocol (SNMP) subsystem of Cisco IOS Software and Cisco IOS XE Software could allow the following: An authenticated, remote attacker with low privileges could cause a denial of service (DoS) condition on an affected device that is running Cisco IOS Software or Cisco IOS XE Software. To cause the DoS, the attacker must have the SNMPv2c or earl

No products entered. The advisory names Cisco IOS XE.

CVE-2025-20352 Full triage →

Google Chromium V8 Type Confusion Vulnerability

Type confusion in V8 in Google Chrome prior to 140.0.7339.185 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

No products entered. The advisory names Google Chrome.

CVE-2025-10585 Full triage →

Citrix NetScaler Memory Overflow Vulnerability

Memory overflow vulnerability leading to Remote Code Execution and/or Denial of Service in NetScaler ADC and NetScaler Gateway when NetScaler is configured as Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) or AAA virtual server (OR) NetScaler ADC and NetScaler Gateway 13.1, 14.1, 13.1-FIPS and NDcPP: LB virtual servers of type (HTTP, SSL or HTTP_QUIC) bound with IPv6 services or servic

No products entered. The advisory names Citrix NetScaler ADC.

CVE-2025-7775 Full triage →

Apple iOS, iPadOS, and macOS Out-of-Bounds Write Vulnerability

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 15.8.5 and iPadOS 15.8.5, iOS 16.7.12 and iPadOS 16.7.12, iOS 18.6.2 and iPadOS 18.6.2, iPadOS 17.7.10, macOS Sequoia 15.6.1, macOS Sonoma 14.7.8, macOS Ventura 13.7.8. Processing a malicious image file may result in memory corruption. Apple is aware of a report that this issue may have been exploi

No products entered. The advisory names Apple macOS.

CVE-2025-43300 Full triage →

Apple Multiple Products Buffer Overflow Vulnerability

The issue was addressed with improved memory handling. This issue is fixed in Safari 18.6, iOS 18.6 and iPadOS 18.6, macOS Sequoia 15.6, tvOS 18.6, visionOS 2.6, watchOS 11.6. Processing maliciously crafted web content may lead to memory corruption.

No products entered. The advisory names Apple macOS and Red Hat Enterprise Linux.

CVE-2025-31277 Full triage →

Google Chromium ANGLE and GPU Improper Input Validation Vulnerability

Insufficient validation of untrusted input in ANGLE and GPU in Google Chrome prior to 138.0.7204.157 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

No products entered. The advisory names Google Chrome and Apple macOS.

CVE-2025-6558 Full triage →

Google Chromium V8 Type Confusion Vulnerability

Type confusion in V8 in Google Chrome prior to 138.0.7204.96 allowed a remote attacker to perform arbitrary read/write via a crafted HTML page. (Chromium security severity: High)

No products entered. The advisory names Google Chrome.

CVE-2025-6554 Full triage →

Sudo Inclusion of Functionality from Untrusted Control Sphere Vulnerability

Sudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf from a user-controlled directory is used with the --chroot option.

No products entered. The advisory names Canonical Ubuntu and Red Hat Enterprise Linux.

CVE-2025-32463 Full triage →

Citrix NetScaler ADC and Gateway Buffer Overflow Vulnerability

Memory overflow vulnerability leading to unintended control flow and Denial of Service in NetScaler ADC and NetScaler Gateway when configured as Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) OR AAA virtual server

No products entered. The advisory names Citrix NetScaler ADC.

CVE-2025-6543 Full triage →

Citrix NetScaler ADC and Gateway Out-of-Bounds Read Vulnerability

Insufficient input validation leading to memory overread when the NetScaler is configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) OR AAA virtual server

No products entered. The advisory names Citrix NetScaler ADC.

CVE-2025-5777 Full triage →

Apple Multiple Products Unspecified Vulnerability

This issue was addressed with improved checks. This issue is fixed in iOS 15.8.4 and iPadOS 15.8.4, iOS 16.7.11 and iPadOS 16.7.11, iOS 18.3.1 and iPadOS 18.3.1, iPadOS 17.7.5, macOS Sequoia 15.3.1, macOS Sonoma 14.7.4, macOS Ventura 13.7.4, visionOS 2.3.1, watchOS 11.3.1. A logic issue existed when processing a maliciously crafted photo or video shared via an iCloud Link. Apple is aware of a repo

No products entered. The advisory names Apple macOS.

CVE-2025-43200 Full triage →

Microsoft Windows SMB Client Improper Access Control Vulnerability

Improper access control in Windows SMB allows an authorized attacker to elevate privileges over a network.

No products entered. The advisory names Microsoft Windows Server.

CVE-2025-33073 Full triage →

Microsoft Windows External Control of File Name or Path Vulnerability

External control of file name or path in Internet Shortcut Files allows an unauthorized attacker to execute code over a network.

No products entered. The advisory names Microsoft Windows Server.

CVE-2025-33053 Full triage →

IGEL OS Use of a Key Past its Expiration Date Vulnerability

In IGEL OS before 11, Secure Boot can be bypassed because the igel-flash-driver module improperly verifies a cryptographic signature. Ultimately, a crafted root filesystem can be mounted from an unverified SquashFS image.

No products entered. The advisory names Microsoft Windows Server.

CVE-2025-47827 Full triage →

Google Chromium V8 Out-of-Bounds Read and Write Vulnerability

Out of bounds read and write in V8 in Google Chrome prior to 137.0.7151.68 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

No products entered. The advisory names Google Chrome.

CVE-2025-5419 Full triage →

Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free Vulnerability

Null pointer dereference in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

No products entered. The advisory names Microsoft Windows Server.

CVE-2025-32709 Full triage →

Microsoft Windows Common Log File System (CLFS) Driver Heap-Based Buffer Overflow Vulnerability

Improper input validation in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.

No products entered. The advisory names Microsoft Windows Server.

CVE-2025-32706 Full triage →

Microsoft Windows Common Log File System (CLFS) Driver Use-After-Free Vulnerability

Use after free in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.

