Browse CVEs

HIGH 7.8 CVE-2024-41160 in OpenHarmony v4.1.0 and prior versions allow a local attacker cause the common permission is upgraded to root and sensitive information leak throug… Openharmony after 4.1.0 Fix from $1,9502024-09-02 MEDIUM 5.5 CVE-2024-44946 In the Linux kernel, the following vulnerability has been resolved: kcm: Serialise kcm_sendmsg() for the same socket. syzkaller reported UAF in kcm… Linux Kernel 6.1.107 / 6.6.48+ Fix from $1,6002024-08-31 HIGH 7.8 CVE-2024-44941 In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to cover read extent cache access with lock syzbot reports a f2fs bug… Linux Kernel 6.2 / 6.6.47+ Fix from $1,9502024-08-26 HIGH 7.8 CVE-2024-44932 In the Linux kernel, the following vulnerability has been resolved: idpf: fix UAFs when destroying the queues The second tagged commit started some… Linux Kernel 6.10.5+ Fix from $1,9502024-08-26 HIGH 7.8 CVE-2024-44934 In the Linux kernel, the following vulnerability has been resolved: net: bridge: mcast: wait for previous gc cycles when removing port syzbot hit a… Linux Kernel 5.15.165 / 6.1.105+ Fix from $1,9502024-08-26 HIGH 7.8 CVE-2024-43900 In the Linux kernel, the following vulnerability has been resolved: media: xc2028: avoid use-after-free in load_firmware_cb() syzkaller reported us… Linux Kernel 6.1.105 / 6.6.46+ Fix from $1,9502024-08-26 HIGH 7.8 CVE-2024-43888 In the Linux kernel, the following vulnerability has been resolved: mm: list_lru: fix UAF for memory cgroup The mem_cgroup_from_slab_obj() is suppo… Linux Kernel 6.10.5+ Fix from $1,9502024-08-26 HIGH 7.0 CVE-2024-43883 In the Linux kernel, the following vulnerability has been resolved: usb: vhci-hcd: Do not drop references before new references are gained At a few… Linux Kernel 4.19.320 / 5.4.282+ Fix from $1,9502024-08-23 MEDIUM 5.5 CVE-2022-48935 In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: unregister flowtable hooks on netns exit Unregister flowt… Linux Kernel 4.19.316 / 5.4.262+ Fix from $1,6002024-08-22 HIGH 7.8 CVE-2022-48925 In the Linux kernel, the following vulnerability has been resolved: RDMA/cma: Do not change route.addr.src_addr outside state checks If the state i… Linux Kernel 5.10.103 / 5.15.26+ Fix from $1,9502024-08-22 MEDIUM 5.5 CVE-2022-48911 In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_queue: fix possible use-after-free Eric Dumazet says: The sock_… Linux Kernel 4.9.305 / 4.14.270+ Fix from $1,6002024-08-22 HIGH 7.8 CVE-2022-48912 In the Linux kernel, the following vulnerability has been resolved: netfilter: fix use-after-free in __nf_register_net_hook() We must not dereferen… Linux Kernel 4.14.270 / 4.19.233+ Fix from $1,9502024-08-22 HIGH 7.8 CVE-2022-48913 In the Linux kernel, the following vulnerability has been resolved: blktrace: fix use after free for struct blk_trace When tracing the whole disk, … Linux Kernel 5.15.27 / 5.16.13+ Fix from $1,9502024-08-22 HIGH 8.8 CVE-2024-7968 Use after free in Autofill in Google Chrome prior to 128.0.6613.84 allowed a remote attacker who had convinced the user to engage in specific UI inte… Chrome 128.0.6613.84+ Fix from $1,9502024-08-21 HIGH 8.8 CVE-2024-7964 Use after free in Passwords in Google Chrome on Android prior to 128.0.6613.84 allowed a remote attacker to potentially exploit heap corruption via a… Chrome 128.0.6613.84+ Fix from $1,9502024-08-21 HIGH 8.8 CVE-2024-7725 Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on… Pdf Editor 11.2.11.54113 / 12.1.8.15703+ Fix from $1,9502024-08-21 HIGH 8.8 CVE-2024-7723 Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on… Pdf Editor 11.2.11.54113 / 12.1.8.15703+ Fix from $1,9502024-08-21 HIGH 8.8 CVE-2024-7724 Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on… Pdf Editor 11.2.11.54113 / 12.1.8.15703+ Fix from $1,9502024-08-21 MEDIUM 5.5 CVE-2023-52913 In the Linux kernel, the following vulnerability has been resolved: drm/i915: Fix potential context UAFs gem_context_register() makes the context v… Linux Kernel 5.9 / 6.1.7+ Fix from $1,6002024-08-21 MEDIUM 5.5 CVE-2023-52907 In the Linux kernel, the following vulnerability has been resolved: nfc: pn533: Wait for out_urb's completion in pn533_usb_send_frame() Fix a use-a… Linux Kernel 4.14.303 / 4.19.270+ Fix from $1,6002024-08-21 HIGH 7.8 CVE-2022-48892 In the Linux kernel, the following vulnerability has been resolved: sched/core: Fix use-after-free bug in dup_user_cpus_ptr() Since commit 07ec77a1… Linux Kernel 5.15.89 / 6.1.7+ Fix from $1,9502024-08-21 HIGH 7.0 CVE-2022-48872 In the Linux kernel, the following vulnerability has been resolved: misc: fastrpc: Fix use-after-free race condition for maps It is possible that i… Linux Kernel 5.4.230 / 5.10.165+ Fix from $1,9502024-08-21 HIGH 7.8 CVE-2022-48873 In the Linux kernel, the following vulnerability has been resolved: misc: fastrpc: Don't remove map on creater_process and device_release Do not re… Linux Kernel 5.4.230 / 5.10.165+ Fix from $1,9502024-08-21 HIGH 7.8 CVE-2022-48874 In the Linux kernel, the following vulnerability has been resolved: misc: fastrpc: Fix use-after-free and race in fastrpc_map_find Currently, there… Linux Kernel 6.1.8+ Fix from $1,9502024-08-21 HIGH 7.8 CVE-2022-48878 In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_qca: Fix driver shutdown on closed serdev The driver shutdown ca… Linux Kernel 5.10.165 / 5.15.90+ Fix from $1,9502024-08-21 HIGH 7.8 CVE-2022-48867 In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: Prevent use after free on completion memory On driver unload a… Linux Kernel 6.1.8+ Fix from $1,9502024-08-21 MEDIUM 5.5 CVE-2024-43864 In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix CT entry update leaks of modify header context The cited commit … Linux Kernel 6.6.45 / 6.10.4+ Fix from $1,6002024-08-21 HIGH 7.8 CVE-2024-32927 In sendDeviceState_1_6 of RadioExt.cpp, there is a possible use after free due to improper locking. This could lead to local escalation of privilege … Android Mitigation only Fix from $1,9502024-08-19 MEDIUM 5.5 CVE-2024-43853 In the Linux kernel, the following vulnerability has been resolved: cgroup/cpuset: Prevent UAF in proc_cpuset_show() An UAF can happen when /proc/c… Linux Kernel 6.1.103 / 6.6.44+ Fix from $1,6002024-08-17 HIGH 7.8 CVE-2024-43830 In the Linux kernel, the following vulnerability has been resolved: leds: trigger: Unregister sysfs attributes before calling deactivate() Triggers… Linux Kernel 4.19.320 / 5.4.282+ Fix from $1,9502024-08-17