Browse CVEs

HIGH 7.5 CVE-2024-0040 In setParameter of MtpPacket.cpp, there is a possible out of bounds read due to a heap buffer overflow. This could lead to remote information disclos… Android Patch available Fix from $1,9502024-02-16 HIGH 7.8 CVE-2024-0033 In multiple functions of ashmem-dev.cpp, there is a possible missing seal due to a heap buffer overflow. This could lead to local escalation of privi… Android Patch available Fix from $1,9502024-02-16 HIGH 7.8 CVE-2024-20739 Audition versions 24.0.3, 23.6.2 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution… Audition 23.6.4 / 24.2+ Fix from $1,9502024-02-15 HIGH 7.8 CVE-2022-23086 Handlers for *_CFG_PAGE read / write ioctls in the mpr, mps, and mpt drivers allocated a buffer of a caller-specified size, but copied to it a fixed … FreeBSD 12.3+ Fix from $1,9502024-02-15 HIGH 8.8 CVE-2024-21367 Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability Windows 10 1507 10.0.10240.20469 / 10.0.14393.6709+ Fix from $1,9502024-02-13 HIGH 8.8 CVE-2024-21368 Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability Windows 10 1507 10.0.10240.20469 / 10.0.14393.6709+ Fix from $1,9502024-02-13 HIGH 8.8 CVE-2024-21369 Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability Windows 10 1507 10.0.10240.20469 / 10.0.14393.6709+ Fix from $1,9502024-02-13 HIGH 8.8 CVE-2024-21370 Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability Windows 10 1507 10.0.10240.20469 / 10.0.14393.6709+ Fix from $1,9502024-02-13 HIGH 8.8 CVE-2024-21361 Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability Windows 10 1507 10.0.10240.20469 / 10.0.14393.6709+ Fix from $1,9502024-02-13 HIGH 8.8 CVE-2024-21365 Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability Windows 10 1507 10.0.10240.20469 / 10.0.14393.6709+ Fix from $1,9502024-02-13 HIGH 8.8 CVE-2024-21366 Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability Windows 10 1507 10.0.10240.20469 / 10.0.14393.6709+ Fix from $1,9502024-02-13 HIGH 8.8 CVE-2024-21358 Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability Windows 10 1507 10.0.10240.20469 / 10.0.14393.6709+ Fix from $1,9502024-02-13 HIGH 8.8 CVE-2024-21359 Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability Windows 10 1507 10.0.10240.20469 / 10.0.14393.6709+ Fix from $1,9502024-02-13 HIGH 8.8 CVE-2024-21360 Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability Windows 10 1507 10.0.10240.20469 / 10.0.14393.6709+ Fix from $1,9502024-02-13 HIGH 8.8 CVE-2024-21353 Microsoft WDAC ODBC Driver Remote Code Execution Vulnerability Windows Server 2022 23h2 10.0.25398.709+ Fix from $1,9502024-02-13 HIGH 7.8 CVE-2024-21354 Microsoft Message Queuing (MSMQ) Elevation of Privilege Vulnerability Windows 10 1507 10.0.10240.20469 / 10.0.14393.6709+ Fix from $1,9502024-02-13 HIGH 8.8 CVE-2024-21345EPSS 20% Windows Kernel Elevation of Privilege Vulnerability Windows Server 2022 23h2 10.0.25398.709+ Fix from $1,9502024-02-13 HIGH 7.5 CVE-2024-21347 Microsoft ODBC Driver Remote Code Execution Vulnerability Windows 10 1507 10.0.10240.20469 / 10.0.14393.6709+ Fix from $1,9502024-02-13 HIGH 7.5 CVE-2024-21348 Internet Connection Sharing (ICS) Denial of Service Vulnerability Windows 10 1507 10.0.10240.20469 / 10.0.14393.6709+ Fix from $1,9502024-02-13 HIGH 8.8 CVE-2024-21349 Microsoft ActiveX Data Objects Remote Code Execution Vulnerability Windows 10 1507 10.0.10240.20469 / 10.0.14393.6709+ Fix from $1,9502024-02-13 MEDIUM 6.8 CVE-2024-21341 Windows Kernel Remote Code Execution Vulnerability Windows 10 1809 10.0.17763.5458 / 10.0.19044.4046+ Fix from $1,6002024-02-13 HIGH 7.8 CVE-2024-23796 A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions < V2201.0012), Tecnomatix Plant Simulation V2302 (All versions… Tecnomatix Plant Simulation 2201.0012 / 2302.0006+ Fix from $1,9502024-02-13 MEDIUM 5.5 CVE-2024-1062 A heap overflow flaw was found in 389-ds-base. This issue leads to a denial of service when writing a value larger than 256 chars in log_entry_attr. 389 Directory Server 2.2.0+ Fix from $1,6002024-02-12 HIGH 8.8 CVE-2024-25448 An issue in the imlib_free_image_and_decache function of imlib2 v1.9.1 allows attackers to cause a heap buffer overflow via parsing a crafted image. Imlib2 No fix yet Fix from $1,9502024-02-09 CRITICAL 9.8 CVE-2024-1283EPSS 19% Heap buffer overflow in Skia in Google Chrome prior to 121.0.6167.160 allowed a remote attacker to potentially exploit heap corruption via a crafted … Chrome 121.0.6167.160+ Fix from $2,3002024-02-07 CRITICAL 9.8 CVE-2024-24577 libgit2 is a portable C implementation of the Git core methods provided as a linkable library with a solid API, allowing to build Git functionality i… Libgit2 1.6.5 / 1.7.2+ Fix from $2,3002024-02-06 MEDIUM 5.5 CVE-2024-0911 A flaw was found in indent, a program for formatting C code. This issue may allow an attacker to trick a user into processing a specially crafted fil… Indent Mitigation only Fix from $1,6002024-02-06 MEDIUM 5.5 CVE-2024-0684 A flaw was found in the GNU coreutils "split" program. A heap overflow with user-controlled data of multiple hundred bytes in length could occur in t… Coreutils Patch available Fix from $1,6002024-02-06 HIGH 7.2 CVE-2023-41276 A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vuln… Qts Mitigation only Fix from $1,9502024-02-02 HIGH 7.2 CVE-2023-41273 A heap-based buffer overflow vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could … Qts Mitigation only Fix from $1,9502024-02-02