No products entered. The advisory names Microsoft Windows Server.

CVE-2025-32701 Full triage →

Microsoft Windows DWM Core Library Use-After-Free Vulnerability

Use after free in Windows DWM allows an authorized attacker to elevate privileges locally.

No products entered. The advisory names Microsoft Windows Server.

CVE-2025-30400 Full triage →

Microsoft Windows Scripting Engine Type Confusion Vulnerability

Access of resource using incompatible type ('type confusion') in Microsoft Scripting Engine allows an unauthorized attacker to execute code over a network.

No products entered. The advisory names Microsoft Windows Server.

CVE-2025-30397 Full triage →

Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability

Remote Code Execution in API component in Ivanti Endpoint Manager Mobile 12.5.0.0 and prior on unspecified platforms allows authenticated attackers to execute arbitrary code via crafted API requests.

No products entered. The advisory names Ivanti Connect Secure.

CVE-2025-4428 Full triage →

Ivanti Endpoint Manager Mobile (EPMM) Authentication Bypass Vulnerability

An authentication bypass in the API component of Ivanti Endpoint Manager Mobile 12.5.0.0 and prior allows attackers to access protected resources without proper credentials via the API.

No products entered. The advisory names Ivanti Connect Secure.

CVE-2025-4427 Full triage →

Apple Multiple Products Arbitrary Read and Write Vulnerability

This issue was addressed by removing the vulnerable code. This issue is fixed in iOS 18.4.1 and iPadOS 18.4.1, macOS Sequoia 15.4.1, tvOS 18.4.1, visionOS 2.4.1. An attacker with arbitrary read and write capability may be able to bypass Pointer Authentication. Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individua

No products entered. The advisory names Apple macOS.

CVE-2025-31201 Full triage →

Apple Multiple Products Memory Corruption Vulnerability

A memory corruption issue was addressed with improved bounds checking. This issue is fixed in iOS 18.4.1 and iPadOS 18.4.1, macOS Sequoia 15.4.1, tvOS 18.4.1, visionOS 2.4.1, watchOS 11.5. Processing an audio stream in a maliciously crafted media file may result in code execution. Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specif

No products entered. The advisory names Apple macOS.

CVE-2025-31200 Full triage →

Microsoft Windows Common Log File System (CLFS) Driver Use-After-Free Vulnerability

Use after free in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.

No products entered. The advisory names Microsoft Windows Server.

CVE-2025-29824 Full triage →

Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability

A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.6, Ivanti Policy Secure before version 22.7R1.4, and Ivanti ZTA Gateways before version 22.8R2.2 allows a remote unauthenticated attacker to achieve remote code execution.

No products entered. The advisory names Ivanti Connect Secure.

CVE-2025-22457 Full triage →

Google Chromium Mojo Sandbox Escape Vulnerability

Incorrect handle provided in unspecified circumstances in Mojo in Google Chrome on Windows prior to 134.0.6998.177 allowed a remote attacker to perform a sandbox escape via a malicious file. (Chromium security severity: High)

No products entered. The advisory names Google Chrome.

CVE-2025-2783 Full triage →

Apple Multiple Products WebKit Out-of-Bounds Write Vulnerability

An out-of-bounds write issue was addressed with improved checks to prevent unauthorized actions. This issue is fixed in Safari 18.3.1, iOS 15.8.4 and iPadOS 15.8.4, iOS 16.7.11 and iPadOS 16.7.11, iOS 18.3.2 and iPadOS 18.3.2, iPadOS 17.7.6, macOS Sequoia 15.3.2, visionOS 2.3.2, watchOS 11.4. Maliciously crafted web content may be able to break out of Web Content sandbox. This is a supplementary f

No products entered. The advisory names Apple macOS.

CVE-2025-24201 Full triage →

Microsoft Windows Management Console (MMC) Improper Neutralization Vulnerability

Improper neutralization in Microsoft Management Console allows an unauthorized attacker to bypass a security feature locally.

No products entered. The advisory names Microsoft Windows Server.

CVE-2025-26633 Full triage →

Microsoft Windows NTFS Heap-Based Buffer Overflow Vulnerability

Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally.

No products entered. The advisory names Microsoft Windows Server.

CVE-2025-24993 Full triage →

Microsoft Windows NTFS Out-Of-Bounds Read Vulnerability

Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally.

No products entered. The advisory names Microsoft Windows Server.

CVE-2025-24991 Full triage →

Microsoft Windows Fast FAT File System Driver Integer Overflow Vulnerability

Integer overflow or wraparound in Windows Fast FAT Driver allows an unauthorized attacker to execute code locally.

No products entered. The advisory names Microsoft Windows Server.

CVE-2025-24985 Full triage →

Microsoft Windows NTFS Information Disclosure Vulnerability

Insertion of sensitive information into log file in Windows NTFS allows an unauthorized attacker to disclose information with a physical attack.

No products entered. The advisory names Microsoft Windows Server.

CVE-2025-24984 Full triage →

Microsoft Windows Win32k Use-After-Free Vulnerability

Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.

No products entered. The advisory names Microsoft Windows Server.

CVE-2025-24983 Full triage →

Microsoft Windows NTLM Hash Disclosure Spoofing Vulnerability

External control of file name or path in Windows NTLM allows an unauthorized attacker to perform spoofing over a network.

No products entered. The advisory names Microsoft Windows Server.

CVE-2025-24054 Full triage →

VMware ESXi, Workstation, and Fusion Information Disclosure Vulnerability

VMware ESXi, Workstation, and Fusion contain an information disclosure vulnerability due to an out-of-bounds read in HGFS. A malicious actor with administrative privileges to a virtual machine may be able to exploit this issue to leak memory from the vmx process.

No products entered. The advisory names VMware ESXi.

CVE-2025-22226 Full triage →

VMware ESXi Arbitrary Write Vulnerability

VMware ESXi contains an arbitrary write vulnerability. A malicious actor with privileges within the VMX process may trigger an arbitrary kernel write leading to an escape of the sandbox.

