Browse CVEs

HIGH 7.0 CVE-2024-57876 In the Linux kernel, the following vulnerability has been resolved: drm/dp_mst: Fix resetting msg rx state after topology removal If the MST topolo… Linux Kernel 5.11 / 5.16+ Fix from $1,9502025-01-11 MEDIUM 5.9 CVE-2024-56441 Race condition vulnerability in the Bastet module Impact: Successful exploitation of this vulnerability may affect service confidentiality. Emui No fix yet Fix from $1,6002025-01-08 MEDIUM 5.9 CVE-2024-54120 Race condition vulnerability in the distributed notification module Impact: Successful exploitation of this vulnerability may cause features to perfo… Harmonyos No fix yet Fix from $1,6002025-01-08 MEDIUM 6.3 CVE-2024-56706 In the Linux kernel, the following vulnerability has been resolved: s390/cpum_sf: Fix and protect memory allocation of SDBs with mutex Reservation … Linux Kernel 6.12.2+ Fix from $1,6002024-12-28 MEDIUM 5.9 CVE-2024-53476 A race condition vulnerability in SimplCommerce at commit 230310c8d7a0408569b292c5a805c459d47a1d8f allows attackers to bypass inventory restrictions … Mitigation only Fix from $1,6002024-12-27 HIGH 7.0 CVE-2024-56664 In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: Fix race between element replace and close() Element replace (wit… Linux Kernel 6.6.67 / 6.12.6+ Fix from $1,9502024-12-27 HIGH 7.0 CVE-2024-56635 In the Linux kernel, the following vulnerability has been resolved: net: avoid potential UAF in default_operstate() syzbot reported an UAF in defau… Linux Kernel 6.6.66 / 6.12.5+ Fix from $1,9502024-12-27 HIGH 7.0 CVE-2024-56556 In the Linux kernel, the following vulnerability has been resolved: binder: fix node UAF in binder_add_freeze_work() In binder_add_freeze_work() we… Linux Kernel 6.12.4+ Fix from $1,9502024-12-27 HIGH 7.0 CVE-2024-53186 In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free in SMB request handling A race condition exists betwe… Linux Kernel 6.6.64 / 6.11+ Fix from $1,9502024-12-27 MEDIUM 5.5 CVE-2024-52906 IBM AIX 7.2, 7.3, VIOS 3.1, and 4.1 could allow a non-privileged local user to exploit a vulnerability in the TCP/IP kernel extension to cause a d… Vios Mitigation only Fix from $1,6002024-12-25 HIGH 7.5 CVE-2024-11144 The server lacks thread safety and can be crashed by anomalous data sent by an anonymous user from a remote network. The crash causes the FTP service… Mitigation only Fix from $1,9502024-12-16 HIGH 7.8 CVE-2024-46971 Software installed and run as a non-privileged user may conduct GPU system calls to read and write freed physical memory from the GPU. Mitigation only Fix from $1,9502024-12-13 HIGH 7.8 CVE-2024-47892 Software installed and run as a non-privileged user may conduct GPU system calls to read and write freed physical memory from the GPU. Mitigation only Fix from $1,9502024-12-13 MEDIUM 5.9 CVE-2024-54102 Race condition vulnerability in the DDR module Impact: Successful exploitation of this vulnerability may affect service confidentiality. Harmonyos No fix yet Fix from $1,6002024-12-12 MEDIUM 5.1 CVE-2024-54510 A race condition was addressed with improved locking. This issue is fixed in iOS 18.2 and iPadOS 18.2, iPadOS 17.7.3, macOS Sequoia 15.2, macOS Sonom… Ipados 11.2 / 13.7.2+ Fix from $1,6002024-12-12 MEDIUM 5.9 CVE-2024-54494 A race condition was addressed with additional validation. This issue is fixed in iOS 18.2 and iPadOS 18.2, iPadOS 17.7.3, macOS Sequoia 15.2, macOS … Ipados 2.2 / 11.2+ Fix from $1,6002024-12-12 HIGH 7.5 CVE-2024-49129 Windows Remote Desktop Gateway (RD Gateway) Denial of Service Vulnerability Windows Server 2012 10.0.14393.7606 / 10.0.17763.6659+ Fix from $1,9502024-12-12 HIGH 8.1 CVE-2024-49132 Windows Remote Desktop Services Remote Code Execution Vulnerability Windows 10 1809 10.0.17763.6659 / 10.0.19044.5247+ Fix from $1,9502024-12-12 HIGH 8.1 CVE-2024-49123 Windows Remote Desktop Services Remote Code Execution Vulnerability Windows 10 1809 10.0.17763.6659 / 10.0.19044.5247+ Fix from $1,9502024-12-12 HIGH 8.1 CVE-2024-49124 Lightweight Directory Access Protocol (LDAP) Client Remote Code Execution Vulnerability Windows 10 1507 10.0.10240.20857 / 10.0.14393.7606+ Fix from $1,9502024-12-12 HIGH 8.1 CVE-2024-49126 Windows Local Security Authority Subsystem Service (LSASS) Remote Code Execution Vulnerability Windows 10 1507 10.0.10240.20857 / 10.0.14393.7606+ Fix from $1,9502024-12-12 HIGH 8.1 CVE-2024-49127 Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability Windows 10 1507 10.0.10240.20857 / 10.0.14393.7606+ Fix from $1,9502024-12-12 HIGH 8.1 CVE-2024-49128 Sensitive data storage in improperly locked memory in Windows Remote Desktop Services allows an unauthorized attacker to execute code over a network. Windows Server 2012 10.0.14393.7606 / 10.0.17763.6659+ Fix from $1,9502024-12-12 HIGH 8.1 CVE-2024-49116EPSS 10% Windows Remote Desktop Services Remote Code Execution Vulnerability Windows Server 2016 10.0.14393.7606 / 10.0.17763.6659+ Fix from $1,9502024-12-12 HIGH 8.1 CVE-2024-49118 Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability Windows 10 1507 10.0.10240.20857 / 10.0.14393.7606+ Fix from $1,9502024-12-12 HIGH 8.1 CVE-2024-49119 Windows Remote Desktop Services Remote Code Execution Vulnerability Windows Server 2016 10.0.14393.7606 / 10.0.17763.6659+ Fix from $1,9502024-12-12 HIGH 8.1 CVE-2024-49120 Windows Remote Desktop Services Remote Code Execution Vulnerability Windows Server 2012 10.0.14393.7606 / 10.0.17763.6659+ Fix from $1,9502024-12-12 HIGH 8.1 CVE-2024-49122EPSS 20% Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability Windows 10 1507 10.0.10240.20857 / 10.0.14393.7606+ Fix from $1,9502024-12-12 HIGH 8.1 CVE-2024-49115 Windows Remote Desktop Services Remote Code Execution Vulnerability Windows Server 2016 10.0.14393.7606 / 10.0.17763.6659+ Fix from $1,9502024-12-12 HIGH 8.1 CVE-2024-49106 Windows Remote Desktop Services Remote Code Execution Vulnerability Windows Server 2016 10.0.14393.7606 / 10.0.17763.6659+ Fix from $1,9502024-12-12