Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-48387 State: PUBLISHED Published: 2023-12-15T08:40:34.306Z Last Updated: 2024-10-14T06:07:26.822Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: TAIWAN-CA(TWCA) Products: JCICSecurityTool Problem Types: CWE-940 Description: TAIWAN-CA(TWCA) JCICSecurityTool fails to check the source website and access locations when executing multiple Registry-related functions. In the scenario where a user is using the JCICSecurityTool and has completed identity verification, if the user browses a malicious webpage created by an attacker, the attacker can exploit this vulnerability to read or modify any registry file under HKEY_CURRENT_USER, thereby achieving
e attacker can exploit this vulnerability to read or modify any registry file under HKEY_CURRENT_USER, thereby achieving remote code execution. Additional Analyst Notes: - CVE Program Container: References: - https://www.twcert.org.tw/tw/cp-132-7602-a47a2-1.html
CVE ID: CVE-2023-48388 State: PUBLISHED Published: 2023-12-15T08:45:56.850Z Last Updated: 2024-08-27T16:12:26.359Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Multisuns Products: EasyLog web+ Problem Types: CWE-798 Description: Multisuns EasyLog web+ has a vulnerability of using hard-coded credentials. An remote attacker can exploit this vulnerability to access the system to perform arbitrary system operations or disrupt service. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.twcert.org.tw/tw/cp-132-7603-b1061-1.html
CVE ID: CVE-2023-48389 State: PUBLISHED Published: 2023-12-15T08:50:43.096Z Last Updated: 2024-12-02T14:26:43.592Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: Multisuns Products: EasyLog web+ Problem Types: CWE-22 Description: Multisuns EasyLog web+ has a path traversal vulnerability within its parameter in a specific URL. An unauthenticated remote attacker can exploit this vulnerability to bypass authentication and download arbitrary system files. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.twcert.org.tw/tw/cp-132-7604-ab0fd-1.html
CVE ID: CVE-2023-48390 State: PUBLISHED Published: 2023-12-15T08:55:08.700Z Last Updated: 2024-08-02T21:30:35.243Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Multisuns Products: EasyLog web+ Problem Types: CWE-94 Description: Multisuns EasyLog web+ has a code injection vulnerability. An unauthenticated remote attacker can exploit this vulnerability to inject code and access the system to perform arbitrary system operations or disrupt service. Additional Analyst Notes: - CVE Program Container: References: - https://www.twcert.org.tw/tw/cp-132-7605-2d86d-1.html
CVE ID: CVE-2023-48392 State: PUBLISHED Published: 2023-12-15T09:20:19.843Z Last Updated: 2024-10-14T03:39:11.463Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Kaifa Technology Products: WebITR Problem Types: CWE-321 Description: Kaifa Technology WebITR is an online attendance system, it has a vulnerability in using hard-coded encryption key. An unauthenticated remote attacker can generate valid token parameter and exploit this vulnerability to access system with arbitrary user account, including administrator’s account, to execute login account’s permissions, and obtain relevant information. Additional Analyst Notes: - CVE Program Container: References
in account’s permissions, and obtain relevant information. Additional Analyst Notes: - CVE Program Container: References: - https://www.twcert.org.tw/tw/cp-132-7622-57e5f-1.html
CVE ID: CVE-2023-48393 State: PUBLISHED Published: 2023-12-15T09:22:49.735Z Last Updated: 2024-08-02T21:30:35.020Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: Kaifa Technology Products: WebITR Problem Types: CWE-209 Description: Kaifa Technology WebITR is an online attendance system. A remote attacker with regular user privilege can obtain partial sensitive system information from error message. Additional Analyst Notes: - CVE Program Container: References: - https://www.twcert.org.tw/tw/cp-132-7623-5660d-1.html
CVE ID: CVE-2023-48394 State: PUBLISHED Published: 2023-12-15T09:25:18.105Z Last Updated: 2024-08-02T21:30:34.805Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Kaifa Technology Products: WebITR Problem Types: CWE-434 Description: Kaifa Technology WebITR is an online attendance system, its file uploading function does not restrict upload of file with dangerous type. A remote attacker with regular user privilege can exploit this vulnerability to upload arbitrary files to perform arbitrary command or disrupt service. Additional Analyst Notes: - CVE Program Container: References: - https://www.twcert.org.tw/tw/cp-132-7624-d0300-1.html
