Browse CVEs

HIGH 7.8 CVE-2024-43463 Microsoft Office Visio Remote Code Execution Vulnerability 365 Apps Patch available Fix from $1,9502024-09-10 HIGH 8.8 CVE-2024-38259 Microsoft Management Console Remote Code Execution Vulnerability Windows 11 21h2 10.0.20348.2700 / 10.0.22000.3197+ Fix from $1,9502024-09-10 HIGH 7.8 CVE-2024-38249 Windows Graphics Component Elevation of Privilege Vulnerability Windows 10 1507 10.0.10240.20766 / 10.0.14393.7336+ Fix from $1,9502024-09-10 HIGH 7.8 CVE-2024-38252 Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability Windows 10 1607 10.0.14393.7336 / 10.0.17763.6293+ Fix from $1,9502024-09-10 HIGH 7.8 CVE-2024-38253 Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability Windows 11 21h2 10.0.22000.3197 / 10.0.22621.4169+ Fix from $1,9502024-09-10 HIGH 7.0 CVE-2024-38248 Windows Storage Elevation of Privilege Vulnerability Windows 10 21h2 10.0.19044.4894 / 10.0.19045.4894+ Fix from $1,9502024-09-10 MEDIUM 6.5 CVE-2024-38235 Windows Hyper-V Denial of Service Vulnerability Windows 10 1507 10.0.10240.20766 / 10.0.14393.7336+ Fix from $1,6002024-09-10 HIGH 7.5 CVE-2024-38119 Windows Network Address Translation (NAT) Remote Code Execution Vulnerability Windows 10 1507 10.0.10240.20766 / 10.0.14393.7336+ Fix from $1,9502024-09-10 HIGH 8.8 CVE-2024-26186 Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability Sql 2016 Azure Connect Feature Pack 13.0.6441.1 / 14.0.2060.1+ Fix from $1,9502024-09-10 HIGH 7.8 CVE-2024-31960 An issue was discovered in Samsung Mobile Processor Exynos 1480, Exynos 2400. The xclipse amdgpu driver has a reference count bug. This can lead to a… Exynos 1480 Firmware Mitigation only Fix from $1,9502024-09-10 MEDIUM 6.5 CVE-2024-8394 When aborting the verification of an OTR chat session, an attacker could have caused a use-after-free bug leading to a potentially exploitable crash.… Thunderbird 128.2.0+ Fix from $1,6002024-09-06 MEDIUM 5.5 CVE-2024-45107 Acrobat Reader versions 20.005.30636, 24.002.20964, 24.001.30123, 24.002.20991 and earlier are affected by a Use After Free vulnerability that could … Acrobat 20.005.30655 / 24.001.30159+ Fix from $1,6002024-09-05 CRITICAL 10.0 CVE-2024-43102 Concurrent removals of certain anonymous shared memory mappings by using the UMTX_SHM_DESTROY sub-request of UMTX_OP_SHM can lead to decreasing the r… FreeBSD 13.3+ Fix from $2,3002024-09-05 HIGH 8.8 CVE-2024-45063 The function ctl_write_buffer incorrectly set a flag which resulted in a kernel Use-After-Free when a command finished processing. Malicious softwar… FreeBSD 13.3+ Fix from $1,9502024-09-05 HIGH 7.8 CVE-2024-44997 In the Linux kernel, the following vulnerability has been resolved: net: ethernet: mtk_wed: fix use-after-free panic in mtk_wed_setup_tc_block_cb() … Linux Kernel 6.6.48 / 6.10.7+ Fix from $1,9502024-09-04 HIGH 7.8 CVE-2024-44998 In the Linux kernel, the following vulnerability has been resolved: atm: idt77252: prevent use after free in dequeue_rx() We can't dereference "skb… Linux Kernel 4.19.321 / 5.4.283+ Fix from $1,9502024-09-04 HIGH 7.8 CVE-2024-44974 In the Linux kernel, the following vulnerability has been resolved: mptcp: pm: avoid possible UaF when selecting endp select_local_address() and se… Debian Linux 5.10.226 / 5.15.167+ Fix from $1,9502024-09-04 HIGH 7.8 CVE-2024-44978 In the Linux kernel, the following vulnerability has been resolved: drm/xe: Free job before xe_exec_queue_put Free job depends on job->vm being val… Linux Kernel 6.10.7+ Fix from $1,9502024-09-04 HIGH 7.8 CVE-2024-44985 In the Linux kernel, the following vulnerability has been resolved: ipv6: prevent possible UAF in ip6_xmit() If skb_expand_head() returns NULL, skb… Linux Kernel 5.15.166 / 6.1.107+ Fix from $1,9502024-09-04 HIGH 7.8 CVE-2024-44986 In the Linux kernel, the following vulnerability has been resolved: ipv6: fix possible UAF in ip6_finish_output2() If skb_expand_head() returns NUL… Debian Linux 5.4.289 / 5.10.233+ Fix from $1,9502024-09-04 HIGH 7.8 CVE-2024-44987 In the Linux kernel, the following vulnerability has been resolved: ipv6: prevent UAF in ip6_send_skb() syzbot reported an UAF in ip6_send_skb() [1… Linux Kernel 4.19.321 / 5.4.283+ Fix from $1,9502024-09-04 HIGH 7.8 CVE-2024-44964 In the Linux kernel, the following vulnerability has been resolved: idpf: fix memory leaks and crashes while performing a soft reset The second tag… Linux Kernel 6.10.5+ Fix from $1,9502024-09-04 HIGH 8.8 CVE-2024-8362 Use after free in WebAudio in Google Chrome prior to 128.0.6613.119 allowed a remote attacker to potentially exploit heap corruption via a crafted HT… Chrome 128.0.6613.119+ Fix from $1,9502024-09-03 CRITICAL 9.8 CVE-2024-8384 The JavaScript garbage collector could mis-color cross-compartment objects if OOM conditions were detected at the right point between two passes. Thi… Firefox 115.15 / 128.2+ Fix from $2,3002024-09-03 HIGH 7.8 CVE-2024-3655 Use After Free vulnerability in Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Dri… 5th Gen Gpu Architecture Kernel Driver Mitigation only Fix from $1,9502024-09-03 HIGH 7.8 CVE-2024-38402 Memory corruption while processing IOCTL call for getting group info. Ar8035 Firmware Patch available Fix from $1,9502024-09-02 HIGH 7.8 CVE-2024-33060 Memory corruption when two threads try to map and unmap a single node simultaneously. 315 5g Iot Firmware Patch available Fix from $1,9502024-09-02 HIGH 7.8 CVE-2024-38401 Memory corruption while processing concurrent IOCTL calls. Ar8035 Firmware Patch available Fix from $1,9502024-09-02 HIGH 8.4 CVE-2024-23365 Memory corruption while releasing shared resources in MinkSocket listener thread. Qamsrv1m Firmware Mitigation only Fix from $1,9502024-09-02 HIGH 7.8 CVE-2024-41157 in OpenHarmony v4.1.0 and prior versions allow a local attacker cause the common permission is upgraded to root and sensitive information leak throug… Openharmony after 4.1 Fix from $1,9502024-09-02