Browse CVEs

HIGH 7.8 CVE-2022-48837 In the Linux kernel, the following vulnerability has been resolved: usb: gadget: rndis: prevent integer overflow in rndis_set_response() If "BufOff… Linux Kernel 4.9.308 / 4.14.273+ Fix from $1,9502024-07-16 MEDIUM 5.5 CVE-2022-48806 In the Linux kernel, the following vulnerability has been resolved: eeprom: ee1004: limit i2c reads to I2C_SMBUS_BLOCK_MAX Commit effa453168a7 ("i2… Linux Kernel 4.5 / 4.10+ Fix from $1,6002024-07-16 HIGH 7.8 CVE-2024-40994 In the Linux kernel, the following vulnerability has been resolved: ptp: fix integer overflow in max_vclocks_store On 32bit systems, the "4 * max" … Linux Kernel 5.15.162 / 6.1.96+ Fix from $1,9502024-07-12 HIGH 7.8 CVE-2024-41000 In the Linux kernel, the following vulnerability has been resolved: block/ioctl: prefer different overflow check Running syzkaller with the newly r… Debian Linux 5.10.221 / 5.15.162+ Fix from $1,9502024-07-12 CRITICAL 9.0 CVE-2024-37310 EVerest is an EV charging software stack. An integer overflow in the "v2g_incoming_v2gtp" function in the v2g_server.cpp implementation can allow a r… Patch available Fix from $2,3002024-07-10 HIGH 7.8 CVE-2024-23695 In CacheOpPMRExec of cache_km.c, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege… Android Mitigation only Fix from $1,9502024-07-09 HIGH 7.8 CVE-2024-34139 Bridge versions 14.0.4, 13.0.7, 14.1 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code … Bridge 13.0.8 / 14.1.1+ Fix from $1,9502024-07-09 HIGH 7.8 CVE-2024-39684 Tencent RapidJSON is vulnerable to privilege escalation due to an integer overflow in the `GenericReader::ParseNumber()` function of `include/rapidjs… Mitigation only Fix from $1,9502024-07-09 HIGH 7.8 CVE-2024-38080 KEVEPSS 7% Windows Hyper-V Elevation of Privilege Vulnerability Windows 11 21h2 10.0.20348.2582 / 10.0.22000.3079+ Fix from $1,9502024-07-09 HIGH 7.8 CVE-2024-38034 Windows Filtering Platform Elevation of Privilege Vulnerability Windows 10 1507 10.0.10240.20710 / 10.0.14393.7159+ Fix from $1,9502024-07-09 HIGH 7.2 CVE-2024-38019 Microsoft Windows Performance Data Helper Library Remote Code Execution Vulnerability Windows 10 1507 10.0.10240.20710 / 10.0.14393.7159+ Fix from $1,9502024-07-09 HIGH 8.8 CVE-2024-37336 SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability Sql Server 2016 13.0.6441.1 / 13.0.7037.1+ Fix from $1,9502024-07-09 HIGH 8.8 CVE-2024-37323 SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability Sql Server 2016 13.0.6441.1 / 13.0.7037.1+ Fix from $1,9502024-07-09 MEDIUM 6.8 CVE-2024-26184 Secure Boot Security Feature Bypass Vulnerability Windows 10 21h2 10.0.19044.4651 / 10.0.19045.4651+ Fix from $1,6002024-07-09 HIGH 8.8 CVE-2024-21428 SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability Sql Server 2016 13.0.6441.1 / 13.0.7037.1+ Fix from $1,9502024-07-09 CRITICAL 9.8 CVE-2024-1305EPSS 15% tap-windows6 driver version 9.26 and earlier does not properly check the size data of incomming write operations which an attacker can use to overf… Tap Windows6 after 9.26.0 Fix from $2,3002024-07-08 HIGH 7.2 CVE-2023-45742 An integer overflow vulnerability exists in the boa updateConfigIntoFlash functionality of Realtek rtl819x Jungle SDK v3.4.11. A specially crafted se… Rtl819x Jungle Software Development Kit No fix yet Fix from $1,9502024-07-08 HIGH 7.8 CVE-2024-23372 Memory corruption while invoking IOCTL call for GPU memory allocation and size param is greater than expected size. Fastconnect 6200 Firmware Patch available Fix from $1,9502024-07-01 MEDIUM 5.5 CVE-2024-38661 In the Linux kernel, the following vulnerability has been resolved: s390/ap: Fix crash in AP internal function modify_bitmap() A system crash like … Linux Kernel 4.19.316 / 5.4.278+ Fix from $1,6002024-06-25 MEDIUM 5.5 CVE-2024-38624 In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow For example, in the expr… Linux Kernel 5.15.161 / 6.1.93+ Fix from $1,6002024-06-21 MEDIUM 5.5 CVE-2024-37356 In the Linux kernel, the following vulnerability has been resolved: tcp: Fix shift-out-of-bounds in dctcp_update_alpha(). In dctcp_update_alpha(), … Linux Kernel 4.19.316 / 5.4.278+ Fix from $1,6002024-06-21 HIGH 8.2 CVE-2024-37305 oqs-provider is a provider for the OpenSSL 3 cryptography library that adds support for post-quantum cryptography in TLS, X.509, and S/MIME using pos… Patch available Fix from $1,9502024-06-17 CRITICAL 9.8 CVE-2024-32913 In wl_notify_rx_mgmt_frame of wl_cfg80211.c, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execu… Android Mitigation only Fix from $2,3002024-06-13 HIGH 7.8 CVE-2024-29784 In prepare_response of lwis_periodic_io.c, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of… Android Mitigation only Fix from $1,9502024-06-13 HIGH 7.8 CVE-2024-30072 Microsoft Event Trace Log File Parsing Remote Code Execution Vulnerability Windows 11 22h2 10.0.22621.3737 / 10.0.22631.3737+ Fix from $1,9502024-06-11 HIGH 8.8 CVE-2024-30064 Windows Kernel Elevation of Privilege Vulnerability Windows Server 2022 10.0.20348.2522 / 10.0.25398.950+ Fix from $1,9502024-06-11 MEDIUM 5.5 CVE-2024-30067 Winlogon Elevation of Privilege Vulnerability Windows 10 1507 10.0.10240.20680 / 10.0.14393.7070+ Fix from $1,6002024-06-11 HIGH 8.8 CVE-2024-27833 An integer overflow was addressed with improved input validation. This issue is fixed in Safari 17.5, iOS 16.7.8 and iPadOS 16.7.8, iOS 17.5 and iPad… Safari 1.2 / 16.7.8+ Fix from $1,9502024-06-10 MEDIUM 6.5 CVE-2024-36968 In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init() l2cap_le_flowctl_i… Linux Kernel 6.6.32 / 6.8.11+ Fix from $1,6002024-06-08 HIGH 7.5 CVE-2023-49441 dnsmasq 2.9 is vulnerable to Integer Overflow via forward_query. Dnsmasq No fix yet Fix from $1,9502024-06-06