Browse CVEs

HIGH 7.1 CVE-2024-56555 In the Linux kernel, the following vulnerability has been resolved: binder: fix OOB in binder_add_freeze_work() In binder_add_freeze_work() we iter… Linux Kernel 6.12.4+ Fix from $1,9502024-12-27 HIGH 7.2 CVE-2020-9211 There is an out-of-bound read and write vulnerability in Huawei smartphone. A module dose not verify the input sufficiently. Attackers can exploit th… Mate 30 Firmware Mitigation only Fix from $1,9502024-12-27 MEDIUM 5.3 CVE-2020-1819 There are multiple out of bounds (OOB) read vulnerabilities in the implementation of the Common Open Policy Service (COPS) protocol of some Huawei pr… Ips Module Firmware Mitigation only Fix from $1,6002024-12-27 MEDIUM 5.3 CVE-2020-1818 There are multiple out of bounds (OOB) read vulnerabilities in the implementation of the Common Open Policy Service (COPS) protocol of some Huawei pr… Ips Module Firmware Mitigation only Fix from $1,6002024-12-27 HIGH 7.1 CVE-2024-53162 In the Linux kernel, the following vulnerability has been resolved: crypto: qat/qat_4xxx - fix off by one in uof_get_name() The fw_objs[] array has… Linux Kernel 6.6.64 / 6.11.11+ Fix from $1,9502024-12-24 HIGH 7.1 CVE-2024-53150 KEV In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Fix out of bounds reads when finding clock sources The current… Debian Linux 5.4.287 / 5.10.231+ Fix from $1,9502024-12-24 HIGH 7.1 CVE-2024-53147 In the Linux kernel, the following vulnerability has been resolved: exfat: fix out-of-bounds access of directory entries In the case of the directo… Linux Kernel 6.11.11 / 6.12.2+ Fix from $1,9502024-12-24 MEDIUM 5.3 CVE-2024-51471 IBM MQ Appliance 9.3 LTS, 9.3 CD, and 9.4 LTS web console could allow an authenticated user to cause a denial-of-service when trace is enabled due to… Mq Appliance after 9.4.0.7 Fix from $1,6002024-12-19 MEDIUM 5.6 CVE-2024-11616 Netskope was made aware of a security vulnerability in Netskope Endpoint DLP’s Content Control Driver where a double-fetch issue leads to heap overfl… Mitigation only Fix from $1,6002024-12-19 MEDIUM 5.5 CVE-2022-44515 Acrobat Reader DC version 22.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (and earlier) are affected by an out-of-bounds read… Acrobat 17.012.30227 / 17.012.30229+ Fix from $1,6002024-12-19 MEDIUM 5.5 CVE-2022-44516 Acrobat Reader DC version 22.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (and earlier) are affected by an out-of-bounds read… Acrobat 17.012.30227 / 17.012.30229+ Fix from $1,6002024-12-19 MEDIUM 5.5 CVE-2022-44517 Acrobat Reader DC version 22.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (and earlier) are affected by an out-of-bounds read… Acrobat 17.012.30227 / 17.012.30229+ Fix from $1,6002024-12-19 HIGH 8.8 CVE-2024-12693 Out of bounds memory access in V8 in Google Chrome prior to 131.0.6778.204 allowed a remote attacker to execute arbitrary code inside a sandbox via a… Chrome 131.0.6778.204+ Fix from $1,9502024-12-18 MEDIUM 5.5 CVE-2024-47039 In isSlotMarkedSuccessful of BootControl.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local  informa… Android Mitigation only Fix from $1,6002024-12-18 HIGH 7.4 CVE-2024-11614 An out-of-bounds read vulnerability was found in DPDK's Vhost library checksum offload feature. This issue enables an untrusted or compromised guest … Mitigation only Fix from $1,9502024-12-18 HIGH 8.1 CVE-2024-56083 Cognition Devin before 2024-12-12 provides write access to code by an attacker who discovers the https://vscode-randomly_generated_string.devinapps.c… Mitigation only Fix from $1,9502024-12-16 HIGH 7.8 CVE-2024-9508 Horner Automation Cscape contains a memory corruption vulnerability, which could allow an attacker to disclose information and execute arbitrary co… No fix yet Fix from $1,9502024-12-13 HIGH 7.8 CVE-2024-12212 The vulnerability occurs in the parsing of CSP files. The issues result from the lack of proper validation of user-supplied data, which could allow… Mitigation only Fix from $1,9502024-12-13 HIGH 7.5 CVE-2024-54114 Out-of-bounds access vulnerability in playback in the DASH module Impact: Successful exploitation of this vulnerability will affect availability. Harmonyos Mitigation only Fix from $1,9502024-12-12 HIGH 7.5 CVE-2024-54115 Out-of-bounds read vulnerability in the DASH module Impact: Successful exploitation of this vulnerability will affect availability. Harmonyos No fix yet Fix from $1,9502024-12-12 HIGH 7.5 CVE-2024-54116 Out-of-bounds read vulnerability in the M3U8 module Impact: Successful exploitation of this vulnerability may cause features to perform abnormally. Harmonyos No fix yet Fix from $1,9502024-12-12 HIGH 7.5 CVE-2024-54108 Read/Write vulnerability in the image decoding module Impact: Successful exploitation of this vulnerability will affect availability. Harmonyos No fix yet Fix from $1,9502024-12-12 HIGH 7.5 CVE-2024-54109 Read/Write vulnerability in the image decoding module Impact: Successful exploitation of this vulnerability will affect availability. Harmonyos No fix yet Fix from $1,9502024-12-12 HIGH 7.5 CVE-2024-54107 Read/Write vulnerability in the image decoding module Impact: Successful exploitation of this vulnerability will affect availability. Harmonyos No fix yet Fix from $1,9502024-12-12 CRITICAL 9.8 CVE-2024-54506 An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.2. An attacker may be able to caus… macOS 15.2+ Fix from $2,3002024-12-12 HIGH 7.5 CVE-2024-54508 The issue was addressed with improved memory handling. This issue is fixed in Safari 18.2, iOS 18.2 and iPadOS 18.2, iPadOS 17.7.6, macOS Sequoia 15.… Safari 2.2 / 11.2+ Fix from $1,9502024-12-12 MEDIUM 6.5 CVE-2024-54502EPSS 15% The issue was addressed with improved checks. This issue is fixed in Safari 18.2, iOS 18.2 and iPadOS 18.2, iPadOS 17.7.6, macOS Sequoia 15.2, tvOS 1… Safari 2.2 / 11.2+ Fix from $1,6002024-12-12 MEDIUM 5.3 CVE-2024-44246 The issue was addressed with improved routing of Safari-originated requests. This issue is fixed in Safari 18.2, iOS 18.2 and iPadOS 18.2, iPadOS 17.… Safari 15.2 / 17.7.3+ Fix from $1,6002024-12-12 MEDIUM 6.6 CVE-2024-49109 Wireless Wide Area Network Service (WwanSvc) Elevation of Privilege Vulnerability Windows 10 1809 10.0.17763.6659 / 10.0.19044.5247+ Fix from $1,6002024-12-12 MEDIUM 6.8 CVE-2024-49110 Windows Mobile Broadband Driver Elevation of Privilege Vulnerability Windows 10 1809 10.0.17763.6659 / 10.0.19044.5247+ Fix from $1,6002024-12-12