Browse CVEs

HIGH 7.8 CVE-2020-24418 Adobe After Effects version 17.1.1 (and earlier) is affected by an out-of-bounds read vulnerability when parsing a crafted .aepx file, which could re… After Effects after 17.1.1 Fix from $1,9502020-10-21 HIGH 7.8 CVE-2020-9749 Adobe Animate version 20.5 (and earlier) is affected by an out-of-bounds read vulnerability that could result in arbitrary code execution in the cont… Animate after 20.5 Fix from $1,9502020-10-21 HIGH 7.8 CVE-2020-9750 Adobe Animate version 20.5 (and earlier) is affected by an out-of-bounds read vulnerability, which could result in arbitrary code execution in the co… Animate after 20.5 Fix from $1,9502020-10-21 HIGH 7.8 CVE-2020-24409 Adobe Illustrator version 24.2 (and earlier) is affected by an out-of-bounds read vulnerability when parsing crafted PDF files. This could result in … Illustrator after 24.2 Fix from $1,9502020-10-20 HIGH 7.8 CVE-2020-24410 Adobe Illustrator version 24.2 (and earlier) is affected by an out-of-bounds read vulnerability when parsing crafted PDF files. This could result in … Illustrator after 24.2 Fix from $1,9502020-10-20 MEDIUM 5.8 CVE-2020-3981 VMware ESXi (7.0 before ESXi_7.0.1-0.0.16850804, 6.7 before ESXi670-202008101-SG, 6.5 before ESXi650-202007101-SG), Workstation (15.x), Fusion (11.x … Cloud Foundation 3.10.1 / 4.1+ Fix from $1,6002020-10-20 HIGH 7.5 CVE-2020-24387 An issue was discovered in the yh_create_session() function of yubihsm-shell through 2.0.2. The function does not explicitly check the returned sessi… Fedora after 2.0.2 Fix from $1,9502020-10-19 CRITICAL 9.1 CVE-2020-16159 GoPro gpmf-parser 1.5 has a heap out-of-bounds read and segfault in GPMF_ScaledData(). Parsing malicious input can result in a crash or information d… Gpmf Parser No fix yet Fix from $2,3002020-10-19 HIGH 7.5 CVE-2020-16947EPSS 34% <p>A remote code execution vulnerability exists in Microsoft Outlook software when the software fails to properly handle objects in memory. An attack… 365 Apps Patch available Fix from $1,9502020-10-16 HIGH 7.5 CVE-2020-1671 On Juniper Networks Junos OS platforms configured as DHCPv6 local server or DHCPv6 Relay Agent, Juniper Networks Dynamic Host Configuration Protocol … Junos Mitigation only Fix from $1,9502020-10-16 CRITICAL 9.8 CVE-2020-9918 An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Catalina 10.15.6, tvOS 13.4.8, watchOS 6.2.8. A remo… Mac Os X 6.2.8 / 10.15.6+ Fix from $2,3002020-10-16 HIGH 7.8 CVE-2020-9890 An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 13.6 and iPadOS 13.6, macOS Catalina 10.15.6, tvOS 13.4… Ipados 6.2.8 / 10.15.6+ Fix from $1,9502020-10-16 HIGH 7.8 CVE-2020-9891 An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 13.6 and iPadOS 13.6, macOS Catalina 10.15.6, tvOS 13.4… Ipados 6.2.8 / 10.15.6+ Fix from $1,9502020-10-16 MEDIUM 5.9 CVE-2020-9909 An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 13.6 and iPadOS 13.6, tvOS 13.4.8, watchOS 6.2.8. An at… Ipados 6.2.8 / 13.4.8+ Fix from $1,6002020-10-16 HIGH 7.8 CVE-2020-9888 An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 13.6 and iPadOS 13.6, macOS Catalina 10.15.6, tvOS 13.4… Ipados 6.2.8 / 10.15.6+ Fix from $1,9502020-10-16 HIGH 7.8 CVE-2020-9799 An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Catalina 10.15.6. A malicious application may be able… Mac Os X 10.15.6+ Fix from $1,9502020-10-16 MEDIUM 6.5 CVE-2019-18795 The BASS Audio Library 2.4.14 under Windows is prone to a BASS_StreamCreateFile out of bounds read vulnerability via a crafted .wav file. An attacker… Bass after 2.4.14.1 Fix from $1,6002020-10-16 MEDIUM 5.5 CVE-2020-24352 An issue was discovered in QEMU through 5.1.0. An out-of-bounds memory access was found in the ATI VGA device implementation. This flaw occurs in the… Qemu after 4.2.1 Fix from $1,6002020-10-16 MEDIUM 5.5 CVE-2020-6104 An exploitable information disclosure vulnerability exists in the get_dnode_of_data functionality of F2fs-Tools F2fs.Fsck 1.13. A specially crafted f… F2fs Tools 1.14.0+ Fix from $1,6002020-10-15 MEDIUM 5.5 CVE-2020-6106 An exploitable information disclosure vulnerability exists in the init_node_manager functionality of F2fs-Tools F2fs.Fsck 1.12 and 1.13. A specially … F2fs Tools 1.14.0+ Fix from $1,6002020-10-15 MEDIUM 5.5 CVE-2020-6107 An exploitable information disclosure vulnerability exists in the dev_read functionality of F2fs-Tools F2fs.Fsck 1.13. A specially crafted f2fs files… F2fs Tools 1.14.0+ Fix from $1,6002020-10-15 HIGH 7.8 CVE-2020-6374 SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated Jupiter Tessallation(.jt) file received from untrusted sources which … 3d Visual Enterprise Viewer Mitigation only Fix from $1,9502020-10-15 CRITICAL 9.1 CVE-2020-0339 There is a possible out of bounds read due to a missing bounds check.Product: AndroidVersions: Android SoCAndroid ID: A-162980705 Android Mitigation only Fix from $2,3002020-10-14 CRITICAL 9.1 CVE-2020-0371 There is a possible out of bounds read due to a missing bounds check.Product: AndroidVersions: Android SoCAndroid ID: A-163008256 Android No fix yet Fix from $2,3002020-10-14 CRITICAL 9.1 CVE-2020-0376 There is a possible out of bounds read due to a missing bounds check.Product: AndroidVersions: Android SoCAndroid ID: A-163003156 Android Mitigation only Fix from $2,3002020-10-14 HIGH 7.5 CVE-2020-0377 In gatt_process_read_by_type_rsp of gatt_cl.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote infor… Android Mitigation only Fix from $1,9502020-10-14 HIGH 7.5 CVE-2020-0413 In gatt_process_read_by_type_rsp of gatt_cl.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote infor… Android Patch available Fix from $1,9502020-10-14 HIGH 7.8 CVE-2020-25188 An attacker who convinces a valid user to open a specially crafted project file to exploit could execute code under the privileges of the application… Scada 4.3.1.870+ Fix from $1,9502020-10-14 MEDIUM 5.5 CVE-2020-12933 A denial of service vulnerability exists in the D3DKMTEscape handler functionality of AMD ATIKMDAG.SYS (e.g. version 26.20.15029.27017). A specially … Atikmdag.sys Patch available Fix from $1,6002020-10-13 MEDIUM 5.5 CVE-2020-12911 A denial of service vulnerability exists in the D3DKMTCreateAllocation handler functionality of AMD ATIKMDAG.SYS (e.g. version 26.20.15029.27017). A … Atikmdag.sys Patch available Fix from $1,6002020-10-13