Browse CVEs

MEDIUM 5.5 CVE-2024-6064 A vulnerability was found in GPAC 2.5-DEV-rev228-g11067ea92-master. It has been declared as problematic. This vulnerability affects the function xmt_… Gpac Patch available Fix from $1,6002024-06-17 HIGH 8.1 CVE-2024-32929 In gpu_slc_get_region of pixel_gpu_slc.c, there is a possible EoP due to a use after free. This could lead to local escalation of privilege with no a… Android Mitigation only Fix from $1,9502024-06-13 HIGH 7.8 CVE-2024-32900 In lwis_fence_signal of lwis_debug.c, there is a possible Use after Free due to improper locking. This could lead to local escalation of privilege fr… Android Mitigation only Fix from $1,9502024-06-13 HIGH 7.8 CVE-2024-29787 In lwis_process_transactions_in_queue of lwis_transaction.c, there is a possible use after free due to a use after free. This could lead to local esc… Android Mitigation only Fix from $1,9502024-06-13 HIGH 8.8 CVE-2024-5841 Use after free in V8 in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page… Chrome 126.0.6478.54+ Fix from $1,9502024-06-11 HIGH 8.8 CVE-2024-5842 Use after free in Browser UI in Google Chrome prior to 126.0.6478.54 allowed a remote attacker who convinced a user to engage in specific UI gestures… Chrome 126.0.6478.54+ Fix from $1,9502024-06-11 HIGH 8.8 CVE-2024-5845 Use after free in Audio in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF fi… Chrome 126.0.6478.54+ Fix from $1,9502024-06-11 HIGH 8.8 CVE-2024-5846 Use after free in PDFium in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF f… Chrome 126.0.6478.54+ Fix from $1,9502024-06-11 HIGH 8.8 CVE-2024-5847 Use after free in PDFium in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF f… Chrome 126.0.6478.54+ Fix from $1,9502024-06-11 HIGH 8.8 CVE-2024-5831 Use after free in Dawn in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML pa… Chrome 126.0.6478.54+ Fix from $1,9502024-06-11 HIGH 8.8 CVE-2024-5832 Use after free in Dawn in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML pa… Chrome 126.0.6478.54+ Fix from $1,9502024-06-11 HIGH 7.5 CVE-2024-30101 Microsoft Office Remote Code Execution Vulnerability 365 Apps Patch available Fix from $1,9502024-06-11 HIGH 7.3 CVE-2024-30102 Microsoft Office Remote Code Execution Vulnerability 365 Apps Patch available Fix from $1,9502024-06-11 HIGH 7.8 CVE-2024-30089EPSS 8% Microsoft Streaming Service Elevation of Privilege Vulnerability Windows 10 1809 10.0.17763.5936 / 10.0.19044.4529+ Fix from $1,9502024-06-11 HIGH 7.8 CVE-2024-30086 Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability Windows 10 1507 10.0.10240.20680 / 10.0.14393.7070+ Fix from $1,9502024-06-11 CRITICAL 9.8 CVE-2024-30080EPSS 43% Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability Windows 10 1507 10.0.10240.20680 / 10.0.14393.7070+ Fix from $2,3002024-06-11 HIGH 7.8 CVE-2024-30082 Win32k Elevation of Privilege Vulnerability Windows 10 1507 10.0.10240.20680 / 10.0.14393.7070+ Fix from $1,9502024-06-11 HIGH 7.8 CVE-2024-30062 Windows Standards-Based Storage Management Service Remote Code Execution Vulnerability Windows Server 2012 10.0.14393.7070 / 10.0.17763.5936+ Fix from $1,9502024-06-11 HIGH 7.5 CVE-2024-5702 Memory corruption in the networking stack could have led to a potentially exploitable crash. This vulnerability affects Firefox < 125, Firefox ESR < … Firefox 115.12 / 125.0+ Fix from $1,9502024-06-11 HIGH 8.1 CVE-2024-5688 If a garbage collection was triggered at the right time, a use-after-free could have occurred during object transplant. This vulnerability affects Fi… Firefox 115.12 / 127.0+ Fix from $1,9502024-06-11 HIGH 7.5 CVE-2024-5694 An attacker could have caused a use-after-free in the JavaScript engine to read memory in the JavaScript string section of the heap. This vulnerabili… Firefox 127.0+ Fix from $1,9502024-06-11 HIGH 7.8 CVE-2024-36971 KEV In the Linux kernel, the following vulnerability has been resolved: net: fix __dst_negative_advice() race __dst_negative_advice() does not enforce … Debian Linux 4.19.316 / 5.4.278+ Fix from $1,9502024-06-10 HIGH 8.4 CVE-2024-32502 An issue was discovered in Samsung Mobile Processor and Wearable Processor Exynos 850, Exynos 1080, Exynos 2100, Exynos 1280, Exynos 1380, Exynos 133… Exynos 1080 Firmware Mitigation only Fix from $1,9502024-06-07 HIGH 7.8 CVE-2024-32503 An issue was discovered in Samsung Mobile Processor and Wearable Processor Exynos 850, Exynos 1080, Exynos 2100, Exynos 1280, Exynos 1380, Exynos 133… Exynos 850 Firmware Mitigation only Fix from $1,9502024-06-07 HIGH 7.8 CVE-2024-4610 KEV Use After Free vulnerability in Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver allows a local non-privileged user to make impro… Bifrost Gpu Kernel Driver Mitigation only Fix from $1,9502024-06-07 HIGH 8.8 CVE-2024-5269 Sonos Era 100 SMB2 Message Handling Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execu… Era 100 Firmware Mitigation only Fix from $1,9502024-06-06 HIGH 7.8 CVE-2024-30375 Luxion KeyShot Viewer KSP File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbi… Keyshot 2024.2+ Fix from $1,9502024-06-06 MEDIUM 5.9 CVE-2024-34362 Envoy is a cloud-native, open source edge and service proxy. There is a use-after-free in `HttpConnectionManager` (HCM) with `EnvoyQuicServerStream` … Envoy 1.27.6 / 1.28.4+ Fix from $1,6002024-06-04 HIGH 7.5 CVE-2024-32974 Envoy is a cloud-native, open source edge and service proxy. A crash was observed in `EnvoyQuicServerStream::OnInitialHeadersComplete()` with followi… Envoy 1.27.6 / 1.28.4+ Fix from $1,9502024-06-04 HIGH 7.0 CVE-2023-43543 Memory corruption in Audio during a playback or a recording due to race condition between allocation and deallocation of graph object. Qam8255p Firmware Patch available Fix from $1,9502024-06-03