CVE ID: CVE-2023-48395 State: PUBLISHED Published: 2023-12-15T09:27:22.243Z Last Updated: 2025-05-21T14:25:53.216Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: Kaifa Technology Products: WebITR Problem Types: CWE-89 Description: Kaifa Technology WebITR is an online attendance system, it has insufficient validation for user input within a special function. A remote attacker with regular user privilege can exploit this vulnerability to inject arbitrary SQL commands to read database. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.twcert.org.tw/tw/cp-132-7625-a0b9c-1.html
CVE ID: CVE-2023-48396 State: PUBLISHED Published: 2024-07-30T08:15:33.731Z Last Updated: 2025-02-13T17:18:18.107Z Vendors: Apache Software Foundation Products: Apache SeaTunnel Web Problem Types: CWE-290 Description: Web Authentication vulnerability in Apache SeaTunnel. Since the jwt key is hardcoded in the application, an attacker can forge any token to log in any user. Attacker can get secret key in /seatunnel-server/seatunnel-app/src/main/resources/application.yml and then create a token. This issue affects Apache SeaTunnel: 1.0.0. Users are recommended to upgrade to version 1.0.1, which fixes the issue. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: Referenc
rsion 1.0.1, which fixes the issue. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://lists.apache.org/thread/1tdxfjksx0vb9gtyt77wlr6rdcy1qwmw - http://www.openwall.com/lists/oss-security/2024/07/30/1
CVE ID: CVE-2023-48397 State: PUBLISHED Published: 2023-12-08T15:39:11.100Z Last Updated: 2024-08-02T21:30:34.960Z Vendors: Google Products: Android Problem Types: Information disclosure Description: In Init of protocolcalladapter.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2023-12-01
CVE ID: CVE-2023-48398 State: PUBLISHED Published: 2023-12-08T15:39:26.464Z Last Updated: 2024-10-09T14:39:48.724Z Vendors: Google Products: Android Problem Types: Information disclosure Description: In ProtocolNetAcBarringInfo::ProtocolNetAcBarringInfo() of protocolnetadapter.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with baseband firmware compromise required. User interaction is not needed for exploitation. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2023-12-01
CVE ID: CVE-2023-48399 State: PUBLISHED Published: 2023-12-08T15:39:41.216Z Last Updated: 2024-12-02T17:07:01.038Z Vendors: Google Products: Android Problem Types: Information disclosure Description: In ProtocolMiscATCommandAdapter::Init() of protocolmiscadapter.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with baseband firmware compromise required. User interaction is not needed for exploitation. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2023-12-01
CVE ID: CVE-2023-48401 State: PUBLISHED Published: 2023-12-08T15:39:55.199Z Last Updated: 2024-08-02T21:30:35.013Z Vendors: Google Products: Android Problem Types: Information disclosure Description: In GetSizeOfEenlRecords of protocoladapter.cpp, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2023-12-01
CVE ID: CVE-2023-48402 State: PUBLISHED Published: 2023-12-08T15:40:06.275Z Last Updated: 2024-08-02T21:30:35.306Z Vendors: Google Products: Android Problem Types: Elevation of privilege Description: In ppcfw_enable of ppcfw.c, there is a possible EoP due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2023-12-01
CVE ID: CVE-2023-48403 State: PUBLISHED Published: 2023-12-08T15:40:19.105Z Last Updated: 2024-08-02T21:30:34.796Z Vendors: Google Products: Android Problem Types: Information disclosure Description: In sms_DecodeCodedTpMsg of sms_PduCodec.c, there is a possible out of bounds read due to a heap buffer overflow. This could lead to remote information disclosure if the attacker is able to observe the behavior of the subsequent switch conditional with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2023-12-01
CVE ID: CVE-2023-48404 State: PUBLISHED Published: 2023-12-08T15:40:50.008Z Last Updated: 2024-08-02T21:30:34.827Z Vendors: Google Products: Android Problem Types: Information disclosure Description: In ProtocolMiscCarrierConfigSimInfoIndAdapter of protocolmiscadapter.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2023-12-01