No products entered. The advisory names VMware ESXi.

CVE-2025-22225 Full triage →

VMware ESXi and Workstation TOCTOU Race Condition Vulnerability

VMware ESXi, and Workstation contain a TOCTOU (Time-of-Check Time-of-Use) vulnerability that leads to an out-of-bounds write. A malicious actor with local administrative privileges on a virtual machine may exploit this issue to execute code as the virtual machine's VMX process running on the host.

No products entered. The advisory names VMware ESXi.

CVE-2025-22224 Full triage →

Palo Alto Networks PAN-OS File Read Vulnerability

An authenticated file read vulnerability in the Palo Alto Networks PAN-OS software enables an authenticated attacker with network access to the management web interface to read files on the PAN-OS filesystem that are readable by the “nobody” user. You can greatly reduce the risk of this issue by restricting access to the management web interface to only trusted internal IP addresses according to

No products entered. The advisory names Palo Alto Networks PAN-OS.

CVE-2025-0111 Full triage →

Palo Alto Networks PAN-OS Authentication Bypass Vulnerability

An authentication bypass in the Palo Alto Networks PAN-OS software enables an unauthenticated attacker with network access to the management web interface to bypass the authentication otherwise required by the PAN-OS management web interface and invoke certain PHP scripts. While invoking these PHP scripts does not enable remote code execution, it can negatively impact integrity and confidentiality

No products entered. The advisory names Palo Alto Networks PAN-OS.

CVE-2025-0108 Full triage →

Microsoft Windows Ancillary Function Driver for WinSock Heap-Based Buffer Overflow Vulnerability

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

No products entered. The advisory names Microsoft Windows Server.

CVE-2025-21418 Full triage →

Microsoft Windows Storage Link Following Vulnerability

Windows Storage Elevation of Privilege Vulnerability

No products entered. The advisory names Microsoft Windows Server.

CVE-2025-21391 Full triage →

Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability

An Authentication Bypass Using an Alternate Path or Channel vulnerability [CWE-288] affecting FortiOS 7.0.0 through 7.0.16 and FortiProxy 7.2.0 through 7.2.12, 7.0.0 through 7.0.19 may allow a remote unauthenticated attacker with prior knowledge of upstream and downstream devices serial numbers to gain super-admin privileges on the downstream device, if the Security Fabric is enabled, via crafted

No products entered. The advisory names Fortinet FortiGate (FortiOS).

CVE-2025-24472 Full triage →

Apple Multiple Products Use-After-Free Vulnerability

A use after free issue was addressed with improved memory management. This issue is fixed in iOS 18.3 and iPadOS 18.3, iPadOS 17.7.6, macOS Sequoia 15.3, macOS Sonoma 14.7.5, macOS Ventura 13.7.5, tvOS 18.3, visionOS 2.3, watchOS 11.3. A malicious application may be able to elevate privileges. Apple is aware of a report that this issue may have been actively exploited against versions of iOS befor

No products entered. The advisory names Apple macOS.

CVE-2025-24085 Full triage →

Microsoft Windows Hyper-V NT Kernel Integration VSP Use-After-Free Vulnerability

Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability

No products entered. The advisory names Microsoft Windows Server.

CVE-2025-21335 Full triage →

Microsoft Windows Hyper-V NT Kernel Integration VSP Use-After-Free Vulnerability

Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability

No products entered. The advisory names Microsoft Windows Server.

CVE-2025-21334 Full triage →

Microsoft Windows Hyper-V NT Kernel Integration VSP Heap-based Buffer Overflow Vulnerability

Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability

No products entered. The advisory names Microsoft Windows Server.

CVE-2025-21333 Full triage →

Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability

An Authentication Bypass Using an Alternate Path or Channel vulnerability [CWE-288] affecting FortiOS version 7.0.0 through 7.0.16 and FortiProxy version 7.0.0 through 7.0.19 and 7.2.0 through 7.2.12 allows a remote attacker to gain super-admin privileges via crafted requests to Node.js websocket module.

No products entered. The advisory names Fortinet FortiGate (FortiOS).

CVE-2024-55591 Full triage →

Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability

A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.5, Ivanti Policy Secure before version 22.7R1.2, and Ivanti Neurons for ZTA gateways before version 22.7R2.3 allows a remote unauthenticated attacker to achieve remote code execution.

No products entered. The advisory names Ivanti Connect Secure.

CVE-2025-0282 Full triage →

Palo Alto Networks PAN-OS Malicious DNS Packet Vulnerability

A Denial of Service vulnerability in the DNS Security feature of Palo Alto Networks PAN-OS software allows an unauthenticated attacker to send a malicious packet through the data plane of the firewall that reboots the firewall. Repeated attempts to trigger this condition will cause the firewall to enter maintenance mode.

No products entered. The advisory names Palo Alto Networks PAN-OS.

CVE-2024-3393 Full triage →

Microsoft Windows Common Log File System (CLFS) Driver Heap-Based Buffer Overflow Vulnerability

Windows Common Log File System Driver Elevation of Privilege Vulnerability

No products entered. The advisory names Microsoft Windows Server.

CVE-2024-49138 Full triage →

Apple Multiple Products Cross-Site Scripting (XSS) Vulnerability

A cookie management issue was addressed with improved state management. This issue is fixed in Safari 18.1.1, iOS 17.7.2 and iPadOS 17.7.2, iOS 18.1.1 and iPadOS 18.1.1, macOS Sequoia 15.1.1, visionOS 2.1.1. Processing maliciously crafted web content may lead to a cross site scripting attack. Apple is aware of a report that this issue may have been actively exploited on Intel-based Mac systems.

No products entered. The advisory names Apple macOS.

