Browse CVEs

MEDIUM 5.5 CVE-2022-1195 A use-after-free vulnerability was found in the Linux kernel in drivers/net/hamradio. This flaw allows a local attacker with a user privilege to caus… Linux Kernel 5.16+ Fix from $1,6002022-04-29 HIGH 7.0 CVE-2022-29582 In the Linux kernel before 5.17.3, fs/io_uring.c has a use-after-free due to a race condition in io_uring timeouts. This can be triggered by a local … Linux Kernel 5.10.111 / 5.15.34+ Fix from $1,9502022-04-22 HIGH 7.0 CVE-2022-29527 Amazon AWS amazon-ssm-agent before 3.1.1208.0 creates a world-writable sudoers file, which allows local attackers to inject Sudo rules and escalate p… Amazon Ssm Agent 3.1.1208.0+ Fix from $1,9502022-04-20 HIGH 7.0 CVE-2022-26904 KEVEPSS 10% Windows User Profile Service Elevation of Privilege Vulnerability Windows 10 1507 10.0.10240.19265 / 10.0.14393.5066+ Fix from $1,9502022-04-15 MEDIUM 6.6 CVE-2022-26819 Windows DNS Server Remote Code Execution Vulnerability Windows Server 2008 No fix yet Fix from $1,6002022-04-15 MEDIUM 6.6 CVE-2022-26820 Windows DNS Server Remote Code Execution Vulnerability Windows Server 2008 Mitigation only Fix from $1,6002022-04-15 MEDIUM 6.6 CVE-2022-26821 Windows DNS Server Remote Code Execution Vulnerability Windows Server 2008 No fix yet Fix from $1,6002022-04-15 MEDIUM 6.6 CVE-2022-26822 Windows DNS Server Remote Code Execution Vulnerability Windows Server 2008 Mitigation only Fix from $1,6002022-04-15 HIGH 7.0 CVE-2022-26827 Windows File Server Resource Management Service Elevation of Privilege Vulnerability Windows 10 Mitigation only Fix from $1,9502022-04-15 HIGH 7.0 CVE-2022-26828 Windows Bluetooth Driver Elevation of Privilege Vulnerability Windows 10 Mitigation only Fix from $1,9502022-04-15 MEDIUM 6.6 CVE-2022-26829 Windows DNS Server Remote Code Execution Vulnerability Windows Server 2008 No fix yet Fix from $1,6002022-04-15 HIGH 7.0 CVE-2022-26807 Windows Work Folder Service Elevation of Privilege Vulnerability Windows 10 No fix yet Fix from $1,9502022-04-15 HIGH 7.0 CVE-2022-26808 Windows File Explorer Elevation of Privilege Vulnerability Windows 10 No fix yet Fix from $1,9502022-04-15 MEDIUM 6.6 CVE-2022-26814 Windows DNS Server Remote Code Execution Vulnerability Windows Server 2012 Mitigation only Fix from $1,6002022-04-15 MEDIUM 6.6 CVE-2022-26817 Windows DNS Server Remote Code Execution Vulnerability Windows Server 2012 No fix yet Fix from $1,6002022-04-15 HIGH 7.8 CVE-2022-24537 Windows Hyper-V Remote Code Execution Vulnerability Windows 10 No fix yet Fix from $1,9502022-04-15 HIGH 7.0 CVE-2022-24540 Windows ALPC Elevation of Privilege Vulnerability Windows 10 No fix yet Fix from $1,9502022-04-15 HIGH 7.0 CVE-2022-24482 Windows ALPC Elevation of Privilege Vulnerability Windows 10 No fix yet Fix from $1,9502022-04-15 HIGH 7.8 CVE-2022-22008 Windows Hyper-V Remote Code Execution Vulnerability Windows 10 Mitigation only Fix from $1,9502022-04-15 MEDIUM 5.3 CVE-2022-20724 Multiple vulnerabilities in the Cisco IOx application hosting environment on multiple Cisco platforms could allow an attacker to inject arbitrary com… Cgr1000 Compute Module No fix yet Fix from $1,6002022-04-15 MEDIUM 5.3 CVE-2022-27481 A vulnerability has been identified in SCALANCE W1788-1 M12 (All versions < V3.0.0), SCALANCE W1788-2 EEC M12 (All versions < V3.0.0), SCALANCE W1788… Scalance W1788 2ia M12 Firmware 3.0.0+ Fix from $1,6002022-04-12 MEDIUM 6.4 CVE-2022-20077 In vow, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with System execution privile… Android No fix yet Fix from $1,6002022-04-11 MEDIUM 6.4 CVE-2022-20078 In vow, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with System execution privile… Android Mitigation only Fix from $1,6002022-04-11 MEDIUM 6.4 CVE-2022-20080 In SUB2AF, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with System execution priv… Android Mitigation only Fix from $1,6002022-04-11 HIGH 7.0 CVE-2022-28796 jbd2_journal_wait_updates in fs/jbd2/transaction.c in the Linux kernel before 5.17.1 has a use-after-free caused by a transaction_t race condition. Linux Kernel 5.17.1+ Fix from $1,9502022-04-08 HIGH 7.0 CVE-2022-26357 race in VT-d domain ID cleanup Xen domain IDs are up to 15 bits wide. VT-d hardware may allow for only less than 15 bits to hold a domain ID associat… Debian Linux 4.12.0 / 4.16.0+ Fix from $1,9502022-04-05 HIGH 7.0 CVE-2021-4202 A use-after-free flaw was found in nci_request in net/nfc/nci/core.c in NFC Controller Interface (NCI) in the Linux kernel. This flaw could allow a l… Linux Kernel 4.4.294 / 4.9.292+ Fix from $1,9502022-03-25 MEDIUM 6.8 CVE-2021-4203 A use-after-free read flaw was found in sock_getsockopt() in net/core/sock.c due to SO_PEERCRED and SO_PEERGROUPS race with listen() (and connect()) … Linux Kernel 5.15+ Fix from $1,6002022-03-25 MEDIUM 5.9 CVE-2022-24302 In Paramiko before 2.10.1, a race condition (between creation and chmod) in the write_private_key_file function could allow unauthorized information … Debian Linux 2.10.1+ Fix from $1,6002022-03-17 MEDIUM 6.4 CVE-2021-39735 In gasket_alloc_coherent_memory of gasket_page_table.c, there is a possible memory corruption due to a race condition. This could lead to local escal… Android Mitigation only Fix from $1,6002022-03-16