Vulnerability index

Browse CVEs

810 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Filtering by weakness Double FreeCWE-415 × clear
Hnswlib MEDIUM 6.5
CVE-2023-37365

Hnswlib 0.7.0 has a double free in init_index when the M argument is a large integer.

No fix yet
Fix from $1,600 2023-06-30
Libwebp HIGH 7.5
CVE-2023-1999

There exists a use after free/double free in libwebp. An attacker can use the ApplyFiltersAndEncode() function and loop through to free best.bw and a…

Fix: 1.3.1+
Fix from $1,950 2023-06-20
Linux Kernel HIGH 7.5
CVE-2023-3312

A vulnerability was found in drivers/cpufreq/qcom-cpufreq-hw.c in cpufreq subsystem in the Linux Kernel. This flaw, during device unbind will lead to…

Fix: 6.2.15 / 6.3.2+
Fix from $1,950 2023-06-19
Libressl CRITICAL 9.8
CVE-2023-35784

A double free or use after free could occur after SSL_clear in OpenBSD 7.2 before errata 026 and 7.3 before errata 004, and in LibreSSL before 3.6.3 …

Fix: 3.6.3 / 3.7.3+
Fix from $2,300 2023-06-16
Office HIGH 7.8
CVE-2023-33137

Microsoft Excel Remote Code Execution Vulnerability

Patch available
Fix from $1,950 2023-06-14
Windows 10 21h2 HIGH 7.8
CVE-2023-29366

Windows Geolocation Service Remote Code Execution Vulnerability

Fix: 10.0.19044.3087 / 10.0.19045.3087+
Fix from $1,950 2023-06-14
Windows 10 1507 HIGH 7.0
CVE-2023-29368

Windows Filtering Platform Elevation of Privilege Vulnerability

Fix: 10.0.10240.19983 / 10.0.14393.5989+
Fix from $1,950 2023-06-14
315 5g Iot Modem Firmware HIGH 7.8
CVE-2022-40507

Memory corruption due to double free in Core while mapping HLOS address to the list.

No fix yet
Fix from $1,950 2023-06-06
Csr8811 Firmware HIGH 7.8
CVE-2022-40522

Memory corruption in Linux Networking due to double free while handling a hyp-assign.

Mitigation only
Fix from $1,950 2023-06-06
Aqt1000 Firmware HIGH 7.8
CVE-2022-33227

Memory corruption in Linux android due to double free while calling unregister provider after register call.

Mitigation only
Fix from $1,950 2023-06-06
Aqt1000 Firmware HIGH 7.8
CVE-2022-33307

Memory Corruption due to double free in automotive when a bad HLOS address for one of the lists to be mapped is passed.

Mitigation only
Fix from $1,950 2023-06-06
Android HIGH 7.8
CVE-2023-21106

In adreno_set_param of adreno_gpu.c, there is a possible memory corruption due to a double free. This could lead to local escalation of privilege wit…

Patch available
Fix from $1,950 2023-05-15
Server System D50tnp1mhcrlc Firmware MEDIUM 5.5
CVE-2023-28411

Double free in some Intel(R) Server Board BMC firmware before version 2.90 may allow a privileged user to enable information disclosure via local acc…

Fix: 2.90+
Fix from $1,600 2023-05-10
Windows 10 1507 HIGH 8.1
CVE-2023-24903

Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability

Fix: 10.0.10240.19926 / 10.0.14393.5921+
Fix from $1,950 2023-05-09
Android MEDIUM 5.5
CVE-2023-21500

Double free validation vulnerability in setPinPadImages in mPOS TUI trustlet prior to SMR May-2023 Release 1 allows local attackers to access the tru…

Mitigation only
Fix from $1,600 2023-05-04
Debian Linux MEDIUM 6.5
CVE-2023-29469

An issue was discovered in libxml2 before 2.10.4. When hashing empty dict strings in a crafted XML document, xmlDictComputeFastKey in dict.c can prod…

Fix: 2.10.4+
Fix from $1,600 2023-04-24
8998 Firmware HIGH 7.8
CVE-2022-33231

Memory corruption due to double free in core while initializing the encryption key.

Mitigation only
Fix from $1,950 2023-04-13
Visual Studio 2017 HIGH 7.8
CVE-2023-28296

Visual Studio Remote Code Execution Vulnerability

Fix: 15.9.54 / 16.11.26+
Fix from $1,950 2023-04-11
Linux Kernel HIGH 7.8
CVE-2023-28464

hci_conn_cleanup in net/bluetooth/hci_conn.c in the Linux kernel through 6.2.9 has a use-after-free (observed in hci_conn_hash_flush) because of call…

Patch available
Fix from $1,950 2023-03-31
Linux Kernel HIGH 7.8
CVE-2022-4744

A double-free flaw was found in the Linux kernel’s TUN/TAP device driver functionality in how a user registers the device when the register_netdevice…

Fix: 5.10.136 / 5.15.12+
Fix from $1,950 2023-03-30
Libcurl MEDIUM 5.9
CVE-2023-27537

A double free vulnerability exists in libcurl <8.0.0 when sharing HSTS data between separate "handles". This sharing was introduced without considera…

No fix yet
Fix from $1,600 2023-03-30
Tensorflow HIGH 7.8
CVE-2023-25801

TensorFlow is an open source machine learning platform. Prior to versions 2.12.0 and 2.11.1, `nn_ops.fractional_avg_pool_v2` and `nn_ops.fractional_m…

Fix: 2.12.0+
Fix from $1,950 2023-03-25
Android HIGH 7.8
CVE-2023-21030

In Confirmation of keystore_cli_v2.cpp, there is a possible way to corrupt memory due to a double free. This could lead to local escalation of privil…

Patch available
Fix from $1,950 2023-03-24
Gpac HIGH 7.8
CVE-2023-1449

A vulnerability has been found in GPAC 2.3-DEV-rev35-gbbca86917-master and classified as problematic. This vulnerability affects the function gf_av1_…

Patch available
Fix from $1,950 2023-03-17
Windows 10 1507 HIGH 7.8
CVE-2023-23402

Windows Media Remote Code Execution Vulnerability

Fix: 10.0.10240.19805 / 10.0.14393.5786+
Fix from $1,950 2023-03-14
Apq8009 Firmware CRITICAL 9.8
CVE-2022-40515

Memory corruption in Video due to double free while playing 3gp clip with invalid metadata atoms.

Mitigation only
Fix from $2,300 2023-03-10
Linux Kernel MEDIUM 5.5
CVE-2022-3707

A double-free memory flaw was found in the Linux kernel. The Intel GVT-g graphics driver triggers VGA card system resource overload, causing a fail i…

Fix: 6.1+
Fix from $1,600 2023-03-06
Fedora HIGH 7.2
CVE-2023-27320

Sudo before 1.9.13p2 has a double free in the per-command chroot feature.

Fix: 1.9.13+
Fix from $1,950 2023-02-28
Clamav HIGH 7.5
CVE-2022-20803

A vulnerability in the OLE2 file parser of Clam AntiVirus (ClamAV) versions 0.104.0 through 0.104.2 could allow an unauthenticated, remote attacker t…

Fix: 0.104.3+
Fix from $1,950 2023-02-17
Fortiweb HIGH 7.8
CVE-2022-40683

A double free in Fortinet FortiWeb version 7.0.0 through 7.0.3 may allows attacker to execute unauthorized code or commands via specially crafted com…

Fix: after 7.0.3
Fix from $1,950 2023-02-16