microcode_ctl: From CVEorg collector

New Spectre-v2 attack classes have been discovered within CPU architectures that enable self-training exploitation of speculative execution within the same privilege domain. These novel techniques bypass existing hardware and software mitigations, including IBPB, eIBRS, and BHINO, by leveraging...

CVE-2025-47112 Acrobat Reader | Out-of-bounds Read (CWE-125)

Acrobat Reader versions 24.001.30235, 20.005.30763, 25.001.20521 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires...

CVE-2024-29741

In pblS2mpuResume of s2mpu.c, there is a possible mitigation bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2020-9632

Magento versions 2.3.4 and earlier, 2.2.11 and earlier see note, 1.14.4.4 and earlier, and 1.9.4.4 and earlier have a security mitigation bypass vulnerability. Successful exploitation could lead to arbitrary code execution...

CVE-2020-9692

Magento versions 2.3.5-p1 and earlier, and 2.3.5-p1 and earlier have a security mitigation bypass vulnerability. Successful exploitation could lead to arbitrary code execution...

CVE-2025-27201

Animate versions 24.0.7, 23.0.10 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a vict...

CVE-2025-27202

Animate versions 24.0.7, 23.0.10 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a vict...

CVE-2025-30303

Summary: CVE-2025-30303 affects Adobe FrameMaker up to 2020.8 and 2022.6 and earlier, due to an out-of-bounds read that can disclose memory. Impact is memory disclosure; mitigations like ASLR may be bypassed. Exploitation requires user interaction (victim opens a malicious file). Connected source...

Google Android 代码问题漏洞

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability that stems from insecure deserialization, which can be exploited by an attacker to bypass the parcel mismatch mitigation and elevate privileges...

ALPINE-CVE-2024-2201

A cross-privilege Spectre v2 vulnerability allows attackers to bypass all deployed mitigations, including the recent FineIBT, and to leak arbitrary Linux kernel memory on Intel systems...

CVE-2024-49511

InDesign Desktop versions ID18.5.3, ID19.5 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in...

Apple iOS 17.2.1 Screen Time Passcode Retrieval / Mitigation Bypass Vulnerabilities

A mitigation bypass / privilege escalation flaw has been discovered in Apple's iOS Screen Time functionality, granting one access to modify the restrictions. It allows a local attacker to acquire the Screen Time Passcode by bypassing the anti-bruteforce protections on the four-digit Passcode, and...

Exploit for Improper Validation of Specified Type of Input in Servicenow

CVE-2024-4879-ServiceNow ServiceNow is a platform for busi...

PT-2024-4224 · Adobe · Audition

Name of the Vulnerable Software and Affected Versions: Adobe Audition versions 24.2, 23.6.4 and earlier Description: The issue is related to an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations...

Spectre V2 Mitigation Bypass on Linux®

AMD ID: AMD-SB-7018 Potential Impact: N/A Severity: N/A Summary An external researcher has shared a paper with AMD titled “InSpectre Gadget: Inspecting the Residual Attack Surface of Cross-privilege Spectre v2.” AMD is not aware of any impact to AMD products. No customer action is required...

CVE-2024-29741

In pblS2mpuResume of s2mpu.c, there is a possible mitigation bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2024-29741

The CVE-2024-29741 issue affects Google Pixel’s s2mpu.c driver, specifically the pblS2mpuResume function, where a logic error enables a mitigation bypass. This could allow local elevation of privilege without additional execution privileges or user interaction. Multiple connected sources corrobor...

Google Pixel 安全漏洞

Google Pixel is a smartphone from the American company Google Google. Google Pixel suffers from a local elevation of privilege vulnerability, which stems from a logic error in the s2mpu.c file, which can be used to bypass mitigations and can be exploited by an attacker to perform a local elevatio...

PT-2024-22982 · S2Mpu · S2Mpu

Name of the Vulnerable Software and Affected Versions: s2mpu affected versions not specified Description: The issue is related to a possible mitigation bypass in the pblS2mpuResume function of s2mpu.c due to a logic error. This could lead to local escalation of privilege with no additional...

PUB-A-283803605

In pblS2mpuResume of s2mpu.c, there is a possible mitigation bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...