CVE ID: CVE-2023-48405 State: PUBLISHED Published: 2023-12-08T15:41:02.058Z Last Updated: 2024-08-02T21:30:35.317Z Vendors: Google Products: Android Problem Types: Elevation of privilege Description: there is a possible way for the secure world to write to NS memory due to a logic error in the code. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2023-12-01
CVE ID: CVE-2023-48406 State: PUBLISHED Published: 2023-12-08T15:41:14.448Z Last Updated: 2024-08-28T15:49:45.122Z Vendors: Google Products: Android Problem Types: Elevation of privilege Description: there is a possible permanent DoS or way for the modem to boot unverified firmware due to a logic error in the code. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2023-12-01
CVE ID: CVE-2023-48407 State: PUBLISHED Published: 2023-12-08T15:41:25.931Z Last Updated: 2024-08-02T21:30:35.109Z Vendors: Google Products: Android Problem Types: Elevation of privilege Description: there is a possible DCK won't be deleted after factory reset due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2023-12-01
CVE ID: CVE-2023-48408 State: PUBLISHED Published: 2023-12-08T15:41:36.065Z Last Updated: 2024-08-02T21:30:35.129Z Vendors: Google Products: Android Problem Types: Information disclosure Description: In ProtocolNetSimFileInfoAdapter() of protocolnetadapter.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with baseband firmware compromise required. User interaction is not needed for exploitation. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2023-12-01
CVE ID: CVE-2023-48409 State: PUBLISHED Published: 2023-12-08T15:41:49.022Z Last Updated: 2024-08-02T21:30:35.338Z Vendors: Google Products: Android Problem Types: Elevation of privilege Description: In gpu_pixel_handle_buffer_liveness_update_ioctl of private/google-modules/gpu/mali_kbase/mali_kbase_core_linux.c, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2023-12-01
CVE ID: CVE-2023-48410 State: PUBLISHED Published: 2023-12-08T15:41:59.363Z Last Updated: 2024-08-02T21:30:34.855Z Vendors: Google Products: Android Problem Types: Information disclosure Description: In cd_ParseMsg of cd_codec.c, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2023-12-01
CVE ID: CVE-2023-48411 State: PUBLISHED Published: 2023-12-08T15:44:08.748Z Last Updated: 2024-10-09T14:38:40.342Z Vendors: Google Products: Android Problem Types: Information disclosure Description: In SignalStrengthAdapter::FillGsmSignalStrength() of protocolmiscadapter.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with baseband firmware compromise required. User interaction is not needed for exploitation. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2023-12-01
CVE ID: CVE-2023-48412 State: PUBLISHED Published: 2023-12-08T15:44:27.291Z Last Updated: 2024-12-02T17:05:08.264Z Vendors: Google Products: Android Problem Types: Information disclosure Description: In private_handle_t of mali_gralloc_buffer.h, there is a possible information leak due to a logic error in the code. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2023-12-01
CVE ID: CVE-2023-48413 State: PUBLISHED Published: 2023-12-08T15:44:38.268Z Last Updated: 2024-08-02T21:30:35.398Z Vendors: Google Products: Android Problem Types: Information disclosure Description: In Init of protocolnetadapter.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2023-12-01
CVE ID: CVE-2023-48414 State: PUBLISHED Published: 2023-12-08T15:44:49.224Z Last Updated: 2024-08-02T21:30:35.010Z Vendors: Google Products: Android Problem Types: Elevation of privilege Description: In the Pixel Camera Driver, there is a possible use after free due to a logic error in the code. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2023-12-01
CVE ID: CVE-2023-48415 State: PUBLISHED Published: 2023-12-08T15:44:58.834Z Last Updated: 2024-08-02T21:30:34.964Z Vendors: Google Products: Android Problem Types: Information disclosure Description: In Init of protocolembmsadapter.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2023-12-01
CVE ID: CVE-2023-48416 State: PUBLISHED Published: 2023-12-08T15:45:12.359Z Last Updated: 2024-08-02T21:30:35.266Z Vendors: Google Products: Android Problem Types: Denial of service Description: In multiple locations, there is a possible null dereference due to a missing null check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2023-12-01
CVE ID: CVE-2023-48417 State: PUBLISHED Published: 2023-12-11T05:09:48.557Z Last Updated: 2024-08-02T21:30:34.916Z Vendors: Google Products: Android Problem Types: Elevation of privilege Description: Missing Permission checks resulting in unauthorized access and Manipulation in KeyChainActivity Application Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/docs/security/bulletin/chromecast/2023-12-01