CVE-2024-44309 Full triage →

Apple Multiple Products Code Execution Vulnerability

The issue was addressed with improved checks. This issue is fixed in Safari 18.1.1, iOS 17.7.2 and iPadOS 17.7.2, iOS 18.1.1 and iPadOS 18.1.1, macOS Sequoia 15.1.1, visionOS 2.1.1. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited on Intel-based Mac systems.

No products entered. The advisory names Apple macOS.

CVE-2024-44308 Full triage →

Palo Alto Networks PAN-OS Management Interface OS Command Injection Vulnerability

A privilege escalation vulnerability in Palo Alto Networks PAN-OS software allows a PAN-OS administrator with access to the management web interface to perform actions on the firewall with root privileges. Cloud NGFW and Prisma Access are not impacted by this vulnerability.

No products entered. The advisory names Palo Alto Networks PAN-OS.

CVE-2024-9474 Full triage →

Palo Alto Networks PAN-OS Management Interface Authentication Bypass Vulnerability

An authentication bypass in Palo Alto Networks PAN-OS software enables an unauthenticated attacker with network access to the management web interface to gain PAN-OS administrator privileges to perform administrative actions, tamper with the configuration, or exploit other authenticated privilege escalation vulnerabilities like CVE-2024-9474 https://security.paloaltonetworks.com/CVE-2024-9474 .

No products entered. The advisory names Palo Alto Networks PAN-OS.

CVE-2024-0012 Full triage →

Microsoft Windows Task Scheduler Privilege Escalation Vulnerability

Windows Task Scheduler Elevation of Privilege Vulnerability

No products entered. The advisory names Microsoft Windows Server.

CVE-2024-49039 Full triage →

Microsoft Windows NTLMv2 Hash Disclosure Spoofing Vulnerability

NTLM Hash Disclosure Spoofing Vulnerability

No products entered. The advisory names Microsoft Windows Server.

CVE-2024-43451 Full triage →

Mozilla Firefox Use-After-Free Vulnerability

An attacker was able to achieve code execution in the content process by exploiting a use-after-free in Animation timelines. We have had reports of this vulnerability being exploited in the wild. This vulnerability affects Firefox < 131.0.2, Firefox ESR < 128.3.1, Firefox ESR < 115.16.1, Thunderbird < 131.0.1, Thunderbird < 128.3.1, and Thunderbird < 115.16.0.

No products entered. The advisory names Mozilla Firefox.

CVE-2024-9680 Full triage →

Microsoft Windows MSHTML Platform Spoofing Vulnerability

Windows MSHTML Platform Spoofing Vulnerability

No products entered. The advisory names Microsoft Windows Server.

CVE-2024-43573 Full triage →

Microsoft Windows Management Console Remote Code Execution Vulnerability

Microsoft Management Console Remote Code Execution Vulnerability

No products entered. The advisory names Microsoft Windows Server.

CVE-2024-43572 Full triage →

VMware vCenter Server Privilege Escalation Vulnerability

The vCenter Server contains a privilege escalation vulnerability. A malicious actor with network access to vCenter Server may trigger this vulnerability to escalate privileges to root by sending a specially crafted network packet.

No products entered. The advisory names VMware vCenter Server.

CVE-2024-38813 Full triage →

VMware vCenter Server Heap-Based Buffer Overflow Vulnerability

The vCenter Server contains a heap-overflow vulnerability in the implementation of the DCERPC protocol. A malicious actor with network access to vCenter Server may trigger this vulnerability by sending a specially crafted network packet potentially leading to remote code execution.

No products entered. The advisory names VMware vCenter Server.

CVE-2024-38812 Full triage →

Microsoft Windows MSHTML Platform Spoofing Vulnerability

Windows MSHTML Platform Spoofing Vulnerability

No products entered. The advisory names Microsoft Windows Server.

CVE-2024-43461 Full triage →

Microsoft Windows Mark of the Web (MOTW) Protection Mechanism Failure Vulnerability

Windows Mark of the Web Security Feature Bypass Vulnerability

No products entered. The advisory names Microsoft Windows Server.

CVE-2024-38217 Full triage →

Microsoft Windows Installer Improper Privilege Management Vulnerability

Windows Installer Elevation of Privilege Vulnerability

No products entered. The advisory names Microsoft Windows Server.

CVE-2024-38014 Full triage →

Google Chromium V8 Type Confusion Vulnerability

Type confusion in V8 in Google Chrome prior to 128.0.6613.84 allowed a remote attacker to exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

No products entered. The advisory names Google Chrome.

CVE-2024-7971 Full triage →

Google Chromium V8 Inappropriate Implementation Vulnerability

Inappropriate implementation in V8 in Google Chrome prior to 128.0.6613.84 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

No products entered. The advisory names Google Chrome.

CVE-2024-7965 Full triage →

Microsoft Windows SmartScreen Security Feature Bypass Vulnerability

Windows Mark of the Web Security Feature Bypass Vulnerability

No products entered. The advisory names Microsoft Windows Server.

CVE-2024-38213 Full triage →

Microsoft Windows Ancillary Function Driver for WinSock Privilege Escalation Vulnerability

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

No products entered. The advisory names Microsoft Windows Server.

CVE-2024-38193 Full triage →

Microsoft Windows Scripting Engine Memory Corruption Vulnerability

Scripting Engine Memory Corruption Vulnerability

No products entered. The advisory names Microsoft Windows Server.

CVE-2024-38178 Full triage →

Microsoft Windows Power Dependency Coordinator Privilege Escalation Vulnerability

Windows Power Dependency Coordinator Elevation of Privilege Vulnerability

No products entered. The advisory names Microsoft Windows Server.

CVE-2024-38107 Full triage →

Microsoft Windows Kernel Privilege Escalation Vulnerability

Windows Kernel Elevation of Privilege Vulnerability

No products entered. The advisory names Microsoft Windows Server.

CVE-2024-38106 Full triage →

Oracle WebLogic Server Unspecified Vulnerability

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3, IIOP to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in unauthorized access to critical data o

No products entered. The advisory names Oracle WebLogic Server.

