CWE-1260 · 18 records

Improper Handling of Overlap Between Protected Memory Ranges

CVEs in this class

18 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
39Monitor	CVE-2024-4778No exploit	Memory safety bugs present in Firefox 125.mozilla · firefox · CWE-1260 pre-auth RCE	Critical9.8	—	0.4%	May 14, 2024
32Monitor	CVE-2022-27813No exploit	Unconfigured memory protection modules in Motorola MTM5000motorola · mtm5500 firmware · CWE-1260	High8.2	—	0.1%	Oct 19, 2023
31Monitor	CVE-2019-1164No exploit	Windows Kernel Elevation of Privilege Vulnerabilitymicrosoft · windows 10 · CWE-1260 RCE Local privilege escalation	High7.8	—	0.9%	Aug 14, 2019
30Monitor	CVE-2025-1937No exploit	Memory safety bugs fixed in Firefox 136, Thunderbird 136, Firefox ESR 115.21, Firefox ESR 128.8, and Thunderbird 128.8mozilla · firefox · CWE-1260 pre-auth RCE	High7.5	—	0.5%	Mar 4, 2025
28Monitor	CVE-2025-22889No exploit	Improper handling of overlap between protected memory ranges for some Intel(R) Xeon(R) 6 processor with Intel(R) TDX may allow a privileged CWE-1260 Local privilege escalation	High7.0	—	0.1%	Aug 12, 2025
28Monitor	CVE-2025-31936No exploit	Improper handling of overlap between protected memory ranges for some Intel(R) Xeon(R) 6 processors when using Intel(R) TDX within SMM may aintel · xeon 6337p firmware · CWE-1260 Local privilege escalation	High7.0	—	0.0%	Aug 11, 2026
27Monitor	CVE-2019-25570No exploit	RealTerm Serial Terminal 2.0.0.70 Denial of Service via Port Fieldcrun · realterm · CWE-1260	Medium6.8	—	0.2%	Mar 21, 2026
27Monitor	CVE-2019-25585No exploit	Deluge 1.3.15 Denial of Service via Webseeds Fielddeluge-torrent · deluge · CWE-1260	Medium6.9	—	0.1%	Mar 21, 2026
27Monitor	CVE-2019-25559No exploit	SpotPaltalk 1.1.5 Name/Key Field Denial of Servicensasoft · spotpaltalk · CWE-1260	Medium6.8	—	0.1%	Mar 21, 2026
27Monitor	CVE-2019-25592No exploit	PHPRunner 10.1 Denial of Service via Dashboard Name Fieldxlinesoft · phprunner · CWE-1260	Medium6.9	—	0.1%	Mar 22, 2026
27Monitor	CVE-2018-25238No exploit	VSCO 1.1.1.0 Denial of Service via Searchvsco · vsco · CWE-1260	Medium6.9	—	0.1%	Apr 4, 2026
27Monitor	CVE-2019-25572No exploit	NordVPN 6.19.6 Denial of Service via Email Field Buffer Overflownordvpn · nordvpn · CWE-1260	Medium6.9	—	0.1%	Mar 21, 2026
27Monitor	CVE-2025-0012No exploit	Improper handling of overlap between the segmented reverse map table (RMP) and system management mode (SMM) memory could allow a privileged amd · amd epyc™ 9005 series processors · CWE-1260 Local privilege escalation	Medium6.8	—	0.1%	Feb 10, 2026
27Monitor	CVE-2018-25240No exploit	Watchr 1.1.0.0 Denial of Service via Searchwatchr · watchr · CWE-1260	Medium6.9	—	0.1%	Apr 4, 2026
27Monitor	CVE-2019-25602No exploit	GSearch 1.0.1.0 Denial of Service via Search Inputgsearch · gsearch · CWE-1260	Medium6.8	—	0.1%	Mar 22, 2026
27Monitor	CVE-2026-20760No exploit	Improper handling of overlap between protected memory ranges in some microcode for some Intel(R) Processors within Ring 0: Hypervisor may alCWE-1260 Local privilege escalation	Medium6.8	—	0.1%	Aug 11, 2026
25Monitor	CVE-2026-76668No exploit	HPE NonStop Kernel - Access to unmapped or privileged datahewlett packard enterprise · hpe nonstop kernel · CWE-1260 Local privilege escalation	Medium6.3	—	0.0%	Oct 15, 2026
23Monitor	CVE-2025-29948No exploit	Improper access control in AMD Secure Encrypted Virtualization (SEV) firmware could allow a malicious hypervisor to bypass RMP protections, amd · amd epyc™ 9005 series processors · CWE-1260	Medium5.9	—	0.1%	Feb 10, 2026

