Browse CVEs

HIGH 8.8 CVE-2024-9400 A potential memory corruption vulnerability could be triggered if an attacker had the ability to trigger an OOM at a specific moment during JIT compi… Firefox 128.3.0 / 131.0+ Fix from $1,9502024-10-01 CRITICAL 9.8 CVE-2024-9401 Memory safety bugs present in Firefox 130, Firefox ESR 115.15, Firefox ESR 128.2, and Thunderbird 128.2. Some of these bugs showed evidence of memory… Firefox 115.16.0 / 128.3.0+ Fix from $2,3002024-10-01 CRITICAL 9.8 CVE-2024-9402 Memory safety bugs present in Firefox 130, Firefox ESR 128.2, and Thunderbird 128.2. Some of these bugs showed evidence of memory corruption and we p… Firefox 128.3.0 / 131.0+ Fix from $2,3002024-10-01 HIGH 7.3 CVE-2024-9403 Memory safety bugs present in Firefox 130. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of the… Firefox 131.0+ Fix from $1,9502024-10-01 HIGH 8.8 CVE-2024-9396 It is currently unknown if this issue is exploitable but a condition may arise where the structured clone of certain objects could lead to memory cor… Firefox 128.3.0 / 131.0+ Fix from $1,9502024-10-01 CRITICAL 9.2 CVE-2024-22170 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Western Digital My Cloud ddns-start on Linux allows Overflow… Mitigation only Fix from $2,3002024-09-27 CRITICAL 9.6 CVE-2024-7024 Inappropriate implementation in V8 in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to potentially perform a sandbox escape via a cr… Chrome 126.0.6478.54+ Fix from $2,3002024-09-23 HIGH 7.5 CVE-2024-45810 Envoy is a cloud-native high-performance edge/middle/service proxy. Envoy will crash when the http async client is handling `sendLocalReply` under so… Envoy 1.28.7 / 1.29.9+ Fix from $1,9502024-09-20 HIGH 7.5 CVE-2024-45809 Envoy is a cloud-native high-performance edge/middle/service proxy. Jwt filter will lead to an Envoy crash when clear route cache with remote JWKs. I… Envoy 1.29.9 / 1.30.6+ Fix from $1,9502024-09-20 HIGH 7.5 CVE-2024-27879 The issue was addressed with improved bounds checks. This issue is fixed in iOS 17.7 and iPadOS 17.7, iOS 18 and iPadOS 18. An attacker may be able t… Ipados 17.7+ Fix from $1,9502024-09-17 HIGH 7.8 CVE-2024-43756 Photoshop Desktop versions 24.7.4, 25.11 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code e… Photoshop 24.7.5 / 25.12+ Fix from $1,9502024-09-13 HIGH 7.8 CVE-2024-39380 After Effects versions 23.6.6, 24.5 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execut… After Effects 23.6.9 / 24.6+ Fix from $1,9502024-09-13 HIGH 7.8 CVE-2024-45181 An issue was discovered in WibuKey64.sys in WIBU-SYSTEMS WibuKey before v6.70 and fixed in v.6.70. An improper bounds check allows crafted packets to… Wibukey 6.70+ Fix from $1,9502024-09-12 MEDIUM 5.5 CVE-2024-42425 Dell Precision Rack, 14G Intel BIOS versions prior to 2.22.2, contains an Access of Memory Location After End of Buffer vulnerability. A low privileg… Precision 7920 Firmware 2.22.1+ Fix from $1,6002024-09-10 HIGH 8.8 CVE-2024-8573 A vulnerability, which was classified as critical, was found in TOTOLINK AC1200 T8 and AC1200 T10 4.1.5cu.861_B20230220/4.1.8cu.5207. This affects th… T8 Firmware No fix yet Fix from $1,9502024-09-08 CRITICAL 9.8 CVE-2024-8389 Memory safety bugs present in Firefox 129. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of the… Firefox Mitigation only Fix from $2,3002024-09-03 CRITICAL 9.8 CVE-2024-8387 Memory safety bugs present in Firefox 129, Firefox ESR 128.1, and Thunderbird 128.1. Some of these bugs showed evidence of memory corruption and we p… Firefox Mitigation only Fix from $2,3002024-09-03 MEDIUM 6.8 CVE-2024-33016 memory corruption when an invalid firehose patch command is invoked. Qcn9000 Firmware No fix yet Fix from $1,6002024-09-02 CRITICAL 9.8 CVE-2024-45169 An issue was discovered in UCI IDOL 2 (aka uciIDOL or IDOL2) through 2.12. Due to improper input validation, improper deserialization, and improper r… Idol2 after 2.12 Fix from $2,3002024-08-22 MEDIUM 5.5 CVE-2022-48940 In the Linux kernel, the following vulnerability has been resolved: bpf: Fix crash due to incorrect copy_map_value When both bpf_spin_lock and bpf_… Linux Kernel 5.15.26 / 5.16.12+ Fix from $1,6002024-08-22 HIGH 8.8 CVE-2024-7966 Out of bounds memory access in Skia in Google Chrome prior to 128.0.6613.84 allowed a remote attacker who had compromised the renderer process to per… Chrome 128.0.6613.84+ Fix from $1,9502024-08-21 HIGH 8.8 CVE-2024-7972 Inappropriate implementation in V8 in Google Chrome prior to 128.0.6613.84 allowed a remote attacker to potentially perform out of bounds memory acce… Chrome 128.0.6613.84+ Fix from $1,9502024-08-21 HIGH 8.8 CVE-2024-7795 Autel MaxiCharger AC Elite Business C50 AppAuthenExchangeRandomNum Stack-Based Buffer Overflow Remote Code Execution Vulnerability. This vulnerabilit… Maxicharger Ac Elite Business C50 Firmware 1.36.00+ Fix from $1,9502024-08-21 HIGH 8.4 CVE-2024-44067 The T-Head XuanTie C910 CPU in the TH1520 SoC and the T-Head XuanTie C920 CPU in the SOPHON SG2042 have instructions that allow unprivileged attacker… Mitigation only Fix from $1,9502024-08-19 CRITICAL 9.8 CVE-2022-33162 IBM Security Directory Integrator 7.2.0 and Security Verify Directory Integrator 10.0.0 does not perform any authentication for functionality that re… Security Directory Integrator Mitigation only Fix from $2,3002024-08-16 CRITICAL 9.8 CVE-2024-20082 In Modem, there is a possible memory corruption due to a missing bounds check. This could lead to remote code execution with no additional execution … Nr15 Mitigation only Fix from $2,3002024-08-14 HIGH 7.8 CVE-2024-38218 Microsoft Edge (HTML-based) Memory Corruption Vulnerability Edge Chromium 127.0.2651.98+ Fix from $1,9502024-08-12 HIGH 7.9 CVE-2024-21980 Improper restriction of write operations in SNP firmware could allow a malicious hypervisor to potentially overwrite a guest's memory or UMC seed res… Epyc 7203 Firmware Mitigation only Fix from $1,9502024-08-05 MEDIUM 6.0 CVE-2023-31355 Improper restriction of write operations in SNP firmware could allow a malicious hypervisor to overwrite a guest's UMC seed potentially allowing read… Epyc 7203 Firmware Mitigation only Fix from $1,6002024-08-05 HIGH 7.8 CVE-2024-23355 Memory corruption when keymaster operation imports a shared key. Wsa8845h Firmware Mitigation only Fix from $1,9502024-08-05