CVE-2024-21182 Full triage →

Microsoft Windows MSHTML Platform Spoofing Vulnerability

Windows MSHTML Platform Spoofing Vulnerability

No products entered. The advisory names Microsoft Windows Server.

CVE-2024-38112 Full triage →

Microsoft Windows Hyper-V Privilege Escalation Vulnerability

Windows Hyper-V Elevation of Privilege Vulnerability

No products entered. The advisory names Microsoft Windows Server.

CVE-2024-38080 Full triage →

Apache HTTP Server Improper Escaping of Output Vulnerability

Improper escaping of output in mod_rewrite in Apache HTTP Server 2.4.59 and earlier allows an attacker to map URLs to filesystem locations that are permitted to be served by the server but are not intentionally/directly reachable by any URL, resulting in code execution or source code disclosure. Substitutions in server context that use a backreferences or variables as the first segment of the su

No products entered. The advisory names Apache HTTP Server.

CVE-2024-38475 Full triage →

VMware ESXi Authentication Bypass Vulnerability

VMware ESXi contains an authentication bypass vulnerability. A malicious actor with sufficient Active Directory (AD) permissions can gain full access to an ESXi host that was previously configured to use AD for user management https://blogs.vmware.com/vsphere/2012/09/joining-vsphere-hosts-to-active-directory.html by re-creating the configured AD group ('ESXi Admins' by default) after it was dele

No products entered. The advisory names VMware ESXi.

CVE-2024-37085 Full triage →

Broadcom VMware vCenter Server Out-of-bounds Write Vulnerability

vCenter Server contains a heap-overflow vulnerability in the implementation of the DCERPC protocol. A malicious actor with network access to vCenter Server may trigger this vulnerability by sending a specially crafted network packet potentially leading to remote code execution.

No products entered. The advisory names VMware vCenter Server.

CVE-2024-37079 Full triage →

Microsoft Windows Kernel-Mode Driver Untrusted Pointer Dereference Vulnerability

Windows Kernel-Mode Driver Elevation of Privilege Vulnerability

No products entered. The advisory names Microsoft Windows Server.

CVE-2024-35250 Full triage →

Microsoft Windows Kernel TOCTOU Race Condition Vulnerability

Windows Kernel Elevation of Privilege Vulnerability

No products entered. The advisory names Microsoft Windows Server.

CVE-2024-30088 Full triage →

Google Chromium V8 Type Confusion Vulnerability

Type Confusion in V8 in Google Chrome prior to 125.0.6422.112 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)

No products entered. The advisory names Google Chrome.

CVE-2024-5274 Full triage →

Google Chromium V8 Type Confusion Vulnerability

Type Confusion in V8 in Google Chrome prior to 125.0.6422.60 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)

No products entered. The advisory names Google Chrome.

CVE-2024-4947 Full triage →

Microsoft DWM Core Library Privilege Escalation Vulnerability

Windows DWM Core Library Elevation of Privilege Vulnerability

No products entered. The advisory names Microsoft Windows Server.

CVE-2024-30051 Full triage →

Microsoft Windows MSHTML Platform Security Feature Bypass Vulnerability

Windows MSHTML Platform Security Feature Bypass Vulnerability

No products entered. The advisory names Microsoft Windows Server.

CVE-2024-30040 Full triage →

Google Chromium V8 Out-of-Bounds Memory Write Vulnerability

Out of bounds write in V8 in Google Chrome prior to 124.0.6367.207 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (Chromium security severity: High)

No products entered. The advisory names Google Chrome.

CVE-2024-4761 Full triage →

Google Chromium Visuals Use-After-Free Vulnerability

Use after free in Visuals in Google Chrome prior to 124.0.6367.201 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

No products entered. The advisory names Google Chrome.

CVE-2024-4671 Full triage →

Palo Alto Networks PAN-OS Command Injection Vulnerability

A command injection as a result of arbitrary file creation vulnerability in the GlobalProtect feature of Palo Alto Networks PAN-OS software for specific PAN-OS versions and distinct feature configurations may enable an unauthenticated attacker to execute arbitrary code with root privileges on the firewall. Cloud NGFW, Panorama appliances, and Prisma Access are not impacted by this vulnerability.

No products entered. The advisory names Palo Alto Networks PAN-OS.

CVE-2024-3400 Full triage →

Microsoft SmartScreen Prompt Security Feature Bypass Vulnerability

SmartScreen Prompt Security Feature Bypass Vulnerability

No products entered. The advisory names Microsoft Windows Server.

CVE-2024-29988 Full triage →

Microsoft Windows Error Reporting Service Improper Privilege Management Vulnerability

Windows Error Reporting Service Elevation of Privilege Vulnerability

No products entered. The advisory names Microsoft Windows Server.

CVE-2024-26169 Full triage →

Apple Multiple Products Memory Corruption Vulnerability

A memory corruption issue was addressed with improved validation. This issue is fixed in iOS 16.7.8 and iPadOS 16.7.8, iOS 17.4 and iPadOS 17.4, macOS Monterey 12.7.6, macOS Sonoma 14.4, macOS Ventura 13.6.7, tvOS 17.4, visionOS 1.1, watchOS 10.4. An attacker with arbitrary kernel read and write capability may be able to bypass kernel memory protections. Apple is aware of a report that this issue

No products entered. The advisory names Apple macOS.

CVE-2024-23296 Full triage →

Apple Multiple Products Memory Corruption Vulnerability

A memory corruption issue was addressed with improved validation. This issue is fixed in iOS 16.7.6 and iPadOS 16.7.6, iOS 17.4 and iPadOS 17.4, macOS Monterey 12.7.4, macOS Sonoma 14.4, macOS Ventura 13.6.5, tvOS 17.4, visionOS 1.1, watchOS 10.4. An attacker with arbitrary kernel read and write capability may be able to bypass kernel memory protections. Apple is aware of a report that this issue

No products entered. The advisory names Apple macOS.

