Browse CVEs

HIGH 8.1 CVE-2024-49108 Windows Remote Desktop Services Remote Code Execution Vulnerability Windows Server 2016 10.0.14393.7606 / 10.0.17763.6659+ Fix from $1,9502024-12-12 HIGH 7.0 CVE-2024-49095 Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability Windows 10 1809 10.0.17763.6659 / 10.0.19044.5247+ Fix from $1,9502024-12-12 HIGH 7.0 CVE-2024-49097 Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability Windows 10 1809 10.0.17763.6659 / 10.0.19044.5247+ Fix from $1,9502024-12-12 HIGH 7.0 CVE-2024-49084 Windows Kernel Elevation of Privilege Vulnerability Windows 10 1507 10.0.10240.20857 / 10.0.14393.7606+ Fix from $1,9502024-12-12 HIGH 7.0 CVE-2024-49059 Microsoft Office Elevation of Privilege Vulnerability 365 Apps No fix yet Fix from $1,9502024-12-12 MEDIUM 5.5 CVE-2024-53122 In the Linux kernel, the following vulnerability has been resolved: mptcp: cope racing subflow creation in mptcp_rcv_space_adjust Additional active… Linux Kernel 6.1.119 / 6.6.63+ Fix from $1,6002024-12-02 MEDIUM 5.5 CVE-2024-53123 In the Linux kernel, the following vulnerability has been resolved: mptcp: error out earlier on disconnect Eric reported a division by zero splat i… Linux Kernel 6.1.119 / 6.6+ Fix from $1,6002024-12-02 MEDIUM 5.5 CVE-2024-53121 In the Linux kernel, the following vulnerability has been resolved: net/mlx5: fs, lock FTE when checking if active The referenced commits introduce… Linux Kernel 6.1.119 / 6.6.63+ Fix from $1,6002024-12-02 MEDIUM 5.9 CVE-2024-36615 FFmpeg n7.0 has a race condition vulnerability in the VP9 decoder. This could lead to a data race if video encoding parameters were being exported, a… Ffmpeg Patch available Fix from $1,6002024-11-29 HIGH 8.1 CVE-2024-36623 moby through v25.0.3 has a Race Condition vulnerability in the streamformatter package which can be used to trigger multiple concurrent write operati… Moby after 25.0.3 Fix from $1,9502024-11-29 MEDIUM 6.5 CVE-2024-36621 moby v25.0.5 is affected by a Race Condition in builder/builder-next/adapters/snapshot/layer.go. The vulnerability could be used to trigger concurren… Moby Patch available Fix from $1,6002024-11-29 MEDIUM 6.5 CVE-2024-11708 Missing thread synchronization primitives could have led to a data race on members of the PlaybackParams structure. This vulnerability affects Firefo… Firefox 133.0+ Fix from $1,6002024-11-26 MEDIUM 5.9 CVE-2024-49353 IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data 4.0.0 through 5.0.2 does not properly check inputs to resources that are used concurr… Watson Assistant For Ibm Cloud Pak For Data 5.0.3+ Fix from $1,6002024-11-26 CRITICAL 9.8 CVE-2024-48069 A vulnerability was found in Weaver E-cology allows attackers use race conditions to bypass security mechanisms to upload malicious files and control… E Cology Mitigation only Fix from $2,3002024-11-19 HIGH 7.8 CVE-2024-48991EPSS 5% Qualys discovered that needrestart, before version 3.8, allows local attackers to execute arbitrary code as root by winning a race condition and tric… Needrestart 3.8+ Fix from $1,9502024-11-19 MEDIUM 5.3 CVE-2024-50313 A vulnerability has been identified in Mendix Runtime V10 (All versions < V10.16.0 only if the basic authentication mechanism is used by the applicat… Mendix 9.24.29 / 10.6.15+ Fix from $1,6002024-11-12 MEDIUM 5.3 CVE-2024-10468 Potential race conditions in IndexedDB could have caused memory corruption, leading to a potentially exploitable crash. This vulnerability affects Fi… Firefox 132.0+ Fix from $1,6002024-10-29 HIGH 7.0 CVE-2024-50066 In the Linux kernel, the following vulnerability has been resolved: mm/mremap: fix move_normal_pmd/retract_page_tables race In mremap(), move_page_… Linux Kernel 6.6.58 / 6.11.5+ Fix from $1,9502024-10-23 HIGH 7.0 CVE-2022-49001 In the Linux kernel, the following vulnerability has been resolved: riscv: fix race when vmap stack overflow Currently, when detecting vmap stack o… Linux Kernel 5.15.82 / 6.0.12+ Fix from $1,9502024-10-21 HIGH 7.0 CVE-2024-49981 In the Linux kernel, the following vulnerability has been resolved: media: venus: fix use after free bug in venus_remove due to race condition in v… Linux Kernel 5.10.227 / 5.15.168+ Fix from $1,9502024-10-21 HIGH 7.0 CVE-2024-47741 In the Linux kernel, the following vulnerability has been resolved: btrfs: fix race setting file private on concurrent lseek using same fd When doi… Linux Kernel 6.6.54 / 6.10.13+ Fix from $1,9502024-10-21 MEDIUM 5.3 CVE-2024-47689 In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to don't set SB_RDONLY in f2fs_handle_critical_error() syzbot reports… Linux Kernel 6.5 / 6.6.54+ Fix from $1,6002024-10-21 MEDIUM 6.5 CVE-2024-9936 When manipulating the selection node cache, an attacker may have been able to cause unexpected behavior, potentially leading to an exploitable crash.… Firefox 131.0.3+ Fix from $1,6002024-10-14 HIGH 7.8 CVE-2024-43701 Software installed and run as a non-privileged user may conduct GPU system calls to read and write freed physical memory from the GPU. Mitigation only Fix from $1,9502024-10-14 HIGH 8.1 CVE-2024-47870 Gradio is an open-source Python package designed for quick prototyping. This vulnerability involves a **race condition** in the `update_root_in_confi… Gradio 5.0.0+ Fix from $1,9502024-10-10 MEDIUM 5.9 CVE-2024-20509 A vulnerability in the Cisco AnyConnect VPN server of Cisco Meraki MX and Cisco Meraki Z Series Teleworker Gateway devices could allow an unauthentic… Meraki Mx65 Firmware 18.211.2+ Fix from $1,6002024-10-02 HIGH 8.2 CVE-2024-47534 go-tuf is a Go implementation of The Update Framework (TUF). The go-tuf client inconsistently traces the delegations. For example, if targets delegat… Patch available Fix from $1,9502024-10-01 MEDIUM 5.5 CVE-2024-27876 A race condition was addressed with improved locking. This issue is fixed in iOS 17.7 and iPadOS 17.7, iOS 18 and iPadOS 18, macOS Sequoia 15, macOS … Ipados 2.0 / 13.7+ Fix from $1,6002024-09-17 HIGH 7.9 CVE-2024-23599 Race condition in Seamless Firmware Updates for some Intel(R) reference platforms may allow a privileged user to potentially enable denial of service… Mitigation only Fix from $1,9502024-09-16 HIGH 7.5 CVE-2023-41833 A race condition in UEFI firmware for some Intel(R) processors may allow a privileged user to potentially enable escalation of privilege via local ac… Mitigation only Fix from $1,9502024-09-16