CWE-1257

Improper Access Control Applied to Mirrored or Aliased Memory Regions

2 CVEs Avg CVSS 8.0 MITRE

CRITICAL

HIGH

MEDIUM

LOW

POC

KEV

Monthly

CVE-2025-27032 HIGH This Month

memory corruption while loading a PIL authenticated VM, when authenticated VM image is loaded without maintaining cache coherency. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Snapdragon X35 5g Modem Rf System Firmware Snapdragon 8 Gen 2 Mobile Platform Firmware Sd865 5g Firmware Sg8275p Firmware Wcd9326 Firmware +187

NVD

CVSS 3.1

7.8

EPSS

0.0%

CVE-2025-36600 HIGH PATCH This Week

A remote code execution vulnerability in an externally developed component (CVSS 8.2). High severity vulnerability requiring prompt remediation.

RCE Dell Latitude 12 Rugged Extreme 7214 Firmware

NVD

CVSS 3.1

8.2

EPSS

0.0%

CVE-2025-27032

EPSS 0% CVSS 7.8

HIGH This Month

Snapdragon X35 5g Modem Rf System Firmware Snapdragon 8 Gen 2 Mobile Platform Firmware Sd865 5g Firmware +189

NVD

CVE-2025-36600

EPSS 0% CVSS 8.2

HIGH PATCH This Week

A remote code execution vulnerability in an externally developed component (CVSS 8.2). High severity vulnerability requiring prompt remediation.

RCE Dell Latitude 12 Rugged Extreme 7214 Firmware

NVD