Browse CVEs

HIGH 7.5 CVE-2020-25581 In FreeBSD 12.2-STABLE before r369312, 11.4-STABLE before r369313, 12.2-RELEASE before p4 and 11.4-RELEASE before p8 due to a race condition in the j… FreeBSD Mitigation only Fix from $1,9502021-03-26 HIGH 8.7 CVE-2020-25582 In FreeBSD 12.2-STABLE before r369334, 11.4-STABLE before r369335, 12.2-RELEASE before p4 and 11.4-RELEASE before p8 when a process, such as jexec(8)… FreeBSD Mitigation only Fix from $1,9502021-03-26 MEDIUM 6.3 CVE-2021-20197 There is an open race window when writing output in the following utilities in GNU binutils version 2.35 and earlier:ar, objcopy, strip, ranlib. When… Enterprise Linux after 2.35 Fix from $1,6002021-03-26 HIGH 8.1 CVE-2021-26569 Race Condition within a Thread vulnerability in iscsi_snapshot_comm_core in Synology DiskStation Manager (DSM) before 6.2.3-25426-3 allows remote att… Diskstation Manager 6.2.3-25426-3+ Fix from $1,9502021-03-12 MEDIUM 6.4 CVE-2021-20261 A race condition was found in the Linux kernels implementation of the floppy disk drive controller driver software. The impact of this issue is lesse… Linux Kernel 4.5+ Fix from $1,6002021-03-11 MEDIUM 6.4 CVE-2021-0387 In FindQuotaDeviceForUuid of QuotaUtils.cpp, there is a possible use-after-free due to a race condition. This could lead to local escalation of privi… Android Patch available Fix from $1,6002021-03-10 HIGH 8.8 CVE-2021-21165 Data race in audio in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chrome 89.0.4389.72+ Fix from $1,9502021-03-09 HIGH 8.8 CVE-2021-21166 KEVEPSS 24% Data race in audio in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chrome 89.0.4389.72+ Fix from $1,9502021-03-09 MEDIUM 6.4 CVE-2021-0366 In vpu, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with System execution privile… Android Mitigation only Fix from $1,6002021-02-26 MEDIUM 6.4 CVE-2021-0367 In vpu, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with System execution privile… Android Mitigation only Fix from $1,6002021-02-26 MEDIUM 6.4 CVE-2021-0401 In vow, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with System execution privile… Android Mitigation only Fix from $1,6002021-02-26 HIGH 7.4 CVE-2020-11277 Possible race condition during async fastrpc session after sending RPC message due to the fastrpc ctx gets free during async session in Snapdragon Co… Pm3003a Firmware Mitigation only Fix from $1,9502021-02-22 HIGH 7.5 CVE-2021-22974 On BIG-IP version 16.0.x before 16.0.1.1, 15.1.x before 15.1.2, 14.1.x before 14.1.3.1, and 13.1.x before 13.1.3.6 and all versions of BIG-IQ 7.x and… Big Ip Access Policy Manager 13.1.3.5 / 13.1.3.6+ Fix from $1,9502021-02-12 HIGH 7.8 CVE-2021-21117 Insufficient policy enforcement in Cryptohome in Google Chrome prior to 88.0.4324.96 allowed a local attacker to perform OS-level privilege escalatio… Chrome 88.0.4324.96+ Fix from $1,9502021-02-09 HIGH 7.0 CVE-2021-3348 nbd_add_socket in drivers/block/nbd.c in the Linux kernel through 5.10.12 has an ndb_queue_rq use-after-free that could be triggered by local attacke… Linux Kernel after 5.10.12 Fix from $1,9502021-02-01 MEDIUM 6.4 CVE-2020-11151 Race condition occurs while calling user space ioctl from two different threads can results to use after free issue