Browse CVEs

HIGH 7.8 CVE-2025-21382 Windows Graphics Component Elevation of Privilege Vulnerability Windows 10 1809 10.0.17763.6775 / 10.0.19044.5371+ Fix from $1,9502025-01-14 HIGH 7.8 CVE-2025-21338 GDI+ Remote Code Execution Vulnerability Office 2.93.24123014 / 10.0.10240.20890+ Fix from $1,9502025-01-14 HIGH 8.8 CVE-2025-21243 Windows Telephony Service Remote Code Execution Vulnerability Windows 10 1507 10.0.10240.20890 / 10.0.14393.7699+ Fix from $1,9502025-01-14 HIGH 8.8 CVE-2025-21244 Windows Telephony Service Remote Code Execution Vulnerability Windows 10 1507 10.0.10240.20890 / 10.0.14393.7699+ Fix from $1,9502025-01-14 HIGH 7.5 CVE-2025-21172 .NET and Visual Studio Remote Code Execution Vulnerability .net 17.6.22 / 17.8.17+ Fix from $1,9502025-01-14 MEDIUM 6.5 CVE-2024-46669 An Integer Overflow or Wraparound vulnerability [CWE-190] in version 7.4.4 and below, version 7.2.10 and below; FortiSASE version 23.4.b FortiOS tena… Fortios 7.4.5+ Fix from $1,6002025-01-14 MEDIUM 5.5 CVE-2024-56368 In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Fix overflow in __rb_map_vma An overflow occurred when performing … Linux Kernel 6.12.7+ Fix from $1,6002025-01-11 MEDIUM 6.2 CVE-2025-23022 FreeType 2.8.1 has a signed integer overflow in cf2_doFlex in cff/cf2intrp.c. Freetype No fix yet Fix from $1,6002025-01-10 CRITICAL 9.3 CVE-2025-23016 FastCGI fcgi2 (aka fcgi) 2.x through 2.4.4 has an integer overflow (and resultant heap-based buffer overflow) via crafted nameLen or valueLen values … Mitigation only Fix from $2,3002025-01-10 CRITICAL 9.8 CVE-2024-40765 An Integer-based buffer overflow vulnerability in the SonicOS via IPSec allows a remote attacker in specific conditions to cause Denial of Service (D… Mitigation only Fix from $2,3002025-01-09 HIGH 8.8 CVE-2024-55656EPSS 15% RedisBloom adds a set of probabilistic data structures to Redis. There is an integer overflow vulnerability in RedisBloom, which is a module used in … Mitigation only Fix from $1,9502025-01-08 HIGH 7.0 CVE-2024-51737 RediSearch is a Redis module that provides querying, secondary indexing, and full-text search for Redis. An authenticated redis user executing FT.SEA… Patch available Fix from $1,9502025-01-08 HIGH 7.0 CVE-2024-51480 RedisTimeSeries is a time-series database (TSDB) module for Redis, by Redis. Executing one of these commands TS.QUERYINDEX, TS.MGET, TS.MRAGE, TS.MRE… Mitigation only Fix from $1,9502025-01-08 MEDIUM 5.5 CVE-2024-56451 Integer overflow vulnerability during glTF model loading in the 3D engine module Impact: Successful exploitation of this vulnerability may affect ava… Harmonyos Mitigation only Fix from $1,6002025-01-08 HIGH 7.8 CVE-2024-45555 Memory corruption can occur if an already verified IFS2 image is overwritten, bypassing boot verification. This allows unauthorized programs to be in… Msm8996au Firmware Mitigation only Fix from $1,9502025-01-06 MEDIUM 6.2 CVE-2024-36613 FFmpeg n6.1.1 has a vulnerability in the DXA demuxer of the libavformat library allowing for an integer overflow, potentially resulting in a denial-o… Ffmpeg Patch available Fix from $1,6002025-01-03 CRITICAL 9.8 CVE-2024-50944 Integer overflow vulnerability exists in SimplCommerce at commit 230310c8d7a0408569b292c5a805c459d47a1d8f in the shopping cart functionality. The iss… Mitigation only Fix from $2,3002024-12-27 MEDIUM 5.5 CVE-2024-53187 In the Linux kernel, the following vulnerability has been resolved: io_uring: check for overflows in io_pin_pages WARNING: CPU: 0 PID: 5834 at io_u… Linux Kernel 6.11.11 / 6.12.2+ Fix from $1,6002024-12-27 MEDIUM 6.5 CVE-2024-51540 Dell ECS, versions prior to 3.8.1.3 contains an arithmetic overflow vulnerability exists in retention period handling of ECS. An authenticated user w… Elastic Cloud Storage 3.8.1.3+ Fix from $1,6002024-12-26 MEDIUM 5.5 CVE-2024-53161 In the Linux kernel, the following vulnerability has been resolved: EDAC/bluefield: Fix potential integer overflow The 64-bit argument for the "get… Linux Kernel 5.4.287 / 5.10.231+ Fix from $1,6002024-12-24 MEDIUM 5.5 CVE-2024-53151 In the Linux kernel, the following vulnerability has been resolved: svcrdma: Address an integer overflow Dan Carpenter reports: > Commit 78147ca8b4… Linux Kernel 5.15.174 / 6.1.120+ Fix from $1,6002024-12-24 MEDIUM 5.5 CVE-2024-53145 In the Linux kernel, the following vulnerability has been resolved: um: Fix potential integer overflow during physmem setup This issue happens when… Linux Kernel 5.4.287 / 5.10.231+ Fix from $1,6002024-12-24 MEDIUM 5.5 CVE-2024-53146 In the Linux kernel, the following vulnerability has been resolved: NFSD: Prevent a potential integer overflow If the tag length is >= U32_MAX - 3 … Linux Kernel 4.19.325 / 5.4.287+ Fix from $1,6002024-12-24 HIGH 7.8 CVE-2024-52059 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow'), Heap-based Buffer Overflow, Integer Overflow or Wraparound vulnerability in R… Connext Professional 6.1.2.17 / 7.3.0.2+ Fix from $1,9502024-12-13 CRITICAL 9.8 CVE-2024-49112EPSS 71% Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability Windows 10 1507 10.0.10240.20857 / 10.0.14393.7606+ Fix from $2,3002024-12-12 HIGH 7.2 CVE-2024-49089 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability Windows 10 1507 10.0.10240.20857 / 10.0.14393.7606+ Fix from $1,9502024-12-12 HIGH 8.8 CVE-2024-49085 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability Windows Server 2008 10.0.14393.7606 / 10.0.17763.6659+ Fix from $1,9502024-12-12 MEDIUM 6.8 CVE-2024-49078 Windows Mobile Broadband Driver Elevation of Privilege Vulnerability Windows 10 1809 10.0.17763.6659 / 10.0.19044.5247+ Fix from $1,6002024-12-12 CRITICAL 9.8 CVE-2024-47606 GStreamer is a library for constructing graphs of media-handling components. An integer underflow has been detected in the function qtdemux_parse_the… Debian Linux 1.24.10+ Fix from $2,3002024-12-12 CRITICAL 9.8 CVE-2024-47537 GStreamer is a library for constructing graphs of media-handling components. The program attempts to reallocate the memory pointed to by stream->samp… Gstreamer 1.24.10+ Fix from $2,3002024-12-12