Browse CVEs

HIGH 7.5 CVE-2024-43467 Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability Windows Server 2008 10.0.14393.7336 / 10.0.17763.6293+ Fix from $1,9502024-09-10 MEDIUM 5.9 CVE-2024-45300 alf.io is an open source ticket reservation system for conferences, trade shows, workshops, and meetups. Prior to version 2.0-M5, a race condition al… Alf 2.0-m5+ Fix from $1,6002024-09-06 HIGH 8.1 CVE-2024-7627 The Bit File Manager plugin for WordPress is vulnerable to Remote Code Execution in versions 6.0 to 6.5.5 via the 'checkSyntax' function. This is due… File Manager 6.5.6+ Fix from $1,9502024-09-05 HIGH 7.5 CVE-2024-7885 A vulnerability was found in Undertow where the ProxyProtocolReadListener reuses the same StringBuilder instance across multiple requests. This issue… Build Of Apache Camel Hawtio Mitigation only Fix from $1,9502024-08-21 HIGH 7.0 CVE-2024-34731 In multiple functions of TranscodingResourcePolicy.cpp, there is a possible memory corruption due to a race condition. This could lead to local escal… Android Patch available Fix from $1,9502024-08-15 MEDIUM 6.8 CVE-2024-42488 Cilium is a networking, observability, and security solution with an eBPF-based dataplane. Prior to versions 1.14.14 and 1.15.8, a race condition in … Cilium 1.14.14 / 1.15.8+ Fix from $1,6002024-08-15 MEDIUM 5.9 CVE-2024-27267 The Object Request Broker (ORB) in IBM SDK, Java Technology Edition 7.1.0.0 through 7.1.5.18 and 8.0.0.0 through 8.0.8.26 is vulnerable to remote den… Java Sdk after 8.0.8.26 Fix from $1,6002024-08-14 HIGH 7.8 CVE-2024-38191 Kernel Streaming Service Driver Elevation of Privilege Vulnerability Windows 10 1607 10.0.14393.7159 / 10.0.17763.6054+ Fix from $1,9502024-08-13 HIGH 7.0 CVE-2024-38137 Windows Resource Manager PSM Service Extension Elevation of Privilege Vulnerability Windows 10 21h2 10.0.19044.4780 / 10.0.19045.4780+ Fix from $1,9502024-08-13 HIGH 7.0 CVE-2024-38136 Windows Resource Manager PSM Service Extension Elevation of Privilege Vulnerability Windows 10 1809 10.0.17763.6189 / 10.0.19044.4780+ Fix from $1,9502024-08-13 HIGH 8.1 CVE-2024-7589 A signal handler in sshd(8) may call a logging function that is not async-signal-safe. The signal handler is invoked when a client does not authenti… FreeBSD 13.0 / 13.3+ Fix from $1,9502024-08-12 HIGH 7.5 CVE-2024-40815 A race condition was addressed with additional validation. This issue is fixed in iOS 17.6 and iPadOS 17.6, macOS Sonoma 14.6, macOS Ventura 13.6.8, … Ipados 10.6 / 13.6.8+ Fix from $1,9502024-07-29 MEDIUM 5.9 CVE-2024-27823 A race condition was addressed with improved locking. This issue is fixed in iOS 16.7.8 and iPadOS 16.7.8, iOS 17.5 and iPadOS 17.5, macOS Monterey 1… Ipados 1.3 / 10.5+ Fix from $1,6002024-07-29 HIGH 7.0 CVE-2023-42959 A race condition was addressed with improved state handling. This issue is fixed in macOS Sonoma 14. An app may be able to execute arbitrary code wit… macOS 14.0+ Fix from $1,9502024-07-29 HIGH 7.5 CVE-2024-6778 Race in DevTools in Google Chrome prior to 126.0.6478.182 allowed an attacker who convinced a user to install a malicious extension to inject scripts… Chrome 126.0.6478.182+ Fix from $1,9502024-07-16 HIGH 7.0 CVE-2022-48858 In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Fix a race on command flush flow Fix a refcount use after free warnin… Linux Kernel 5.4.185 / 5.10.106+ Fix from $1,9502024-07-16 MEDIUM 5.5 CVE-2024-40976 In the Linux kernel, the following vulnerability has been resolved: drm/lima: mask irqs in timeout path before hard reset There is a race condition… Linux Kernel 5.10.221 / 5.15.162+ Fix from $1,6002024-07-12 HIGH 7.0 CVE-2024-39503 In the Linux kernel, the following vulnerability has been resolved: netfilter: ipset: Fix race between namespace cleanup and gc in the list:set type… Linux Kernel 5.4.279 / 5.10.221+ Fix from $1,9502024-07-12 MEDIUM 5.9 CVE-2024-39554 A Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') vulnerability the Routing Protocol Daemon (rpd) of … Junos 21.2 / 21.3+ Fix from $1,6002024-07-10 HIGH 7.0 CVE-2024-34724 In _UnrefAndMaybeDestroy of pmr.c, there is a possible arbitrary code execution due to a race condition. This could lead to local escalation of privi… Android Mitigation only Fix from $1,9502024-07-09 HIGH 7.0 CVE-2024-34725 In DevmemIntUnexportCtx of devicemem_server.c, there is a possible arbitrary code execution due to a race condition. This could lead to local escalat… Android Mitigation only Fix from $1,9502024-07-09 HIGH 7.0 CVE-2024-31327 In multiple functions of MessageQueueBase.h, there is a possible out of bounds write due to a race condition. This could lead to local escalation of … Android Patch available Fix from $1,9502024-07-09 HIGH 8.1 CVE-2024-6387EPSS 100% A security regression (CVE-2006-5051) was discovered in OpenSSH's server (sshd). There is a race condition which can lead sshd to handle some signals… Ubuntu Linux Patch available Fix from $1,9502024-07-01 HIGH 7.8 CVE-2024-38628 In the Linux kernel, the following vulnerability has been resolved: usb: gadget: u_audio: Fix race condition use of controls after free during gadge… Linux Kernel 6.1.93 / 6.6.33+ Fix from $1,9502024-06-21 HIGH 7.0 CVE-2022-48759 In the Linux kernel, the following vulnerability has been resolved: rpmsg: char: Fix race between the release of rpmsg_ctrldev and cdev struct rpms… Linux Kernel 4.14.265 / 4.19.228+ Fix from $1,9502024-06-20 HIGH 7.4 CVE-2024-0397 A defect was discovered in the Python “ssl” module where there is a memory race condition with the ssl.SSLContext methods “cert_store_stats()” and “g… Patch available Fix from $1,9502024-06-17 HIGH 7.0 CVE-2024-32899 In gpu_pm_power_off_top_nolock of pixel_gpu_power.c, there is a possible compromise of protected memory due to a race condition. This could lead to l… Android Mitigation only Fix from $1,9502024-06-13 HIGH 7.8 CVE-2024-32908 In sec_media_protect of media.c, there is a possible permission bypass due to a race condition. This could lead to local escalation of privilege with… Android Mitigation only Fix from $1,9502024-06-13 HIGH 7.0 CVE-2024-32891 In sec_media_unprotect of media.c, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege wi… Android Mitigation only Fix from $1,9502024-06-13 MEDIUM 5.5 CVE-2024-35255 Azure Identity Libraries and Microsoft Authentication Library Elevation of Privilege Vulnerability Azure Identity Sdk 1.6.0 / 1.8.0+ Fix from $1,6002024-06-11