CVE-2024-4778
39Monitor
Memory safety bugs present in Firefox 125.
CriticalCVSS 9.8No exploitEPSS 0%
- pre-auth RCE
mozilla · firefoxMay 14, 2024
CVE-2022-27813
32Monitor
Unconfigured memory protection modules in Motorola MTM5000
HighCVSS 8.2No exploitEPSS 0%
motorola · mtm5500 firmwareOct 19, 2023
CVE-2019-1164
31Monitor
Windows Kernel Elevation of Privilege Vulnerability
HighCVSS 7.8No exploitEPSS 0%
- RCE
- Local privilege escalation
microsoft · windows 10Aug 14, 2019
CVE-2025-1937
30Monitor
Memory safety bugs fixed in Firefox 136, Thunderbird 136, Firefox ESR 115.21, Firefox ESR 128.8, and Thunderbird 128.8
HighCVSS 7.5No exploitEPSS 0%
- pre-auth RCE
mozilla · firefoxMar 4, 2025
CVE-2025-22889
28Monitor
Improper handling of overlap between protected memory ranges for some Intel(R) Xeon(R) 6 processor with Intel(R) TDX may allow a privileged
HighCVSS 7.0No exploitEPSS 0%
- Local privilege escalation
Aug 12, 2025
CVE-2025-31936
28Monitor
Improper handling of overlap between protected memory ranges for some Intel(R) Xeon(R) 6 processors when using Intel(R) TDX within SMM may a
HighCVSS 7.0No exploitEPSS 0%
- Local privilege escalation
intel · xeon 6337p firmwareAug 11, 2026
CVE-2019-25570
27Monitor
RealTerm Serial Terminal 2.0.0.70 Denial of Service via Port Field
MediumCVSS 6.8No exploitEPSS 0%
crun · realtermMar 21, 2026
CVE-2019-25585
27Monitor
Deluge 1.3.15 Denial of Service via Webseeds Field
MediumCVSS 6.9No exploitEPSS 0%
deluge-torrent · delugeMar 21, 2026
CVE-2019-25559
27Monitor
SpotPaltalk 1.1.5 Name/Key Field Denial of Service
MediumCVSS 6.8No exploitEPSS 0%
nsasoft · spotpaltalkMar 21, 2026
CVE-2019-25592
27Monitor
PHPRunner 10.1 Denial of Service via Dashboard Name Field
MediumCVSS 6.9No exploitEPSS 0%
xlinesoft · phprunnerMar 22, 2026
CVE-2018-25238
27Monitor
VSCO 1.1.1.0 Denial of Service via Search
MediumCVSS 6.9No exploitEPSS 0%
vsco · vscoApr 4, 2026
CVE-2019-25572
27Monitor
NordVPN 6.19.6 Denial of Service via Email Field Buffer Overflow
MediumCVSS 6.9No exploitEPSS 0%
nordvpn · nordvpnMar 21, 2026
CVE-2025-0012
27Monitor
Improper handling of overlap between the segmented reverse map table (RMP) and system management mode (SMM) memory could allow a privileged
MediumCVSS 6.8No exploitEPSS 0%
- Local privilege escalation
amd · amd epyc™ 9005 series processorsFeb 10, 2026
CVE-2018-25240
27Monitor
Watchr 1.1.0.0 Denial of Service via Search
MediumCVSS 6.9No exploitEPSS 0%
watchr · watchrApr 4, 2026
CVE-2019-25602
27Monitor
GSearch 1.0.1.0 Denial of Service via Search Input
MediumCVSS 6.8No exploitEPSS 0%
gsearch · gsearchMar 22, 2026
CVE-2026-20760
27Monitor
Improper handling of overlap between protected memory ranges in some microcode for some Intel(R) Processors within Ring 0: Hypervisor may al
MediumCVSS 6.8No exploitEPSS 0%
- Local privilege escalation
Aug 11, 2026
CVE-2026-76668
25Monitor
HPE NonStop Kernel - Access to unmapped or privileged data
MediumCVSS 6.3No exploitEPSS 0%
- Local privilege escalation
hewlett packard enterprise · hpe nonstop kernelOct 15, 2026
CVE-2025-29948
23Monitor
Improper access control in AMD Secure Encrypted Virtualization (SEV) firmware could allow a malicious hypervisor to bypass RMP protections,
MediumCVSS 5.9No exploitEPSS 0%
amd · amd epyc™ 9005 series processorsFeb 10, 2026

All vulnerability classes