Browse CVEs

MEDIUM 6.7 CVE-2022-21771 In GED driver, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution pri… Android Mitigation only Fix from $1,6002022-07-06 MEDIUM 6.7 CVE-2022-21772 In TEEI driver, there is a possible type confusion due to a race condition. This could lead to local escalation of privilege with System execution pr… Android Mitigation only Fix from $1,6002022-07-06 MEDIUM 6.7 CVE-2022-21773 In TEEI driver, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution pr… Android Mitigation only Fix from $1,6002022-07-06 MEDIUM 6.7 CVE-2022-21774 In TEEI driver, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution pr… Android Mitigation only Fix from $1,6002022-07-06 MEDIUM 6.4 CVE-2022-21776 In MDP, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges… Android Mitigation only Fix from $1,6002022-07-06 HIGH 7.0 CVE-2022-20082 In GPU, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with no additional execution pri… Android Mitigation only Fix from $1,9502022-07-06 MEDIUM 5.9 CVE-2022-30028 Dradis Professional Edition before 4.3.0 allows attackers to change an account password via reusing a password reset token. Dradis 4.3.0+ Fix from $1,6002022-06-24 HIGH 7.0 CVE-2022-33915 Versions of the Amazon AWS Apache Log4j hotpatch package before log4j-cve-2021-44228-hotpatch-1.3.5 are affected by a race condition that could lead … Hotpatch 1.3.5+ Fix from $1,9502022-06-17 HIGH 8.5 CVE-2022-30163 Windows Hyper-V Remote Code Execution Vulnerability Windows 10 Patch available Fix from $1,9502022-06-15 HIGH 7.0 CVE-2022-20141 In ip_check_mc_rcu of igmp.c, there is a possible use after free due to improper locking. This could lead to local escalation of privilege when openi… Android Mitigation only Fix from $1,9502022-06-15 MEDIUM 6.4 CVE-2022-20148 In TBD of TBD, there is a possible use-after-free due to a race condition. This could lead to local escalation of privilege in the kernel with System… Android No fix yet Fix from $1,6002022-06-15 MEDIUM 6.4 CVE-2022-20154 In lock_sock_nested of sock.c, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with Syst… Android Mitigation only Fix from $1,6002022-06-15 HIGH 7.0 CVE-2022-20155 In ipu_core_jqs_msg_transport_kernel_write_sync of ipu-core-jqs-msg-transport.c, there is a possible use-after-free due to a race condition. This cou… Android Mitigation only Fix from $1,9502022-06-15 HIGH 7.8 CVE-2022-22057 Use after free in graphics fence due to a race condition while closing fence file descriptor and destroy graphics timeline simultaneously in Snapdrag… Apq8053 Firmware Patch available Fix from $1,9502022-06-14 MEDIUM 6.4 CVE-2022-26362 x86 pv: Race condition in typeref acquisition Xen maintains a type reference count for pages, in addition to a regular reference count. This scheme i… Fedora Patch available Fix from $1,6002022-06-09 MEDIUM 6.3 CVE-2022-1462 An out-of-bounds read flaw was found in the Linux kernel’s TeleTYpe subsystem. The issue occurs in how a user triggers a race condition using ioctls … Linux Kernel No fix yet Fix from $1,6002022-06-02 HIGH 8.3 CVE-2022-30127 Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability Edge Chromium 102.0.5005.61+ Fix from $1,9502022-06-01 HIGH 8.3 CVE-2022-30128 Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability Edge Chromium 102.0.5005.61+ Fix from $1,9502022-06-01 MEDIUM 5.9 CVE-2022-31015 Waitress is a Web Server Gateway Interface server for Python 2 and 3. Waitress versions 2.1.0 and 2.1.1 may terminate early due to a thread closing a… Waitress 2.1.2+ Fix from $1,6002022-05-31 HIGH 7.5 CVE-2022-26701 A race condition was addressed with improved locking. This issue is fixed in tvOS 15.5, macOS Monterey 12.4, iOS 15.5 and iPadOS 15.5. An application… Ipados 11.6.6 / 12.4+ Fix from $1,9502022-05-26 MEDIUM 5.9 CVE-2021-3597 A flaw was found in undertow. The HTTP2SourceChannel fails to write the final frame under some circumstances, resulting in a denial of service. The h… Fuse 2.0.35 / 2.2.6+ Fix from $1,6002022-05-24 HIGH 7.0 CVE-2021-3922 A race condition vulnerability was reported in IMController, a software component of Lenovo System Interface Foundation, prior to version 1.1.20.3 th… System Interface Foundation 1.1.20.3+ Fix from $1,9502022-05-18 HIGH 7.8 CVE-2022-29113 Windows Digital Media Receiver Elevation of Privilege Vulnerability Windows 10 Patch available Fix from $1,9502022-05-10 HIGH 7.0 CVE-2022-20118 In ion_ioctl and related functions of ion.c, there is a possible use after free due to a race condition. This could lead to local escalation of privi… Android Mitigation only Fix from $1,9502022-05-10 HIGH 7.0 CVE-2022-20006 In several functions of KeyguardServiceWrapper.java and related files,, there is a possible way to briefly view what's under the lockscreen due to a … Android Mitigation only Fix from $1,9502022-05-10 HIGH 7.0 CVE-2022-20007 In startActivityForAttachedApplicationIfNeeded of RootWindowContainer.java, there is a possible way to overlay an app that believes it's still in the… Android Patch available Fix from $1,9502022-05-10 MEDIUM 6.4 CVE-2022-20090 In aee driver, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution pri… Android Mitigation only Fix from $1,6002022-05-03 MEDIUM 6.4 CVE-2022-20091 In aee driver, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution pri… Android Mitigation only Fix from $1,6002022-05-03 HIGH 8.2 CVE-2021-4207 A flaw was found in the QXL display device emulation in QEMU. A double fetch of guest controlled values `cursor->header.width` and `cursor->header.he… Enterprise Linux 7.0.0+ Fix from $1,9502022-04-29 HIGH 7.0 CVE-2022-1048 A use-after-free flaw was found in the Linux kernel’s sound subsystem in the way a user triggers concurrent calls of PCM hw_params. The hw_free ioctl… Linux Kernel 4.14.279 / 4.19.243+ Fix from $1,9502022-04-29