Browse CVEs

HIGH 8.4 CVE-2023-50806 A vulnerability was discovered in Samsung Mobile Processor, Wearable Processor, and Modems with versions Exynos 9820, Exynos 9825, Exynos 980, Exynos… Exynos Modem 5123 Firmware Mitigation only Fix from $1,9502024-07-09 MEDIUM 6.5 CVE-2024-38102 Windows Layer-2 Bridge Network Driver Denial of Service Vulnerability Windows 10 1507 10.0.10240.20710 / 10.0.14393.7159+ Fix from $1,6002024-07-09 MEDIUM 6.5 CVE-2024-38101 Windows Layer-2 Bridge Network Driver Denial of Service Vulnerability Windows 10 1507 10.0.10240.20710 / 10.0.14393.7159+ Fix from $1,6002024-07-09 HIGH 7.5 CVE-2024-38073 Windows Remote Desktop Licensing Service Denial of Service Vulnerability Windows Server 2008 10.0.14393.7159 / 10.0.17763.6054+ Fix from $1,9502024-07-09 HIGH 7.8 CVE-2024-38062 Windows Kernel-Mode Driver Elevation of Privilege Vulnerability Windows 10 1607 10.0.14393.7159 / 10.0.17763.6054+ Fix from $1,9502024-07-09 MEDIUM 5.5 CVE-2024-38056 Microsoft Windows Codecs Library Information Disclosure Vulnerability Windows 10 1507 10.0.10240.20710 / 10.0.14393.7159+ Fix from $1,6002024-07-09 HIGH 7.8 CVE-2024-38057 Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability Windows 10 1507 10.0.10240.20710 / 10.0.14393.7159+ Fix from $1,9502024-07-09 MEDIUM 6.5 CVE-2024-38048 Windows Network Driver Interface Specification (NDIS) Denial of Service Vulnerability Windows 10 1507 10.0.10240.20710 / 10.0.14393.7159+ Fix from $1,6002024-07-09 HIGH 7.2 CVE-2024-38028 Microsoft Windows Performance Data Helper Library Remote Code Execution Vulnerability Windows 10 1507 10.0.10240.20710 / 10.0.14393.7159+ Fix from $1,9502024-07-09 HIGH 8.2 CVE-2024-6606 Clipboard code failed to check the index on an array access. This could have led to an out-of-bounds read. This vulnerability affects Firefox < 128 a… Firefox 128.0+ Fix from $1,9502024-07-09 HIGH 7.8 CVE-2024-33653 A vulnerability has been identified in Simcenter Femap (All versions < V2406). The affected applications contain an out of bounds read past the end o… Simcenter Femap 2406.0+ Fix from $1,9502024-07-09 HIGH 7.8 CVE-2024-33654 A vulnerability has been identified in Simcenter Femap (All versions < V2406). The affected applications contain an out of bounds read past the end o… Simcenter Femap 2406.0+ Fix from $1,9502024-07-09 HIGH 7.1 CVE-2024-39487 In the Linux kernel, the following vulnerability has been resolved: bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set() In function… Linux Kernel 4.19.318 / 5.4.280+ Fix from $1,9502024-07-09 MEDIUM 6.5 CVE-2024-39695 Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. An out-of-bounds read was … Exiv2 0.28.3+ Fix from $1,6002024-07-08 MEDIUM 6.8 CVE-2024-6505 A flaw was found in the virtio-net device in QEMU. When enabling the RSS feature on the virtio-net network card, the indirections_table data within R… Enterprise Linux Mitigation only Fix from $1,6002024-07-05 HIGH 8.2 CVE-2023-52169 The NtfsHandler.cpp NTFS handler in 7-Zip before 24.01 (for 7zz) contains an out-of-bounds read that allows an attacker to read beyond the intended b… Mitigation only Fix from $1,9502024-07-03 HIGH 7.8 CVE-2024-34122 Acrobat for Edge versions 126.0.2592.68 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could resu… Acrobat Patch available Fix from $1,9502024-07-02 CRITICAL 9.8 CVE-2024-36243 in OpenHarmony v4.0.0 and prior versions allow a remote attacker arbitrary code execution in pre-installed apps through out-of-bounds read and write. Openharmony after 4.0 Fix from $2,3002024-07-02 MEDIUM 5.5 CVE-2024-21462 Transient DOS while loading the TA ELF file. 315 5g Iot Modem Firmware Mitigation only Fix from $1,6002024-07-01 HIGH 7.8 CVE-2024-21465 Memory corruption while processing key blob passed by the user. 9205 Lte Modem Firmware Mitigation only Fix from $1,9502024-07-01 CRITICAL 9.1 CVE-2024-21456 Information Disclosure while parsing beacon frame in STA. Ar8035 Firmware Patch available Fix from $2,3002024-07-01 HIGH 7.5 CVE-2024-21457 INformation disclosure while handling Multi-link IE in beacon frame. Ar8035 Firmware Patch available Fix from $1,9502024-07-01 HIGH 7.5 CVE-2024-21458 Information disclosure while handling SA query action frame. Ar8035 Firmware Patch available Fix from $1,9502024-07-01 CRITICAL 9.1 CVE-2024-37371 In MIT Kerberos 5 (aka krb5) before 1.21.3, an attacker can cause invalid memory reads during GSS message token handling by sending message tokens wi… Debian Linux 1.21.3+ Fix from $2,3002024-06-28 HIGH 8.4 CVE-2016-20022 In the Linux kernel before 4.8, usb_parse_endpoint in drivers/usb/core/config.c does not validate the wMaxPacketSize field of an endpoint descriptor.… Patch available Fix from $1,9502024-06-27 MEDIUM 6.5 CVE-2024-3017 In a Silicon Labs  multi-protocol gateway, a corrupt pointer to buffered data on a multi-protocol radio co-processor (RCP) causes the OpenThread Bo… Mitigation only Fix from $1,6002024-06-27 MEDIUM 6.3 CVE-2024-28820 Buffer overflow in the extract_openvpn_cr function in openvpn-cr.c in openvpn-auth-ldap (aka the Three Rings Auth-LDAP plugin for OpenVPN) 2.0.4 allo… Patch available Fix from $1,6002024-06-27 CRITICAL 9.1 CVE-2024-5535EPSS 6% Issue summary: Calling the OpenSSL API function SSL_select_next_proto with an empty supported client protocols buffer may cause a crash or memory con… Patch available Fix from $2,3002024-06-27 HIGH 7.1 CVE-2024-39467 In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode() syzbot repo… Linux Kernel 5.4.278 / 5.10.219+ Fix from $1,9502024-06-25 HIGH 7.1 CVE-2024-39471 In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: add error handle to avoid out-of-bounds if the sdma_v4_0_irq_id_to_… Linux Kernel 5.4.278 / 5.10.219+ Fix from $1,9502024-06-25