in video in Snapdragon Auto, Snap… Pm3003a Patch available Fix from $1,6002021-01-21 MEDIUM 6.4 CVE-2020-11152 Race condition in HAL layer while processing callback objects received from HIDL due to lack of synchronization between accessing objects in Snapdrag… Apq8009w Patch available Fix from $1,6002021-01-21 HIGH 7.0 CVE-2020-25533 An issue was discovered in Malwarebytes before 4.0 on macOS. A malicious application was able to perform a privileged action within the Malwarebytes … Malwarebytes 4.0+ Fix from $1,9502021-01-15 HIGH 7.0 CVE-2021-0303 In dispatchGraphTerminationMessage() of packages/services/Car/computepipe/runner/graph/StreamSetObserver.cpp, there is a possible use after free due … Android Mitigation only Fix from $1,9502021-01-11 HIGH 7.0 CVE-2020-17534 There exists a race condition between the deletion of the temporary file and the creation of the temporary directory in `webkit` subproject of HTML/J… Html\/java Api Mitigation only Fix from $1,9502021-01-11 HIGH 7.5 CVE-2020-16021 Race in image burner in Google Chrome on ChromeOS prior to 87.0.4280.66 allowed a remote attacker who had compromised the browser process to perform … Chrome 87.0.4280.66+ Fix from $1,9502021-01-08 MEDIUM 6.3 CVE-2021-1061 NVIDIA vGPU manager contains a vulnerability in the vGPU plugin, in which a race condition may cause the vGPU plugin to continue using a previously v… Virtual Gpu Manager 8.6 / 11.3+ Fix from $1,6002021-01-08 HIGH 8.1 CVE-2018-20313 Foxit Reader before 9.5, and PhantomPDF before 8.3.10 and 9.x before 9.5, has a proxyPreviewAction race condition that can cause a stack-based buffer… Phantompdf 8.3.10 / 9.5+ Fix from $1,9502021-01-07 HIGH 8.1 CVE-2018-20314 Foxit Reader before 9.5, and PhantomPDF before 8.3.10 and 9.x before 9.5, has a proxyCheckLicence race condition that can cause a stack-based buffer … Phantompdf 8.3.10 / 9.5+ Fix from $1,9502021-01-07 HIGH 8.1 CVE-2018-20315 Foxit Reader before 9.5, and PhantomPDF before 8.3.10 and 9.x before 9.5, has a race condition that can cause a stack-based buffer overflow or an out… Phantompdf 8.3.10 / 9.5+ Fix from $1,9502021-01-07 HIGH 8.1 CVE-2018-20316 Foxit Reader before 9.5, and PhantomPDF before 8.3.10 and 9.x before 9.5, has a proxyDoAction race condition that can cause a stack-based buffer over… Phantompdf 8.3.10 / 9.5+ Fix from $1,9502021-01-07 HIGH 8.1 CVE-2018-20309 Foxit Reader before 9.5, and PhantomPDF before 8.3.10 and 9.x before 9.5, has a proxyGetAppEdition race condition that can cause a stack-based buffer… Phantompdf 8.3.10 / 9.5+ Fix from $1,9502021-01-07 HIGH 8.1 CVE-2018-20310 Foxit Reader before 9.5, and PhantomPDF before 8.3.10 and 9.x before 9.5, has a proxyDoAction race condition that can cause a stack-based buffer over… Phantompdf 8.3.10 / 9.5+ Fix from $1,9502021-01-07 HIGH 8.1 CVE-2018-20311 Foxit Reader before 9.5, and PhantomPDF before 8.3.10 and 9.x before 9.5, has a proxyCPDFAction race condition that can cause a stack-based buffer ov… Phantompdf 8.3.10 / 9.5+ Fix from $1,9502021-01-07 HIGH 8.1 CVE-2018-20312 Foxit Reader before 9.5, and PhantomPDF before 8.3.10 and 9.x before 9.5, has a proxyDoAction race condition that can cause a stack-based buffer over… Phantompdf 8.3.10 / 9.5+ Fix from $1,9502021-01-07