Browse CVEs

HIGH 7.8 CVE-2024-39496 In the Linux kernel, the following vulnerability has been resolved: btrfs: zoned: fix use-after-free due to race with dev replace While loading a z… Debian Linux 6.1.95 / 6.6.35+ Fix from $1,9502024-07-12 HIGH 7.8 CVE-2024-39502 In the Linux kernel, the following vulnerability has been resolved: ionic: fix use after netif_napi_del() When queues are started, netif_napi_add()… Linux Kernel 5.4.279 / 5.10.221+ Fix from $1,9502024-07-12 HIGH 7.0 CVE-2024-39503 In the Linux kernel, the following vulnerability has been resolved: netfilter: ipset: Fix race between namespace cleanup and gc in the list:set type… Linux Kernel 5.4.279 / 5.10.221+ Fix from $1,9502024-07-12 MEDIUM 5.7 CVE-2024-39528 A Use After Free vulnerability in the Routing Protocol Daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an authenticated, networ… Junos 21.2+ Fix from $1,6002024-07-11 HIGH 7.8 CVE-2024-31339 In multiple functions of StatsService.cpp, there is a possible memory corruption due to a use after free. This could lead to local escalation of priv… Android Patch available Fix from $1,9502024-07-09 HIGH 7.8 CVE-2024-23697 In RGXCreateHWRTData_aux of rgxta3d.c, there is a possible arbitrary code execution due to a use after free. This could lead to local escalation of p… Android Mitigation only Fix from $1,9502024-07-09 HIGH 7.8 CVE-2024-23696 In RGXCreateZSBufferKM of rgxta3d.c, there is a possible arbitrary code execution due to a use after free. This could lead to local escalation of pri… Android Mitigation only Fix from $1,9502024-07-09 HIGH 7.8 CVE-2024-38085EPSS 5% Windows Graphics Component Elevation of Privilege Vulnerability Windows 10 1507 10.0.10240.20710 / 10.0.14393.7159+ Fix from $1,9502024-07-09 HIGH 7.5 CVE-2024-38078 Xbox Wireless Adapter Remote Code Execution Vulnerability Windows 11 21h2 10.0.22000.3079 / 10.0.22621.3880+ Fix from $1,9502024-07-09 HIGH 7.8 CVE-2024-38066 Windows Win32k Elevation of Privilege Vulnerability Windows 10 1507 10.0.10240.20710 / 10.0.14393.7159+ Fix from $1,9502024-07-09 HIGH 7.8 CVE-2024-38059 Win32k Elevation of Privilege Vulnerability Windows 10 21h2 10.0.19044.4651 / 10.0.19045.4651+ Fix from $1,9502024-07-09 HIGH 8.8 CVE-2024-38053 Windows Layer-2 Bridge Network Driver Remote Code Execution Vulnerability Windows 10 1507 10.0.10240.20710 / 10.0.14393.7159+ Fix from $1,9502024-07-09 HIGH 8.8 CVE-2024-37320 SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability Sql Server 2016 13.0.6441.1 / 13.0.7037.1+ Fix from $1,9502024-07-09 HIGH 8.1 CVE-2024-35264 .NET and Visual Studio Remote Code Execution Vulnerability .net 8.0.7 / 17.4.21+ Fix from $1,9502024-07-09 HIGH 8.8 CVE-2024-21332 SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability Sql Server 2016 13.0.6441.1 / 13.0.7037.1+ Fix from $1,9502024-07-09 HIGH 8.8 CVE-2024-21303 SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability Sql Server 2016 14.0.2056.2 / 14.0.3471.2+ Fix from $1,9502024-07-09 HIGH 8.8 CVE-2024-21308 SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability Sql Server 2016 13.0.6441.1 / 13.0.7037.1+ Fix from $1,9502024-07-09 HIGH 7.0 CVE-2024-39486 In the Linux kernel, the following vulnerability has been resolved: drm/drm_file: Fix pid refcounting race <[email protected]>, Max… Linux Kernel 6.6.37 / 6.9.8+ Fix from $1,9502024-07-06 CRITICAL 9.8 CVE-2024-37030 in OpenHarmony v4.0.0 and prior versions allow a remote attacker arbitrary code execution in pre-installed apps through use after free. Openharmony after 4.0 Fix from $2,3002024-07-02 CRITICAL 9.1 CVE-2024-39305 Envoy is a cloud-native, open source edge and service proxy. Prior to versions 1.30.4, 1.29.7, 1.28.5, and 1.27.7. Envoy references already freed mem… Envoy Patch available Fix from $2,3002024-07-01 HIGH 7.8 CVE-2024-23373 Memory corruption when IOMMU unmap operation fails, the DMA and anon buffers are getting released. 315 5g Iot Modem Firmware Patch available Fix from $1,9502024-07-01 HIGH 7.8 CVE-2024-23380 Memory corruption while handling user packets during VBO bind operation. Fastconnect 6200 Firmware Patch available Fix from $1,9502024-07-01 MEDIUM 5.3 CVE-2024-38375 @fastly/js-compute is a JavaScript SDK and runtime for building Fastly Compute applications. The implementation of several functions were determined … Patch available Fix from $1,6002024-06-26 HIGH 7.8 CVE-2024-39463 In the Linux kernel, the following vulnerability has been resolved: 9p: add missing locking around taking dentry fid list Fix a use-after-free on d… Linux Kernel 5.15.168 / 6.1.94+ Fix from $1,9502024-06-25 MEDIUM 5.5 CVE-2024-38385 In the Linux kernel, the following vulnerability has been resolved: genirq/irqdesc: Prevent use-after-free in irq_find_at_or_after() irq_find_at_or… Linux Kernel 6.6.34 / 6.9.5+ Fix from $1,6002024-06-25 HIGH 7.8 CVE-2024-37007 A maliciously crafted X_B and X_T file, when parsed in pskernel.DLL through Autodesk applications, can cause a use-after-free vulnerability. This vul… Autocad 2022.1.5 / 2023.1.6+ Fix from $1,9502024-06-25 HIGH 7.8 CVE-2024-37004 A maliciously crafted SLDPRT file, when parsed in ASMKERN229A.dll through Autodesk applications, can cause a use-after-free vulnerability. This vulne… Autocad 2022.1.5 / 2023.1.6+ Fix from $1,9502024-06-25 HIGH 7.8 CVE-2024-23158 A maliciously crafted IGES file, when parsed in ASMImport229A.dll through Autodesk applications, can be used to cause a use-after-free vulnerability.… Autocad Map 3d 2022.1.5 / 2023.1.6+ Fix from $1,9502024-06-25 HIGH 7.8 CVE-2024-23142 A maliciously crafted CATPART, STP, and MODEL file, when parsed in atf_dwg_consumer.dll, rose_x64_vc15.dll and libodxdll through Autodesk application… Autocad 2022.1.5 / 2023.1.6+ Fix from $1,9502024-06-25 HIGH 8.8 CVE-2024-6290 Use after free in Dawn in Google Chrome prior to 126.0.6478.126 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML p… Chrome 126.0.6478.126+ Fix from $1,9502024-06-24