CVE-2024-23225 Full triage →

Fortinet Multiple Products Format String Vulnerability

A use of externally-controlled format string in Fortinet FortiOS versions 7.4.0 through 7.4.2, 7.2.0 through 7.2.6, 7.0.0 through 7.0.13, FortiProxy versions 7.4.0 through 7.4.2, 7.2.0 through 7.2.8, 7.0.0 through 7.0.14, FortiPAM versions 1.2.0, 1.1.0 through 1.1.2, 1.0.0 through 1.0.3, FortiSwitchManager versions 7.2.0 through 7.2.3, 7.0.0 through 7.0.3 allows attacker to execute unauthorized co

No products entered. The advisory names Fortinet FortiGate (FortiOS).

CVE-2024-23113 Full triage →

Microsoft Windows Internet Shortcut Files Security Feature Bypass Vulnerability

Internet Shortcut Files Security Feature Bypass Vulnerability

No products entered. The advisory names Microsoft Windows Server.

CVE-2024-21412 Full triage →

Microsoft Exchange Server Privilege Escalation Vulnerability

Microsoft Exchange Server Elevation of Privilege Vulnerability

No products entered. The advisory names Microsoft Exchange Server.

CVE-2024-21410 Full triage →

Microsoft Windows SmartScreen Security Feature Bypass Vulnerability

Windows SmartScreen Security Feature Bypass Vulnerability

No products entered. The advisory names Microsoft Windows Server.

CVE-2024-21351 Full triage →

Microsoft Windows Kernel Exposed IOCTL with Insufficient Access Control Vulnerability

Windows Kernel Elevation of Privilege Vulnerability

No products entered. The advisory names Microsoft Windows Server.

CVE-2024-21338 Full triage →

Fortinet FortiOS Out-of-Bound Write Vulnerability

A out-of-bounds write vulnerability in Fortinet FortiOS 7.4.0 through 7.4.2, FortiOS 7.2.0 through 7.2.6, FortiOS 7.0.0 through 7.0.13, FortiOS 6.4.0 through 6.4.14, FortiOS 6.2.0 through 6.2.15, FortiOS 6.0 all versions, FortiProxy 7.4.0 through 7.4.2, FortiProxy 7.2.0 through 7.2.8, FortiProxy 7.0.0 through 7.0.14, FortiProxy 2.0.0 through 2.0.13, FortiProxy 01.02 all versions, FortiProxy 1.2 al

No products entered. The advisory names Fortinet FortiGate (FortiOS).

CVE-2024-21762 Full triage →

Ivanti Connect Secure, Policy Secure, and Neurons Server-Side Request Forgery (SSRF) Vulnerability

A server-side request forgery vulnerability in the SAML component of Ivanti Connect Secure (9.x, 22.x) and Ivanti Policy Secure (9.x, 22.x) and Ivanti Neurons for ZTA allows an attacker to access certain restricted resources without authentication.

No products entered. The advisory names Ivanti Connect Secure.

CVE-2024-21893 Full triage →

Apple Multiple Products WebKit Type Confusion Vulnerability

A type confusion issue was addressed with improved checks. This issue is fixed in Safari 17.3, iOS 15.8.7 and iPadOS 15.8.7, iOS 16.7.5 and iPadOS 16.7.5, iOS 17.3 and iPadOS 17.3, macOS Monterey 12.7.3, macOS Sonoma 14.3, macOS Ventura 13.6.4, tvOS 17.3, visionOS 1.0.2. Processing maliciously crafted web content may lead to arbitrary code execution. This fix associated with the Coruna exploit was

No products entered. The advisory names Apple macOS.

CVE-2024-23222 Full triage →

Citrix NetScaler ADC and NetScaler Gateway Buffer Overflow Vulnerability

Improper Restriction of Operations within the Bounds of a Memory Buffer in NetScaler ADC and NetScaler Gateway allows Unauthenticated Denial of Service and Out-Of-Bounds Memory Read

No products entered. The advisory names Citrix NetScaler ADC.

CVE-2023-6549 Full triage →

Citrix NetScaler ADC and NetScaler Gateway Code Injection Vulnerability

Improper Control of Generation of Code ('Code Injection') in NetScaler ADC and NetScaler Gateway allows an attacker with access to NSIP, CLIP or SNIP with management interface to perform Authenticated (low privileged) remote code execution on Management Interface.

No products entered. The advisory names Citrix NetScaler ADC.

CVE-2023-6548 Full triage →

Google Chromium V8 Out-of-Bounds Memory Access Vulnerability

Out of bounds memory access in V8 in Google Chrome prior to 120.0.6099.224 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

No products entered. The advisory names Google Chrome.

CVE-2024-0519 Full triage →

Atlassian Confluence Data Center and Server Template Injection Vulnerability

A template injection vulnerability on older versions of Confluence Data Center and Server allows an unauthenticated attacker to achieve RCE on an affected instance. Customers using an affected version must take immediate action. Most recent supported versions of Confluence Data Center and Server are not affected by this vulnerability as it was ultimately mitigated during regular version updates.

No products entered. The advisory names Atlassian Confluence.

CVE-2023-22527 Full triage →

Ivanti Connect Secure and Policy Secure Command Injection Vulnerability

A command injection vulnerability in web components of Ivanti Connect Secure (9.x, 22.x) and Ivanti Policy Secure (9.x, 22.x) allows an authenticated administrator to send specially crafted requests and execute arbitrary commands on the appliance.

No products entered. The advisory names Ivanti Connect Secure.

CVE-2024-21887 Full triage →

Ivanti Connect Secure and Policy Secure Authentication Bypass Vulnerability

An authentication bypass vulnerability in the web component of Ivanti ICS 9.x, 22.x and Ivanti Policy Secure allows a remote attacker to access restricted resources by bypassing control checks.

No products entered. The advisory names Ivanti Connect Secure.

