Browse CVEs

CRITICAL 9.8 CVE-2023-28201 This issue was addressed with improved state management. This issue is fixed in macOS Ventura 13.3, Safari 16.4, iOS 16.4 and iPadOS 16.4, iOS 15.7.4… Safari 13.3 / 15.7.4+ Fix from $2,3002023-05-08 HIGH 8.1 CVE-2023-21712 Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability Windows 10 10.0.10240.19562 / 10.0.14393.5501+ Fix from $1,9502023-04-27 HIGH 7.0 CVE-2023-2006 A race condition was found in the Linux kernel's RxRPC network protocol, within the processing of RxRPC bundles. This issue results from the lack of … Linux Kernel 5.10.157 / 5.15.81+ Fix from $1,9502023-04-24 HIGH 7.0 CVE-2023-28142 A Race Condition exists in the Qualys Cloud Agent for Windows platform in versions from 3.1.3.34 and before 4.5.3.1. This allows attackers to escalat… Cloud Agent 4.5.3.1+ Fix from $1,9502023-04-18 MEDIUM 5.7 CVE-2023-30543 @web3-react is a framework for building Ethereum Apps . In affected versions the `chainId` may be outdated if the user changes chains as part of the … Web3 React Coinbase Wallet after 6.2.14 Fix from $1,6002023-04-17 MEDIUM 5.3 CVE-2023-28984 A Use After Free vulnerability in the Layer 2 Address Learning Manager (l2alm) of Juniper Networks Junos OS on QFX Series allows an adjacent attacker… Junos Mitigation only Fix from $1,6002023-04-17 HIGH 7.0 CVE-2023-26980 PAX Technology PAX A920 Pro PayDroid 8.1suffers from a Race Condition vulnerability, which allows attackers to bypass the payment software and force … Paydroid No fix yet Fix from $1,9502023-04-14 MEDIUM 5.9 CVE-2023-1285 Signal Handler Race Condition vulnerability in Mitsubishi Electric India GC-ENET-COM whose first 2 digits of 11-digit serial number of unit are "16" … Gc Enet Com Firmware Mitigation only Fix from $1,6002023-04-14 MEDIUM 6.6 CVE-2023-28305 Windows DNS Server Remote Code Execution Vulnerability Windows Server 2008 Patch available Fix from $1,6002023-04-11 MEDIUM 6.6 CVE-2023-28306 Windows DNS Server Remote Code Execution Vulnerability Windows Server 2008 Patch available Fix from $1,6002023-04-11 MEDIUM 6.6 CVE-2023-28307 Windows DNS Server Remote Code Execution Vulnerability Windows Server 2008 Patch available Fix from $1,6002023-04-11 MEDIUM 6.6 CVE-2023-28308 Windows DNS Server Remote Code Execution Vulnerability Windows Server 2008 Patch available Fix from $1,6002023-04-11 HIGH 7.0 CVE-2023-28273 Windows Clip Service Elevation of Privilege Vulnerability Windows 10 1607 10.0.14393.5850 / 10.0.17763.4252+ Fix from $1,9502023-04-11 MEDIUM 6.6 CVE-2023-28278 Windows DNS Server Remote Code Execution Vulnerability Windows Server 2008 Patch available Fix from $1,6002023-04-11 HIGH 7.5 CVE-2023-28232 Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability Windows 10 1507 10.0.10240.19869 / 10.0.14393.5850+ Fix from $1,9502023-04-11 MEDIUM 6.4 CVE-2023-20684 In vdec, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privilege… Android Mitigation only Fix from $1,6002023-04-06 MEDIUM 6.4 CVE-2023-20685 In vdec, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privilege… Android Mitigation only Fix from $1,6002023-04-06 MEDIUM 6.4 CVE-2023-20686 In display drm, there is a possible double free due to a race condition. This could lead to local escalation of privilege with System execution privi… Android Mitigation only Fix from $1,6002023-04-06 MEDIUM 6.4 CVE-2023-20687 In display drm, there is a possible double free due to a race condition. This could lead to local escalation of privilege with System execution privi… Android Mitigation only Fix from $1,6002023-04-06 HIGH 7.5 CVE-2022-48221 An issue was discovered in Acuant AcuFill SDK before 10.22.02.03. Multiple MSI's get executed out of a standard-user writable directory. Through a ra… Acuant Acufill Sdk 10.22.02.03+ Fix from $1,9502023-04-04 HIGH 7.0 CVE-2023-28144 KDAB Hotspot 1.3.x and 1.4.x through 1.4.1, in a non-default configuration, allows privilege escalation because of race conditions involving symlinks… Hotspot after 1.4.1 Fix from $1,9502023-03-14 HIGH 7.0 CVE-2023-24861 Windows Graphics Component Elevation of Privilege Vulnerability Windows 10 1507 10.0.10240.19805 / 10.0.14393.5786+ Fix from $1,9502023-03-14 HIGH 7.1 CVE-2023-23407 Windows Point-to-Point Protocol over Ethernet (PPPoE) Remote Code Execution Vulnerability Windows 10 1507 10.0.10240.19805 / 10.0.14393.5786+ Fix from $1,9502023-03-14 HIGH 8.1 CVE-2023-23404 Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability Windows 10 1507 10.0.10240.19805 / 10.0.14393.5786+ Fix from $1,9502023-03-14 HIGH 7.0 CVE-2023-23393 Windows BrokerInfrastructure Service Elevation of Privilege Vulnerability Windows 10 1809 10.0.17763.4131 / 10.0.19042.2728+ Fix from $1,9502023-03-14 MEDIUM 5.9 CVE-2021-20251 A flaw was found in samba. A race condition in the password lockout code may lead to the risk of brute force attacks being successful if special cond… Fedora 4.16.8 / 4.17.4+ Fix from $1,6002023-03-06 MEDIUM 6.3 CVE-2022-32844 A race condition was addressed with improved state handling. This issue is fixed in tvOS 15.6, watchOS 8.7, iOS 15.6 and iPadOS 15.6. An app with arb… Ipados 8.7 / 15.6+ Fix from $1,6002023-02-27 MEDIUM 5.7 CVE-2023-23039 An issue was discovered in the Linux kernel through 6.2.0-rc2. drivers/tty/vcc.c has a race condition and resultant use-after-free if a physically pr… Linux Kernel 6.2.0+ Fix from $1,6002023-02-22 HIGH 7.0 CVE-2020-19824 An issue in MPV v.0.29.1 fixed in v0.30 allows attackers to execute arbitrary code and crash program via the ao_c parameter. Mpv No fix yet Fix from $1,9502023-02-17 HIGH 7.0 CVE-2022-32764 Description: Race condition in the Intel(R) DSA software before version 22.4.26 may allow an authenticated user to potentially enable escalation of p… Driver \& Support Assistant 22.4.26+ Fix from $1,9502023-02-16