Browse CVEs

MEDIUM 6.5 CVE-2023-37365 Hnswlib 0.7.0 has a double free in init_index when the M argument is a large integer. Hnswlib No fix yet Fix from $1,6002023-06-30 HIGH 7.5 CVE-2023-1999 There exists a use after free/double free in libwebp. An attacker can use the ApplyFiltersAndEncode() function and loop through to free best.bw and a… Libwebp 1.3.1+ Fix from $1,9502023-06-20 HIGH 7.5 CVE-2023-3312 A vulnerability was found in drivers/cpufreq/qcom-cpufreq-hw.c in cpufreq subsystem in the Linux Kernel. This flaw, during device unbind will lead to… Linux Kernel 6.2.15 / 6.3.2+ Fix from $1,9502023-06-19 CRITICAL 9.8 CVE-2023-35784 A double free or use after free could occur after SSL_clear in OpenBSD 7.2 before errata 026 and 7.3 before errata 004, and in LibreSSL before 3.6.3 … Libressl 3.6.3 / 3.7.3+ Fix from $2,3002023-06-16 HIGH 7.8 CVE-2023-33137 Microsoft Excel Remote Code Execution Vulnerability Office Patch available Fix from $1,9502023-06-14 HIGH 7.8 CVE-2023-29366 Windows Geolocation Service Remote Code Execution Vulnerability Windows 10 21h2 10.0.19044.3087 / 10.0.19045.3087+ Fix from $1,9502023-06-14 HIGH 7.0 CVE-2023-29368 Windows Filtering Platform Elevation of Privilege Vulnerability Windows 10 1507 10.0.10240.19983 / 10.0.14393.5989+ Fix from $1,9502023-06-14 HIGH 7.8 CVE-2022-40507 Memory corruption due to double free in Core while mapping HLOS address to the list. 315 5g Iot Modem Firmware No fix yet Fix from $1,9502023-06-06 HIGH 7.8 CVE-2022-40522 Memory corruption in Linux Networking due to double free while handling a hyp-assign. Csr8811 Firmware Mitigation only Fix from $1,9502023-06-06 HIGH 7.8 CVE-2022-33227 Memory corruption in Linux android due to double free while calling unregister provider after register call. Aqt1000 Firmware Mitigation only Fix from $1,9502023-06-06 HIGH 7.8 CVE-2022-33307 Memory Corruption due to double free in automotive when a bad HLOS address for one of the lists to be mapped is passed. Aqt1000 Firmware Mitigation only Fix from $1,9502023-06-06 HIGH 7.8 CVE-2023-21106 In adreno_set_param of adreno_gpu.c, there is a possible memory corruption due to a double free. This could lead to local escalation of privilege wit… Android Patch available Fix from $1,9502023-05-15 MEDIUM 5.5 CVE-2023-28411 Double free in some Intel(R) Server Board BMC firmware before version 2.90 may allow a privileged user to enable information disclosure via local acc… Server System D50tnp1mhcrlc Firmware 2.90+ Fix from $1,6002023-05-10 HIGH 8.1 CVE-2023-24903 Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability Windows 10 1507 10.0.10240.19926 / 10.0.14393.5921+ Fix from $1,9502023-05-09 MEDIUM 5.5 CVE-2023-21500 Double free validation vulnerability in setPinPadImages in mPOS TUI trustlet prior to SMR May-2023 Release 1 allows local attackers to access the tru… Android Mitigation only Fix from $1,6002023-05-04 MEDIUM 6.5 CVE-2023-29469 An issue was discovered in libxml2 before 2.10.4. When hashing empty dict strings in a crafted XML document, xmlDictComputeFastKey in dict.c can prod… Debian Linux 2.10.4+ Fix from $1,6002023-04-24 HIGH 7.8 CVE-2022-33231 Memory corruption due to double free in core while initializing the encryption key. 8998 Firmware Mitigation only Fix from $1,9502023-04-13 HIGH 7.8 CVE-2023-28296 Visual Studio Remote Code Execution Vulnerability Visual Studio 2017 15.9.54 / 16.11.26+ Fix from $1,9502023-04-11 HIGH 7.8 CVE-2023-28464 hci_conn_cleanup in net/bluetooth/hci_conn.c in the Linux kernel through 6.2.9 has a use-after-free (observed in hci_conn_hash_flush) because of call… Linux Kernel Patch available Fix from $1,9502023-03-31 HIGH 7.8 CVE-2022-4744 A double-free flaw was found in the Linux kernel’s TUN/TAP device driver functionality in how a user registers the device when the register_netdevice… Linux Kernel 5.10.136 / 5.15.12+ Fix from $1,9502023-03-30 MEDIUM 5.9 CVE-2023-27537 A double free vulnerability exists in libcurl <8.0.0 when sharing HSTS data between separate "handles". This sharing was introduced without considera… Libcurl No fix yet Fix from $1,6002023-03-30 HIGH 7.8 CVE-2023-25801 TensorFlow is an open source machine learning platform. Prior to versions 2.12.0 and 2.11.1, `nn_ops.fractional_avg_pool_v2` and `nn_ops.fractional_m… Tensorflow 2.12.0+ Fix from $1,9502023-03-25 HIGH 7.8 CVE-2023-21030 In Confirmation of keystore_cli_v2.cpp, there is a possible way to corrupt memory due to a double free. This could lead to local escalation of privil… Android Patch available Fix from $1,9502023-03-24 HIGH 7.8 CVE-2023-1449 A vulnerability has been found in GPAC 2.3-DEV-rev35-gbbca86917-master and classified as problematic. This vulnerability affects the function gf_av1_… Gpac Patch available Fix from $1,9502023-03-17 HIGH 7.8 CVE-2023-23402 Windows Media Remote Code Execution Vulnerability Windows 10 1507 10.0.10240.19805 / 10.0.14393.5786+ Fix from $1,9502023-03-14 CRITICAL 9.8 CVE-2022-40515 Memory corruption in Video due to double free while playing 3gp clip with invalid metadata atoms. Apq8009 Firmware Mitigation only Fix from $2,3002023-03-10 MEDIUM 5.5 CVE-2022-3707 A double-free memory flaw was found in the Linux kernel. The Intel GVT-g graphics driver triggers VGA card system resource overload, causing a fail i… Linux Kernel 6.1+ Fix from $1,6002023-03-06 HIGH 7.2 CVE-2023-27320 Sudo before 1.9.13p2 has a double free in the per-command chroot feature. Fedora 1.9.13+ Fix from $1,9502023-02-28 HIGH 7.5 CVE-2022-20803 A vulnerability in the OLE2 file parser of Clam AntiVirus (ClamAV) versions 0.104.0 through 0.104.2 could allow an unauthenticated, remote attacker t… Clamav 0.104.3+ Fix from $1,9502023-02-17 HIGH 7.8 CVE-2022-40683 A double free in Fortinet FortiWeb version 7.0.0 through 7.0.3 may allows attacker to execute unauthorized code or commands via specially crafted com… Fortiweb after 7.0.3 Fix from $1,9502023-02-16