CVE-2023-46805 Full triage →

Apple Multiple Products Memory Corruption Vulnerability

The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.1, watchOS 9.2, iOS 16.2 and iPadOS 16.2, tvOS 16.2. An attacker with arbitrary read and write capability may be able to bypass Pointer Authentication. Apple is aware of a report that this issue may have been exploited against versions of iOS released before iOS 15.7.1.

No products entered. The advisory names Apple macOS.

CVE-2022-48618 Full triage →

Linux Kernel Use-After-Free Vulnerability

It was discovered that a nft object or expression could reference a nft set on a different nft table, leading to a use-after-free once that table was deleted.

No products entered. The advisory names Canonical Ubuntu.

CVE-2022-2586 Full triage →

Google Chromium WebRTC Heap Buffer Overflow Vulnerability

Heap buffer overflow in WebRTC in Google Chrome prior to 120.0.6099.129 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

No products entered. The advisory names Google Chrome.

CVE-2023-7024 Full triage →

Apple Multiple Products WebKit Memory Corruption Vulnerability

A memory corruption vulnerability was addressed with improved locking. This issue is fixed in iOS 17.1.2 and iPadOS 17.1.2, macOS Sonoma 14.1.2, Safari 17.1.2. Processing web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been exploited against versions of iOS before iOS 16.7.1.

No products entered. The advisory names Apple macOS.

CVE-2023-42917 Full triage →

Apple Multiple Products WebKit Out-of-Bounds Read Vulnerability

An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 17.1.2 and iPadOS 17.1.2, macOS Sonoma 14.1.2, Safari 17.1.2. Processing web content may disclose sensitive information. Apple is aware of a report that this issue may have been exploited against versions of iOS before iOS 16.7.1.

No products entered. The advisory names Apple macOS.

CVE-2023-42916 Full triage →

Google Skia Integer Overflow Vulnerability

Integer overflow in Skia in Google Chrome prior to 119.0.6045.199 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a malicious file. (Chromium security severity: High)

No products entered. The advisory names Google Chrome.

CVE-2023-6345 Full triage →

Microsoft Windows Out-of-Bounds Read Vulnerability

Windows Common Log File System Driver Elevation of Privilege Vulnerability

No products entered. The advisory names Microsoft Windows Server.

CVE-2023-36424 Full triage →

Microsoft Windows Cloud Files Mini Filter Driver Privilege Escalation Vulnerability

Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

No products entered. The advisory names Microsoft Windows Server.

CVE-2023-36036 Full triage →

Microsoft Windows Desktop Window Manager (DWM) Core Library Privilege Escalation Vulnerability

Windows DWM Core Library Elevation of Privilege Vulnerability

No products entered. The advisory names Microsoft Windows Server.

CVE-2023-36033 Full triage →

Microsoft Windows SmartScreen Security Feature Bypass Vulnerability

Windows SmartScreen Security Feature Bypass Vulnerability

No products entered. The advisory names Microsoft Windows Server.

CVE-2023-36025 Full triage →

Atlassian Confluence Data Center and Server Improper Authorization Vulnerability

All versions of Confluence Data Center and Server are affected by this unexploited vulnerability. This Improper Authorization vulnerability allows an unauthenticated attacker to reset Confluence and create a Confluence instance administrator account. Using this account, an attacker can then perform all administrative actions that are available to Confluence instance administrator leading to - but

No products entered. The advisory names Atlassian Confluence.

CVE-2023-22518 Full triage →

VMware vCenter Server Out-of-Bounds Write Vulnerability

vCenter Server contains an out-of-bounds write vulnerability in the implementation of the DCERPC protocol. A malicious actor with network access to vCenter Server may trigger an out-of-bounds write potentially leading to remote code execution.

No products entered. The advisory names VMware vCenter Server.

CVE-2023-34048 Full triage →

Cisco IOS XE Web UI Command Injection Vulnerability

A vulnerability in the web UI feature of Cisco IOS XE Software could allow an authenticated, remote attacker to inject commands with the privileges of root. This vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by sending crafted input to the web UI. A successful exploit could allow the attacker to inject commands to the underlying operating syste

No products entered. The advisory names Cisco IOS XE.

CVE-2023-20273 Full triage →

Cisco IOS XE Web UI Privilege Escalation Vulnerability

Cisco is providing an update for the ongoing investigation into observed exploitation of the web UI feature in Cisco IOS XE Software. We are updating the list of fixed releases and adding the Software Checker. Our investigation has determined that the actors exploited two previously unknown issues. The attacker first exploited CVE-2023-20198 to gain initial access and issued a privilege 15 command

No products entered. The advisory names Cisco IOS XE.

CVE-2023-20198 Full triage →

Microsoft Windows Mark of the Web (MOTW) Security Feature Bypass Vulnerability

Windows Mark of the Web Security Feature Bypass Vulnerability

No products entered. The advisory names Microsoft Windows Server.

CVE-2023-36584 Full triage →

Microsoft WordPad Information Disclosure Vulnerability

Microsoft WordPad Information Disclosure Vulnerability

No products entered. The advisory names Microsoft Windows Server.

CVE-2023-36563 Full triage →

Citrix NetScaler ADC and NetScaler Gateway Buffer Overflow Vulnerability

Sensitive information disclosure in NetScaler ADC and NetScaler Gateway when configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) or AAA  virtual server.

No products entered. The advisory names Citrix NetScaler ADC.

CVE-2023-4966 Full triage →

HTTP/2 Rapid Reset Attack Vulnerability

The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.

No products entered. The advisory names Red Hat Enterprise Linux and Cisco IOS XE.

CVE-2023-44487 Full triage →

Atlassian Confluence Data Center and Server Broken Access Control Vulnerability

Atlassian has been made aware of an issue reported by a handful of customers where external attackers may have exploited a previously unknown vulnerability in publicly accessible Confluence Data Center and Server instances to create unauthorized Confluence administrator accounts and access Confluence instances. Atlassian Cloud sites are not affected by this vulnerability. If your Confluence si

No products entered. The advisory names Atlassian Confluence.

