Browse CVEs

HIGH 8.8 CVE-2024-7533 Use after free in Sharing in Google Chrome on iOS prior to 127.0.6533.99 allowed a remote attacker to potentially exploit heap corruption via a craft… Chrome 127.0.6533.99+ Fix from $1,9502024-08-06 HIGH 8.8 CVE-2024-6991 Use after free in Dawn in Google Chrome prior to 127.0.6533.72 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML pa… Chrome 127.0.6533.72+ Fix from $1,9502024-08-06 HIGH 8.8 CVE-2024-6997 Use after free in Tabs in Google Chrome prior to 127.0.6533.72 allowed a remote attacker who convinced a user to engage in specific UI gestures to po… Chrome 127.0.6533.72+ Fix from $1,9502024-08-06 HIGH 8.8 CVE-2024-6998 Use after free in User Education in Google Chrome prior to 127.0.6533.72 allowed a remote attacker who convinced a user to engage in specific UI gest… Chrome 127.0.6533.72+ Fix from $1,9502024-08-06 HIGH 8.8 CVE-2024-7000 Use after free in CSS in Google Chrome prior to 127.0.6533.72 allowed a remote attacker who convinced a user to engage in specific UI gestures to pot… Chrome 127.0.6533.72+ Fix from $1,9502024-08-06 HIGH 8.8 CVE-2024-6988 Use after free in Downloads in Google Chrome on iOS prior to 127.0.6533.72 allowed a remote attacker to potentially exploit heap corruption via a cra… Chrome 127.0.6533.72+ Fix from $1,9502024-08-06 HIGH 8.8 CVE-2024-6989 Use after free in Loader in Google Chrome prior to 127.0.6533.72 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML … Chrome 127.0.6533.72+ Fix from $1,9502024-08-06 HIGH 8.8 CVE-2024-7527 Unexpected marking work at the start of sweeping could have led to a use-after-free. This vulnerability affects Firefox < 129, Firefox ESR < 115.14, … Firefox 115.14.0 / 129.0+ Fix from $1,9502024-08-06 HIGH 8.8 CVE-2024-7528 Incorrect garbage collection interaction in IndexedDB could have led to a use-after-free. This vulnerability affects Firefox < 129, Firefox ESR < 128… Firefox 128.1.0 / 129.0+ Fix from $1,9502024-08-06 HIGH 8.8 CVE-2024-7530 Incorrect garbage collection interaction could have led to a use-after-free. This vulnerability affects Firefox < 129. Firefox 129.0+ Fix from $1,9502024-08-06 HIGH 7.8 CVE-2024-33028 Memory corruption as fence object may still be accessed in timeline destruct after isync fence is released. Ar8035 Firmware Patch available Fix from $1,9502024-08-05 HIGH 7.8 CVE-2024-33034 Memory corruption can occur if VBOs hold outdated or invalid GPU SMMU mappings, especially when the binding and reclaiming of memory buffers are perf… Fastconnect 6200 Firmware Patch available Fix from $1,9502024-08-05 HIGH 7.8 CVE-2024-33023 Memory corruption while creating a fence to wait on timeline events, and simultaneously signal timeline events. Ar8035 Firmware Patch available Fix from $1,9502024-08-05 HIGH 8.4 CVE-2024-23384 Memory corruption when the mapped pages in VBO are still mapped after reclaiming by shrinker. Wsa8845h Firmware Patch available Fix from $1,9502024-08-05 HIGH 7.5 CVE-2024-33010 Transient DOS while parsing fragments of MBSSID IE from beacon frame. Ar8035 Firmware Patch available Fix from $1,9502024-08-05 HIGH 7.8 CVE-2024-23381 Memory corruption when memory mapped in a VBO is not unmapped by the GPU SMMU. Wsa8845h Firmware Mitigation only Fix from $1,9502024-08-05 HIGH 7.8 CVE-2024-23382 Memory corruption while processing graphics kernel driver request to create DMA fence. Fastconnect 6200 Firmware Mitigation only Fix from $1,9502024-08-05 HIGH 7.8 CVE-2024-23383 Memory corruption when kernel driver attempts to trigger hardware fences. Wsa8845h Firmware Patch available Fix from $1,9502024-08-05 HIGH 7.8 CVE-2024-2937 Use After Free vulnerability in Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Dri… 5th Gen Gpu Architecture Kernel Driver Mitigation only Fix from $1,9502024-08-05 HIGH 7.8 CVE-2024-4607 Use After Free vulnerability in Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Dri… 5th Gen Gpu Architecture Kernel Driver Mitigation only Fix from $1,9502024-08-05 HIGH 7.8 CVE-2024-42105 In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix inode number range checks Patch series "nilfs2: fix potential issue… Linux Kernel 4.19.318 / 5.4.280+ Fix from $1,9502024-07-30 MEDIUM 5.5 CVE-2024-42108 In the Linux kernel, the following vulnerability has been resolved: net: rswitch: Avoid use-after-free in rswitch_poll() The use-after-free is actu… Linux Kernel 6.9.9+ Fix from $1,6002024-07-30 HIGH 7.8 CVE-2024-42112 In the Linux kernel, the following vulnerability has been resolved: net: txgbe: free isb resources at the right time When using MSI/INTx interrupt,… Linux Kernel 6.9 / 6.9.9+ Fix from $1,9502024-07-30 HIGH 7.8 CVE-2024-42104 In the Linux kernel, the following vulnerability has been resolved: nilfs2: add missing check for inode numbers on directory entries Syzbot reporte… Linux Kernel 4.19.318 / 5.4.280+ Fix from $1,9502024-07-30 MEDIUM 6.5 CVE-2024-40782 A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 17.6, iOS 16.7.9 and iPadOS 16.7.9, iOS 17.6 and … Safari 1.3 / 10.6+ Fix from $1,6002024-07-29 MEDIUM 5.5 CVE-2024-42073 In the Linux kernel, the following vulnerability has been resolved: mlxsw: spectrum_buffers: Fix memory corruptions on Spectrum-4 systems The follo… Linux Kernel 5.17 / 6.1.97+ Fix from $1,6002024-07-29 MEDIUM 5.5 CVE-2024-42075 In the Linux kernel, the following vulnerability has been resolved: bpf: Fix remap of arena. The bpf arena logic didn't account for mremap operatio… Linux Kernel 6.9 / 6.9.8+ Fix from $1,6002024-07-29 HIGH 7.8 CVE-2024-41092 In the Linux kernel, the following vulnerability has been resolved: drm/i915/gt: Fix potential UAF by revoke of fence registers CI has been sporadi… Linux Kernel 5.10.221 / 5.15.162+ Fix from $1,9502024-07-29 HIGH 7.8 CVE-2024-41096 In the Linux kernel, the following vulnerability has been resolved: PCI/MSI: Fix UAF in msi_capability_init KFENCE reports the following UAF: BUG… Debian Linux 6.1.109 / 6.6.37+ Fix from $1,9502024-07-29 HIGH 7.8 CVE-2024-41074 In the Linux kernel, the following vulnerability has been resolved: cachefiles: Set object to close if ondemand_id < 0 in copen If copen is malicio… Linux Kernel 6.1.101 / 6.6.42+ Fix from $1,9502024-07-29