Browse CVEs

MEDIUM 6.4 CVE-2021-39712 In TBD of TBD, there is a possible user after free vulnerability due to a race condition. This could lead to local escalation of privilege with Syste… Android Mitigation only Fix from $1,6002022-03-16 HIGH 7.0 CVE-2021-39713 Product: AndroidVersions: Android kernelAndroid ID: A-173788806References: Upstream kernel Debian Linux Patch available Fix from $1,9502022-03-16 HIGH 7.0 CVE-2021-39686 In several functions of binder.c, there is a possible way to represent the wrong domain to SELinux due to a race condition. This could lead to local … Android Patch available Fix from $1,9502022-03-16 HIGH 7.4 CVE-2022-24751 Zulip is an open source group chat application. Starting with version 4.0 and prior to version 4.11, Zulip is vulnerable to a race condition during a… Zulip 4.11+ Fix from $1,9502022-03-16 HIGH 7.0 CVE-2022-23036 Linux PV device frontends vulnerable to attacks by backends T[his CNA information record relates to multiple CVEs; the text explains which aspects/vu… Debian Linux Mitigation only Fix from $1,9502022-03-10 HIGH 7.0 CVE-2022-23037 Linux PV device frontends vulnerable to attacks by backends T[his CNA information record relates to multiple CVEs; the text explains which aspects/vu… Debian Linux Mitigation only Fix from $1,9502022-03-10 HIGH 7.0 CVE-2022-23038 Linux PV device frontends vulnerable to attacks by backends T[his CNA information record relates to multiple CVEs; the text explains which aspects/vu… Debian Linux Mitigation only Fix from $1,9502022-03-10 HIGH 7.0 CVE-2022-23039 Linux PV device frontends vulnerable to attacks by backends T[his CNA information record relates to multiple CVEs; the text explains which aspects/vu… Debian Linux Mitigation only Fix from $1,9502022-03-10 HIGH 7.0 CVE-2022-23040 Linux PV device frontends vulnerable to attacks by backends T[his CNA information record relates to multiple CVEs; the text explains which aspects/vu… Debian Linux Mitigation only Fix from $1,9502022-03-10 HIGH 7.0 CVE-2022-23041 Linux PV device frontends vulnerable to attacks by backends T[his CNA information record relates to multiple CVEs; the text explains which aspects/vu… Debian Linux Mitigation only Fix from $1,9502022-03-10 HIGH 7.0 CVE-2022-23042 Linux PV device frontends vulnerable to attacks by backends T[his CNA information record relates to multiple CVEs; the text explains which aspects/vu… Debian Linux Mitigation only Fix from $1,9502022-03-10 MEDIUM 6.2 CVE-2022-25822 An use after free vulnerability in sdp driver prior to SMR Mar-2022 Release 1 allows kernel crash. Android Mitigation only Fix from $1,6002022-03-10 HIGH 8.1 CVE-2022-25090EPSS 11% Printix Secure Cloud Print Management through 1.3.1106.0 creates a temporary temp.ini file in a directory with insecure permissions, leading to privi… Printix after 1.3.1106.0 Fix from $1,9502022-03-10 HIGH 7.0 CVE-2022-24525 Windows Update Stack Elevation of Privilege Vulnerability Windows 10 Mitigation only Fix from $1,9502022-03-09 HIGH 7.0 CVE-2022-24505 Windows ALPC Elevation of Privilege Vulnerability Windows 10 No fix yet Fix from $1,9502022-03-09 HIGH 7.0 CVE-2022-23283 Windows ALPC Elevation of Privilege Vulnerability Windows 10 Mitigation only Fix from $1,9502022-03-09 HIGH 7.0 CVE-2021-3640 A flaw use-after-free in function sco_sock_sendmsg() of the Linux kernel HCI subsystem was found in the way user calls ioct UFFDIO_REGISTER or other … Linux Kernel 4.4.293 / 4.9.291+ Fix from $1,9502022-03-03 HIGH 7.0 CVE-2021-3609 .A flaw was found in the CAN BCM networking protocol in the Linux kernel, where a local attacker can abuse a flaw in the CAN subsystem to corrupt mem… Linux Kernel 4.4.276 / 4.9.276+ Fix from $1,9502022-03-03 HIGH 7.8 CVE-2022-24986 KDE KCron through 21.12.2 uses a temporary file in /tmp when saving, but reuses the filename during an editing session. Thus, someone watching it be … Kcron after 21.12.2 Fix from $1,9502022-02-26 HIGH 7.2 CVE-2020-25719 A flaw was found in the way Samba, as an Active Directory Domain Controller, implemented Kerberos name-based authentication. The Samba AD DC, could b… Debian Linux Patch available Fix from $1,9502022-02-18 HIGH 7.8 CVE-2021-44731 A race condition existed in the snapd 2.54.2 snap-confine binary when preparing a private mount namespace for a snap. This could allow a local attack… Snapd after 2.54.2 Fix from $1,9502022-02-17 HIGH 7.1 CVE-2021-3752 A use-after-free flaw was found in the Linux kernel’s Bluetooth subsystem in the way user calls connect to the socket and disconnect simultaneously d… Linux Kernel 4.4.293 / 4.9.291+ Fix from $1,9502022-02-16 HIGH 8.1 CVE-2022-23639 crossbeam-utils provides atomics, synchronization primitives, scoped threads, and other utilities for concurrent programming in Rust. crossbeam-utils… Crossbeam 0.8.7+ Fix from $1,9502022-02-15 MEDIUM 5.9 CVE-2022-24686 HashiCorp Nomad and Nomad Enterprise 0.3.0 through 1.0.17, 1.1.11, and 1.2.5 artifact download functionality has a race condition such that the Nomad… Nomad 1.0.18 / 1.1.12+ Fix from $1,6002022-02-14 HIGH 7.0 CVE-2022-24114 Local privilege escalation due to race condition on application startup. The following products are affected: Acronis Cyber Protect Home Office (macO… True Image Mitigation only Fix from $1,9502022-02-04 HIGH 7.0 CVE-2021-4083 A read-after-free memory flaw was found in the Linux kernel's garbage collection for Unix domain socket file handlers in the way users call close() a… Linux Kernel 4.4.294 / 4.9.292+ Fix from $1,9502022-01-18 HIGH 7.0 CVE-2021-39629 In phTmlNfc_Init and phTmlNfc_CleanUp of phTmlNfc.cc, there is a possible use after free due to a race condition. This could lead to local escalation… Android Mitigation only Fix from $1,9502022-01-14 HIGH 7.0 CVE-2021-39679 In init of vendor_graphicbuffer_meta.cpp, there is a possible use after free due to a race condition. This could lead to local escalation of privileg… Android Mitigation only Fix from $1,9502022-01-14 MEDIUM 6.4 CVE-2021-30313 Use after free condition can occur in wired connectivity due to a race condition while creating and deleting folders in Snapdragon Auto, Snapdragon C… Apq8096au Firmware Patch available Fix from $1,6002022-01-13 HIGH 7.0 CVE-2022-21896 Windows DWM Core Library Elevation of Privilege Vulnerability Windows 10 No fix yet Fix from $1,9502022-01-11