CVE-2023-22515 Full triage →

GNU C Library Buffer Overflow Vulnerability

A buffer overflow was discovered in the GNU C Library's dynamic loader ld.so while processing the GLIBC_TUNABLES environment variable. This issue could allow a local attacker to use maliciously crafted GLIBC_TUNABLES environment variables when launching binaries with SUID permission to execute code with elevated privileges.

No products entered. The advisory names Red Hat Enterprise Linux and Canonical Ubuntu.

CVE-2023-4911 Full triage →

Google Chromium libvpx Heap Buffer Overflow Vulnerability

Heap buffer overflow in vp8 encoding in libvpx in Google Chrome prior to 117.0.5938.132 and libvpx 1.13.1 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

No products entered. The advisory names Mozilla Firefox, Google Chrome and Red Hat Enterprise Linux.

CVE-2023-5217 Full triage →

Cisco IOS and IOS XE Group Encrypted Transport VPN Out-of-Bounds Write Vulnerability

A vulnerability in the Cisco Group Encrypted Transport VPN (GET VPN) feature of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, remote attacker who has administrative control of either a group member or a key server to execute arbitrary code on an affected device or cause the device to crash. This vulnerability is due to insufficient validation of attributes in the Gr

No products entered. The advisory names Cisco IOS XE.

CVE-2023-20109 Full triage →

Apple Multiple Products WebKit Code Execution Vulnerability

The issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14. Processing web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited against versions of iOS before iOS 16.7.

No products entered. The advisory names Apple macOS.

CVE-2023-41993 Full triage →

Apple Multiple Products Kernel Privilege Escalation Vulnerability

The issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.7, iOS 16.7 and iPadOS 16.7, macOS Ventura 13.6. A local attacker may be able to elevate their privileges. Apple is aware of a report that this issue may have been actively exploited against versions of iOS before iOS 16.7.

No products entered. The advisory names Apple macOS.

CVE-2023-41992 Full triage →

Apple Multiple Products Improper Certificate Validation Vulnerability

A certificate validation issue was addressed. This issue is fixed in macOS Ventura 13.6, iOS 16.7 and iPadOS 16.7. A malicious app may be able to bypass signature validation. Apple is aware of a report that this issue may have been actively exploited against versions of iOS before iOS 16.7.

No products entered. The advisory names Apple macOS.

CVE-2023-41991 Full triage →

Microsoft Streaming Service Proxy Privilege Escalation Vulnerability

Microsoft Streaming Service Proxy Elevation of Privilege Vulnerability

No products entered. The advisory names Microsoft Windows Server.

CVE-2023-36802 Full triage →

Google Chromium WebP Heap-Based Buffer Overflow Vulnerability

Heap buffer overflow in libwebp in Google Chrome prior to 116.0.5845.187 and libwebp 1.3.2 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (Chromium security severity: Critical)

No products entered. The advisory names Google Chrome and Mozilla Firefox.

CVE-2023-4863 Full triage →

Apple Multiple Products Code Execution Vulnerability

The issue was addressed with improved handling of caches. This issue is fixed in tvOS 16.3, iOS 16.3 and iPadOS 16.3, macOS Monterey 12.6.8, macOS Big Sur 11.7.9, iOS 15.7.8 and iPadOS 15.7.8, macOS Ventura 13.2, watchOS 9.3. Processing a font file may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited against versions of iOS released befo

No products entered. The advisory names Apple macOS.

CVE-2023-41990 Full triage →

Apple iOS, iPadOS, and macOS ImageIO Buffer Overflow Vulnerability

A buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS 16.6.1 and iPadOS 16.6.1, macOS Monterey 12.6.9, macOS Ventura 13.5.2, iOS 15.7.9 and iPadOS 15.7.9, macOS Big Sur 11.7.10. Processing a maliciously crafted image may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited.

No products entered. The advisory names Apple macOS.

CVE-2023-41064 Full triage →

Google Chromium V8 Type Confusion Vulnerability

Type Confusion in V8 in Google Chrome prior to 116.0.5845.179 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: High)

No products entered. The advisory names Google Chrome.

CVE-2023-4762 Full triage →

Ivanti Endpoint Manager Mobile (EPMM) and MobileIron Core Authentication Bypass Vulnerability

An authentication bypass vulnerability in Ivanti EPMM 11.10 and older, allows unauthorized users to access restricted functionality or resources of the application without proper authentication. This vulnerability is unique to CVE-2023-35078 announced earlier.

No products entered. The advisory names Ivanti Connect Secure.

CVE-2023-35082 Full triage →

Apple Multiple Products Unspecified Vulnerability

The issue was addressed with improved bounds checks. This issue is fixed in tvOS 15.6, watchOS 8.7, iOS 15.6 and iPadOS 15.6, macOS Monterey 12.5, Safari 15.6. Processing web content may lead to arbitrary code execution.

No products entered. The advisory names Apple macOS.

CVE-2022-48503 Full triage →

Ivanti Endpoint Manager Mobile (EPMM) Path Traversal Vulnerability

A path traversal vulnerability in Ivanti EPMM versions (11.10.x < 11.10.0.3, 11.9.x < 11.9.1.2 and 11.8.x < 11.8.1.2) allows an authenticated administrator to write arbitrary files onto the appliance.

No products entered. The advisory names Ivanti Connect Secure.

CVE-2023-35081 Full triage →

Apple Multiple Products Kernel Unspecified Vulnerability

This issue was addressed with improved state management. This issue is fixed in macOS Monterey 12.6.8, iOS 15.7.8 and iPadOS 15.7.8, iOS 16.6 and iPadOS 16.6, tvOS 16.6, macOS Big Sur 11.7.9, macOS Ventura 13.5, watchOS 9.6. An app may be able to modify sensitive kernel state. Apple is aware of a report that this issue may have been actively exploited against versions of iOS released before iOS 15

No products entered. The advisory names Apple macOS.

CVE-2023-38606 Full triage →