Browse CVEs

HIGH 7.0 CVE-2022-1247 An issue found in linux-kernel that leads to a race condition in rose_connect(). The rose driver uses rose_neigh->use to represent how many objects a… Linux Kernel No fix yet Fix from $1,9502022-08-31 HIGH 7.0 CVE-2022-2961 A use-after-free flaw was found in the Linux kernel’s PLP Rose functionality in the way a user triggers a race condition by calling bind while simult… Linux Kernel 6.0+ Fix from $1,9502022-08-29 HIGH 7.0 CVE-2022-2959 A race condition was found in the Linux kernel's watch queue due to a missing lock in pipe_resize_ring(). The specific flaw exists within the handlin… Linux Kernel 5.10.120 / 5.15.45+ Fix from $1,9502022-08-25 MEDIUM 6.8 CVE-2021-20316 A flaw was found in the way Samba handled file/directory metadata. This flaw allows an authenticated attacker with permissions to read or modify shar… Debian Linux 4.15.0+ Fix from $1,6002022-08-23 MEDIUM 6.3 CVE-2021-3702 A race condition flaw was found in ansible-runner, where an attacker could watch for rapid creation and deletion of a temporary directory, substitute… Ansible Runner Patch available Fix from $1,6002022-08-23 HIGH 7.5 CVE-2022-24950 A race condition exists in Eternal Terminal prior to version 6.2.0 that allows an authenticated attacker to hijack other users' SSH authorization soc… Eternal Terminal 6.2.0+ Fix from $1,9502022-08-16 HIGH 7.0 CVE-2022-24951 A race condition exists in Eternal Terminal prior to version 6.2.0 which allows a local attacker to hijack Eternal Terminal's IPC socket, enabling ac… Eternal Terminal 6.2.0+ Fix from $1,9502022-08-16 HIGH 7.5 CVE-2022-24949 A privilege escalation to root exists in Eternal Terminal prior to version 6.2.0. This is due to the combination of a race condition, buffer overflow… Eternal Terminal 6.2.0+ Fix from $1,9502022-08-16 HIGH 8.8 CVE-2022-2617 Use after free in Extensions API in Google Chrome prior to 104.0.5112.79 allowed an attacker who convinced a user to install a malicious extension to… Chrome 104.0.5112.79+ Fix from $1,9502022-08-12 HIGH 8.8 CVE-2022-2623 Use after free in Offline in Google Chrome on Android prior to 104.0.5112.79 allowed a remote attacker who convinced a user to engage in specific use… Chrome 104.0.5112.79+ Fix from $1,9502022-08-12 HIGH 8.8 CVE-2022-2607 Use after free in Tab Strip in Google Chrome on Chrome OS prior to 104.0.5112.79 allowed a remote attacker who convinced a user to engage in specific… Chrome 104.0.5112.79+ Fix from $1,9502022-08-12 HIGH 8.8 CVE-2022-2608 Use after free in Overview Mode in Google Chrome on Chrome OS prior to 104.0.5112.79 allowed a remote attacker who convinced a user to engage in spec… Chrome 104.0.5112.79+ Fix from $1,9502022-08-12 HIGH 8.8 CVE-2022-2609 Use after free in Nearby Share in Google Chrome on Chrome OS prior to 104.0.5112.79 allowed a remote attacker who convinced a user to engage in speci… Chrome 104.0.5112.79+ Fix from $1,9502022-08-12 MEDIUM 6.4 CVE-2022-20256 In the Audio HAL, there is a possible out of bounds write due to a race condition. This could lead to local escalation of privilege with System execu… Android Mitigation only Fix from $1,6002022-08-12 MEDIUM 6.4 CVE-2022-20373 In st21nfc_loc_set_polaritymode of fc/st21nfc.c, there is a possible use after free due to a race condition. This could lead to local escalation of p… Android Mitigation only Fix from $1,6002022-08-11 HIGH 7.0 CVE-2022-20344 In stealReceiveChannel of EventThread.cpp, there is a possible way to interfere with process communication due to a race condition. This could lead t… Android Patch available Fix from $1,9502022-08-10 HIGH 7.5 CVE-2022-35796 Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability Edge Chromium 104.0.1293.47+ Fix from $1,9502022-08-09 HIGH 8.3 CVE-2022-33636 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability Edge Chromium 104.0.1293.47+ Fix from $1,9502022-08-09 HIGH 7.8 CVE-2022-34696 Windows Hyper-V Remote Code Execution Vulnerability Windows 10 No fix yet Fix from $1,9502022-08-09 HIGH 8.1 CVE-2022-34702 Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability Windows 10 No fix yet Fix from $1,9502022-08-09 HIGH 8.1 CVE-2022-37035 An issue was discovered in bgpd in FRRouting (FRR) 8.3. In bgp_notify_send_with_data() and bgp_process_packet() in bgp_packet.c, there is a possible … Frrouting No fix yet Fix from $1,9502022-08-02 MEDIUM 6.4 CVE-2022-26428 In video codec, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with System execution… Android Mitigation only Fix from $1,6002022-08-01 MEDIUM 6.4 CVE-2022-21789 In audio ipi, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with System execution p… Android Mitigation only Fix from $1,6002022-08-01 MEDIUM 6.5 CVE-2022-2160 Insufficient policy enforcement in DevTools in Google Chrome on Windows prior to 103.0.5060.53 allowed an attacker who convinced a user to install a … Chrome 103.0.5060.53+ Fix from $1,6002022-07-28 MEDIUM 5.1 CVE-2020-36558 A race condition in the Linux kernel before 5.5.7 involving VT_RESIZEX could lead to a NULL pointer dereference and general protection fault. Linux Kernel 5.5.7+ Fix from $1,6002022-07-21 MEDIUM 5.1 CVE-2020-36557 A race condition in the Linux kernel before 5.6.2 between the VT_DISALLOCATE ioctl and closing/opening of ttys could lead to a use-after-free. Linux Kernel 5.6.2+ Fix from $1,6002022-07-21 HIGH 7.8 CVE-2022-34892 This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop Parallels Desktop 17.1.1. An attacker… Parallels Desktop Mitigation only Fix from $1,9502022-07-18 MEDIUM 6.6 CVE-2022-30205 Windows Group Policy Elevation of Privilege Vulnerability Windows 10 No fix yet Fix from $1,6002022-07-12 MEDIUM 6.6 CVE-2022-30214 Windows DNS Server Remote Code Execution Vulnerability Windows Server 2016 No fix yet Fix from $1,6002022-07-12 HIGH 8.1 CVE-2022-24800 October/System is the system module for October CMS, a self-hosted CMS platform based on the Laravel PHP Framework. Prior to versions 1.0.476, 1.1.12… October 1.0.476 / 1.1.12+ Fix from $1,9502022-07-12