Browse CVEs

HIGH 8.8 CVE-2024-43635 Windows Telephony Service Remote Code Execution Vulnerability Windows 10 1507 10.0.10240.20826 / 10.0.14393.7515+ Fix from $1,9502024-11-12 HIGH 8.8 CVE-2024-43628 Windows Telephony Service Remote Code Execution Vulnerability Windows 10 1507 10.0.10240.20826 / 10.0.14393.7515+ Fix from $1,9502024-11-12 HIGH 7.8 CVE-2024-43623 Windows NT OS Kernel Elevation of Privilege Vulnerability Windows 10 1507 10.0.10240.20826 / 10.0.14393.7515+ Fix from $1,9502024-11-12 MEDIUM 5.3 CVE-2024-10917 In Eclipse OpenJ9 versions up to 0.47, the JNI function GetStringUTFLength may return an incorrect value which has wrapped around. From 0.48 the valu… Openj9 0.48.0+ Fix from $1,6002024-11-11 HIGH 7.8 CVE-2024-46953 An issue was discovered in base/gsdevice.c in Artifex Ghostscript before 10.04.0. An integer overflow when parsing the filename format string (for th… Debian Linux 10.04.0+ Fix from $1,9502024-11-10 CRITICAL 9.8 CVE-2024-46613 WeeChat before 4.4.2 has an integer overflow and resultant buffer overflow at core/core-string.c when there are more than two billion items in a list… Weechat 4.4.2+ Fix from $2,3002024-11-10 MEDIUM 5.5 CVE-2024-50177 In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: fix a UBSAN warning in DML2.1 When programming phantom pipe, s… Linux Kernel 6.11.3+ Fix from $1,6002024-11-08 HIGH 7.8 CVE-2024-47024 In vring_size of external/headers/include/virtio/virtio_ring.h, there is a possible out of bounds write due to an integer overflow. This could lead t… Android Mitigation only Fix from $1,9502024-10-25 CRITICAL 9.8 CVE-2024-46483 Xlight FTP Server <3.9.4.3 has an integer overflow vulnerability in the packet parsing logic of the SFTP server, which can lead to a heap overflow wi… Mitigation only Fix from $2,3002024-10-22 HIGH 7.5 CVE-2024-42643 Integer Overflow in fast_ping.c in SmartDNS Release46 allows remote attackers to cause a Denial of Service via misaligned memory access. Mitigation only Fix from $1,9502024-10-22 HIGH 7.8 CVE-2022-49030 In the Linux kernel, the following vulnerability has been resolved: libbpf: Handle size overflow for ringbuf mmap The maximum size of ringbuf is 2G… Linux Kernel 5.10.158 / 5.15.82+ Fix from $1,9502024-10-21 MEDIUM 5.5 CVE-2022-48987 In the Linux kernel, the following vulnerability has been resolved: media: v4l2-dv-timings.c: fix too strict blanking sanity checks Sanity checks w… Linux Kernel 4.9.336 / 4.14.302+ Fix from $1,6002024-10-21 MEDIUM 5.5 CVE-2022-48947 In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Fix u8 overflow By keep sending L2CAP_CONF_REQ packets, chan-… Linux Kernel 4.9.337 / 4.14.303+ Fix from $1,6002024-10-21 MEDIUM 5.5 CVE-2024-49994 In the Linux kernel, the following vulnerability has been resolved: block: fix integer overflow in BLKSECDISCARD I independently rediscovered com… Linux Kernel 6.10.14 / 6.11.3+ Fix from $1,6002024-10-21 MEDIUM 5.5 CVE-2024-49888 In the Linux kernel, the following vulnerability has been resolved: bpf: Fix a sdiv overflow issue Zac Ecob reported a problem where a bpf program … Linux Kernel 6.10.14 / 6.11.3+ Fix from $1,6002024-10-21 MEDIUM 5.5 CVE-2024-47739 In the Linux kernel, the following vulnerability has been resolved: padata: use integer wrap around to prevent deadlock on seq_nr overflow When sub… Linux Kernel 5.10.227 / 5.15.168+ Fix from $1,6002024-10-21 CRITICAL 9.8 CVE-2024-43566 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability Edge Chromium 130.0.2849.46+ Fix from $2,3002024-10-17 MEDIUM 5.5 CVE-2024-47661 In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Avoid overflow from uint32_t to uint8_t [WHAT & HOW] dmub_rb_c… Linux Kernel 6.10.9+ Fix from $1,6002024-10-09 HIGH 7.8 CVE-2024-47424 Adobe Framemaker versions 2020.6, 2022.4 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary c… Framemaker 2020.7 / 2022.5+ Fix from $1,9502024-10-09 HIGH 7.8 CVE-2024-47416 Animate versions 23.0.7, 24.0.4 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execu… Animate 23.0.8 / 24.0.5+ Fix from $1,9502024-10-09 MEDIUM 6.7 CVE-2024-37976 Windows Resume Extensible Firmware Interface Security Feature Bypass Vulnerability Windows 10 1507 10.0.10240.20796 / 10.0.14393.7428+ Fix from $1,6002024-10-08 MEDIUM 5.5 CVE-2024-34663 Integer overflow in libSEF.quram.so prior to SMR Oct-2024 Release 1 allows local attackers to write out-of-bounds memory. Android Mitigation only Fix from $1,6002024-10-08 HIGH 7.8 CVE-2024-36474 An integer overflow vulnerability exists in the Compound Document Binary File format parser of the GNOME Project G Structured File Library (libgsf) v… Libgsf Mitigation only Fix from $1,9502024-10-03 HIGH 7.8 CVE-2024-42415 An integer overflow vulnerability exists in the Compound Document Binary File format parser of v1.14.52 of the GNOME Project G Structured File Librar… Libgsf Mitigation only Fix from $1,9502024-10-03 HIGH 8.8 CVE-2024-9123 Integer overflow in Skia in Google Chrome prior to 129.0.6668.70 allowed a remote attacker to perform an out of bounds memory write via a crafted HTM… Chrome 129.0.6668.70+ Fix from $1,9502024-09-25 MEDIUM 5.5 CVE-2024-46726 In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Ensure index calculation will not overflow [WHY & HOW] Make su… Linux Kernel 6.1.109 / 6.6.50+ Fix from $1,6002024-09-18 MEDIUM 5.5 CVE-2024-44198 An integer overflow was addressed through improved input validation. This issue is fixed in iOS 18 and iPadOS 18, macOS Sequoia 15, tvOS 18, visionOS… Ipados 2.0 / 11.0+ Fix from $1,6002024-09-17 HIGH 7.5 CVE-2023-45854 A Business Logic vulnerability in Shopkit 1.0 allows an attacker to add products with negative quantities to the shopping cart via the qtd parameter … Mitigation only Fix from $1,9502024-09-16 MEDIUM 6.5 CVE-2024-31416 The Eaton Foreseer software provides multiple customizable input fields for the users to configure parameters in the tool like alarms, reports, etc. … Foreseer Electrical Power Monitoring System 7.8.600+ Fix from $1,6002024-09-13 HIGH 7.8 CVE-2024-34121 Illustrator versions 28.6, 27.9.5 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code exe… Illustrator 27.9.6 / 28.7.1+ Fix from $1,9502024-09-13