Browse CVEs

HIGH 7.0 CVE-2021-39679 In init of vendor_graphicbuffer_meta.cpp, there is a possible use after free due to a race condition. This could lead to local escalation of privileg… Android Mitigation only Fix from $1,9502022-01-14 MEDIUM 6.4 CVE-2021-30313 Use after free condition can occur in wired connectivity due to a race condition while creating and deleting folders in Snapdragon Auto, Snapdragon C… Apq8096au Firmware Patch available Fix from $1,6002022-01-13 HIGH 7.0 CVE-2022-21896 Windows DWM Core Library Elevation of Privilege Vulnerability Windows 10 No fix yet Fix from $1,9502022-01-11 HIGH 7.0 CVE-2022-21881EPSS 25% Windows Kernel Elevation of Privilege Vulnerability Windows 10 No fix yet Fix from $1,9502022-01-11 HIGH 8.1 CVE-2021-37134 Location-related APIs exists a Race Condition vulnerability.Successful exploitation of this vulnerability may use Higher Permissions for invoking the… Harmonyos 2.0+ Fix from $1,9502022-01-03 HIGH 8.1 CVE-2021-45710 An issue was discovered in the tokio crate before 1.8.4, and 1.9.x through 1.13.x before 1.13.1, for Rust. In certain circumstances involving a close… Tokio 1.8.4 / 1.13.1+ Fix from $1,9502021-12-27 HIGH 8.1 CVE-2021-45704 An issue was discovered in the metrics-util crate before 0.7.0 for Rust. There is a data race and memory corruption because AtomicBucket<T> unconditi… Metrics Util 0.7.0+ Fix from $1,9502021-12-27 HIGH 8.1 CVE-2017-13905 A race condition was addressed with additional validation. This issue is fixed in tvOS 11.2, iOS 11.2, macOS High Sierra 10.13.2, Security Update 201… Iphone Os 4.2 / 10.11.6+ Fix from $1,9502021-12-23 HIGH 7.0 CVE-2021-44733 A use-after-free exists in drivers/tee/tee_shm.c in the TEE subsystem in the Linux kernel through 5.15.11. This occurs because of a race condition in… Linux Kernel 4.14.261 / 4.19.224+ Fix from $1,9502021-12-22 MEDIUM 5.9 CVE-2020-35216 An issue in Atomix v3.1.5 allows attackers to cause a denial of service (DoS) via false member down event messages. Atomix Mitigation only Fix from $1,6002021-12-16 MEDIUM 6.4 CVE-2021-39642 In synchronous_process_io_entries of lwis_ioctl.c, there is a possible out of bounds write due to a race condition. This could lead to local escalati… Android Patch available Fix from $1,6002021-12-15 MEDIUM 6.4 CVE-2021-0920 KEV In unix_scm_to_skb of af_unix.c, there is a possible use after free bug due to a race condition. This could lead to local escalation of privilege wit… Linux Kernel after 5.13 Fix from $1,6002021-12-15 HIGH 7.0 CVE-2021-0955 In pf_write_buf of FuseDaemon.cpp, there is possible memory corruption due to a race condition. This could lead to local escalation of privilege with… Android Mitigation only Fix from $1,9502021-12-15 CRITICAL 9.8 CVE-2021-41025 Multiple vulnerabilities in the authentication mechanism of confd in FortiWeb versions 6.4.1, 6.4.0, 6.3.0 through 6.3.15, 6.2.0 through 6.2.6, 6.1.0… Fortiweb after 6.3.15 Fix from $2,3002021-12-08 HIGH 7.4 CVE-2021-37069 There is a Race Condition vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to availability affected. Harmonyos 2.0+ Fix from $1,9502021-12-08 HIGH 8.1 CVE-2021-37074 There is a Race Condition vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to the user root privilege escala… Harmonyos 2.0+ Fix from $1,9502021-12-08 MEDIUM 5.9 CVE-2021-37082 There is a Race Condition vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to motionhub crash. Harmonyos 2.0+ Fix from $1,6002021-12-07 MEDIUM 5.9 CVE-2021-37085 There is a Encoding timing vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to denial of service. Harmonyos 2.0+ Fix from $1,6002021-12-07 HIGH 7.0 CVE-2021-44513 Insecure creation of temporary directories in tmate-ssh-server 2.3.0 allows a local attacker to compromise the integrity of session handling. Tmate Ssh Server after 2.3.0 Fix from $1,9502021-12-07 HIGH 7.0 CVE-2020-12951 Race condition in ASP firmware could allow less privileged x86 code to perform ASP SMM (System Management Mode) operations. Epyc 7003 Firmware Mitigation only Fix from $1,9502021-11-16 HIGH 7.5 CVE-2021-43411 An issue was discovered in GNU Hurd before 0.9 20210404-9. When trying to exec a setuid executable, there's a window of time when the process already… Hurd 0.9.20210404-9+ Fix from $1,9502021-11-07 HIGH 7.5 CVE-2021-37991 Race in V8 in Google Chrome prior to 95.0.4638.54 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chrome 95.0.4638.54+ Fix from $1,9502021-11-02 HIGH 7.0 CVE-2021-36808 A local attacker could bypass the app password using a race condition in Sophos Secure Workspace for Android before version 9.7.3115. Sophos Secure Workspace 9.7.3115+ Fix from $1,9502021-10-30 MEDIUM 5.9 CVE-2021-36987 There is a issue that nodes in the linked list being freed for multiple times in Huawei Smartphone due to race conditions. Successful exploitation of… Emui Mitigation only Fix from $1,6002021-10-28 HIGH 7.8 CVE-2021-0652 In VectorDrawable::VectorDrawable of VectorDrawable.java, there is a possible way to introduce a memory corruption due to sharing of not thread-safe … Android Patch available Fix from $1,9502021-10-22 HIGH 8.1 CVE-2021-0870EPSS 7% In RW_SetActivatedTagType of rw_main.cc, there is possible memory corruption due to a race condition. This could lead to remote code execution with n… Android Patch available Fix from $1,9502021-10-22 HIGH 7.8 CVE-2021-0483 In multiple methods of AAudioService, there is a possible use-after-free due to a race condition. This could lead to local escalation of privilege wi… Android Patch available Fix from $1,9502021-10-22 CRITICAL 9.0 CVE-2021-31382 On PTX1000 System, PTX10002-60C System, after upgrading to an affected release, a Race Condition vulnerability between the chassis daemon (chassisd) … Junos Mitigation only Fix from $2,3002021-10-19 MEDIUM 5.9 CVE-2021-31364 An Improper Check for Unusual or Exceptional Conditions vulnerability combined with a Race Condition in the flow daemon (flowd) of Juniper Networks J… Junos Patch available Fix from $1,6002021-10-19 HIGH 7.5 CVE-2020-29622 A race condition was addressed with additional validation. This issue is fixed in Security Update 2021-005 Catalina. Mounting a maliciously crafted N… Mac Os X after 10.15.6 Fix from $1,9502021-10-19