Browse CVEs

HIGH 7.5 CVE-2024-28999EPSS 14% The SolarWinds Platform was determined to be affected by a Race Condition Vulnerability affecting the web console. Solarwinds Platform 2024.2+ Fix from $1,9502024-06-04 HIGH 7.0 CVE-2024-36899 In the Linux kernel, the following vulnerability has been resolved: gpiolib: cdev: Fix use after free in lineinfo_changed_notify The use-after-free… Linux Kernel 6.6.31 / 6.8.10+ Fix from $1,9502024-05-30 HIGH 7.8 CVE-2024-36894 In the Linux kernel, the following vulnerability has been resolved: usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete FFS b… Linux Kernel 4.19.317 / 5.4.279+ Fix from $1,9502024-05-30 HIGH 7.8 CVE-2023-52872 In the Linux kernel, the following vulnerability has been resolved: tty: n_gsm: fix race condition in status line change on dead connections gsm_cl… Linux Kernel 5.15.138 / 5.19+ Fix from $1,9502024-05-21 HIGH 7.0 CVE-2023-52847 In the Linux kernel, the following vulnerability has been resolved: media: bttv: fix use after free error due to btv->timeout timer There may be so… Linux Kernel 4.19.299 / 5.4.261+ Fix from $1,9502024-05-21 HIGH 7.8 CVE-2023-52825 In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Fix a race condition of vram buffer unref in svm code prange->svm_b… Linux Kernel 5.15.140 / 6.1.64+ Fix from $1,9502024-05-21 HIGH 7.0 CVE-2024-35898 In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get() nft… Linux Kernel 4.19.312 / 5.4.274+ Fix from $1,9502024-05-19 HIGH 7.3 CVE-2024-35899 In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: flush pending destroy work before exit_net release Simila… Linux Kernel 5.4.274 / 5.10.215+ Fix from $1,9502024-05-19 MEDIUM 5.9 CVE-2024-30046 Visual Studio Denial of Service Vulnerability .net 7.0.19 / 8.0.5+ Fix from $1,6002024-05-14 HIGH 7.8 CVE-2024-30031 Windows CNG Key Isolation Service Elevation of Privilege Vulnerability Windows 10 1507 10.0.10240.20651 / 10.0.14393.6981+ Fix from $1,9502024-05-14 MEDIUM 5.5 CVE-2024-32993 Out-of-bounds access vulnerability in the memory module Impact: Successful exploitation of this vulnerability will affect availability. Emui No fix yet Fix from $1,6002024-05-14 MEDIUM 5.9 CVE-2024-32985 Stellar-core is a reference implementation for the peer-to-peer agent that manages the Stellar network. Prior to 20.4.0, core nodes could be randomly… Mitigation only Fix from $1,6002024-05-14 HIGH 7.0 CVE-2022-48689 In the Linux kernel, the following vulnerability has been resolved: tcp: TX zerocopy should not sense pfmemalloc status We got a recent syzbot repo… Linux Kernel 5.15.68 / 5.19.9+ Fix from $1,9502024-05-03 HIGH 8.1 CVE-2023-27359 TP-Link AX1800 hotplugd Firewall Rule Race Condition Vulnerability. This vulnerability allows remote attackers to gain access to LAN-side services on… Archer Ax21 Firmware Mitigation only Fix from $1,9502024-05-03 HIGH 7.0 CVE-2023-37244 The affected AutomationManager.AgentService.exe application contains a TOCTOU race condition vulnerability that allows standard users to create a pse… Automation Manager 2.91.0.0+ Fix from $1,9502024-05-02 HIGH 7.8 CVE-2024-27058 In the Linux kernel, the following vulnerability has been resolved: tmpfs: fix race on handling dquot rbtree A syzkaller reproducer found a race wh… Linux Kernel 6.6.24 / 6.7.12+ Fix from $1,9502024-05-01 HIGH 7.8 CVE-2024-27062 In the Linux kernel, the following vulnerability has been resolved: nouveau: lock the client object tree. It appears the client object tree has no … Linux Kernel 6.6.24 / 6.7.12+ Fix from $1,9502024-05-01 MEDIUM 6.3 CVE-2024-27030 In the Linux kernel, the following vulnerability has been resolved: octeontx2-af: Use separate handlers for interrupts For PF to AF interrupt vecto… Linux Kernel 5.4.273 / 5.10.214+ Fix from $1,6002024-05-01 HIGH 7.0 CVE-2024-27020 In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get() nft_unre… Linux Kernel 4.19.313 / 5.4.275+ Fix from $1,9502024-05-01 HIGH 7.8 CVE-2024-27005 In the Linux kernel, the following vulnerability has been resolved: interconnect: Don't access req_list while it's being manipulated The icc_lock m… Linux Kernel 5.16 / 6.2+ Fix from $1,9502024-05-01 MEDIUM 5.5 CVE-2024-26984 In the Linux kernel, the following vulnerability has been resolved: nouveau: fix instmem race condition around ptr stores Running a lot of VK CTS i… Linux Kernel 4.19.313 / 5.4.275+ Fix from $1,6002024-05-01 HIGH 7.0 CVE-2024-26960 In the Linux kernel, the following vulnerability has been resolved: mm: swap: fix race between free_swap_and_cache() and swapoff() There was previo… Linux Kernel 5.10.215 / 5.15.154+ Fix from $1,9502024-05-01 MEDIUM 5.5 CVE-2024-26942 In the Linux kernel, the following vulnerability has been resolved: net: phy: qcom: at803x: fix kernel panic with at8031_probe On reworking and spl… Linux Kernel 6.8.3+ Fix from $1,6002024-05-01 HIGH 7.0 CVE-2024-33904 In plugins/HookSystem.cpp in Hyprland through 0.39.1 (before 28c8561), through a race condition, a local attacker can cause execution of arbitrary as… Patch available Fix from $1,9502024-04-29 HIGH 7.4 CVE-2024-32477 Deno is a JavaScript, TypeScript, and WebAssembly runtime with secure defaults. By using ANSI escape sequences and a race between `libc::tcflush(0, l… Deno 1.42.2+ Fix from $1,9502024-04-18 HIGH 7.1 CVE-2023-3758 A race condition flaw was found in sssd where the GPO policy is not consistently applied for authenticated users. This may lead to improper authoriza… Codeready Linux Builder Patch available Fix from $1,9502024-04-18 HIGH 7.0 CVE-2024-26242 Windows Telephony Server Elevation of Privilege Vulnerability Windows 10 1507 10.0.10240.20596 / 10.0.14393.6897+ Fix from $1,9502024-04-09 HIGH 7.0 CVE-2024-26243 Windows USB Print Driver Elevation of Privilege Vulnerability Windows 10 21h2 10.0.19044.4291 / 10.0.19045.4291+ Fix from $1,9502024-04-09 HIGH 7.0 CVE-2024-26236 Windows Update Stack Elevation of Privilege Vulnerability Windows Server 2022 23h2 10.0.25398.830+ Fix from $1,9502024-04-09 HIGH 8.2 CVE-2024-27983EPSS 87% An attacker can make the Node.js HTTP/2 server completely unavailable by sending a small amount of HTTP/2 frames packets with a few HTTP/2 frames ins… Mitigation only Fix from $1,9502024-04-09