CVE ID: CVE-2023-48418 State: PUBLISHED Published: 2024-01-02T22:25:31.573Z Last Updated: 2025-06-03T14:45:10.474Z Severity: CRITICAL (CVSS 10 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: Google Products: Pixel Watch Problem Types: CWE-269 Description: In checkDebuggingDisallowed of DeviceVersionFragment.java, there is a possible way to access adb before SUW completion due to an insecure default value. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/docs/security/bulletin
Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/docs/security/bulletin/pixel-watch/2023/2023-12-01 - http://packetstormsecurity.com/files/176446/Android-DeviceVersionFragment.java-Privilege-Escalation.html
CVE ID: CVE-2023-48419 State: PUBLISHED Published: 2024-01-02T18:44:01.180Z Last Updated: 2025-06-17T20:29:05.915Z Severity: CRITICAL (CVSS 10 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: Google Products: Google Nest Mini Problem Types: CWE-269 Description: An attacker in the wifi vicinity of a target Google Home can spy on the victim, resulting in Elevation of Privilege Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.google.com/product-documentation/answer/14273332?hl=en&ref_topic=12974021&sjid=4533873659772963473-NA#zippy=%2Cspeakers
CVE ID: CVE-2023-48420 State: PUBLISHED Published: 2023-12-08T15:45:22.351Z Last Updated: 2024-08-28T15:23:39.457Z Vendors: Google Products: Android Problem Types: Elevation of privilege Description: there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2023-12-01
CVE ID: CVE-2023-48421 State: PUBLISHED Published: 2023-12-08T15:45:30.914Z Last Updated: 2025-05-27T15:24:17.631Z Vendors: Google Products: Android Problem Types: Elevation of privilege Description: In gpu_pixel_handle_buffer_liveness_update_ioctl of private/google-modules/gpu/mali_kbase/platform/pixel/pixel_gpu_slc.c, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2023-12-01
CVE ID: CVE-2023-48422 State: PUBLISHED Published: 2023-12-08T15:45:43.926Z Last Updated: 2024-08-02T21:30:35.126Z Vendors: Google Products: Android Problem Types: Information disclosure Description: In Init of protocolnetadapter.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2023-12-01
CVE ID: CVE-2023-48423 State: PUBLISHED Published: 2023-12-08T15:46:09.691Z Last Updated: 2024-08-02T21:30:34.959Z Vendors: Google Products: Android Problem Types: Remote code execution Description: In dhcp4_SetPDNAddress of dhcp4_Main.c, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2023-12-01
CVE ID: CVE-2023-48424 State: PUBLISHED Published: 2023-12-11T05:13:01.011Z Last Updated: 2024-08-02T21:30:34.808Z Vendors: Google Products: Android Problem Types: Elevation of privilege Description: U-Boot shell vulnerability resulting in Privilege escalation in a production device Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/docs/security/bulletin/chromecast/2023-12-01
CVE ID: CVE-2023-48425 State: PUBLISHED Published: 2023-12-11T05:15:59.638Z Last Updated: 2025-05-27T14:44:28.733Z Vendors: Google Products: Android Problem Types: Remote code execution Description: U-Boot vulnerability resulting in persistent Code Execution Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/docs/security/bulletin/chromecast/2023-12-01
CVE ID: CVE-2023-48426 State: PUBLISHED Published: 2024-04-05T15:23:06.880Z Last Updated: 2025-03-28T18:58:40.155Z Severity: CRITICAL (CVSS 10 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: Google Products: Chromecast Problem Types: compromise user data Description: u-boot bug that allows for u-boot shell and interrupt over UART Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/docs/security/bulletin/chromecast/2023-12-01
CVE ID: CVE-2023-48427 State: PUBLISHED Published: 2023-12-12T11:27:18.362Z Last Updated: 2024-11-25T21:16:41.045Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C) Vendors: Siemens Products: SINEC INS Problem Types: CWE-295 Description: A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 2). Affected products do not properly validate the certificate of the configured UMC server. This could allow an attacker to intercept credentials that are sent to the UMC server as well as to manipulate responses, potentially allowing an attacker to escalate privileges. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment