Browse CVEs

HIGH 8.8 CVE-2023-42950 A use after free issue was addressed with improved memory management. This issue is fixed in Safari 17.2, iOS 17.2 and iPadOS 17.2, tvOS 17.2, watchO… Safari 10.2 / 14.2+ Fix from $1,9502024-03-28 HIGH 7.8 CVE-2023-42892 A use-after-free issue was addressed with improved memory management. This issue is fixed in macOS Ventura 13.6.3, macOS Sonoma 14.2, macOS Monterey … macOS 12.7.2 / 13.6.3+ Fix from $1,9502024-03-28 HIGH 8.8 CVE-2024-2883 Use after free in ANGLE in Google Chrome prior to 123.0.6312.86 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML p… Chrome 123.0.6312.86+ Fix from $1,9502024-03-26 HIGH 8.8 CVE-2024-2885 Use after free in Dawn in Google Chrome prior to 123.0.6312.86 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML pa… Chrome 123.0.6312.86+ Fix from $1,9502024-03-26 HIGH 7.5 CVE-2024-2886 Use after free in WebCodecs in Google Chrome prior to 123.0.6312.86 allowed a remote attacker to perform arbitrary read/write via a crafted HTML page… Chrome 123.0.6312.86+ Fix from $1,9502024-03-26 HIGH 7.8 CVE-2024-21918 A memory buffer vulnerability in Rockwell Automation Arena Simulation software could potentially allow a malicious user to insert unauthorized code t… Arena 16.20.03+ Fix from $1,9502024-03-26 MEDIUM 5.5 CVE-2021-47162 In the Linux kernel, the following vulnerability has been resolved: tipc: skb_linearize the head skb when reassembling msgs It's not a good idea to… Linux Kernel 4.4.271 / 4.9.271+ Fix from $1,6002024-03-25 MEDIUM 5.5 CVE-2021-47142 In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix a use-after-free looks like we forget to set ttm->sg to NULL. H… Linux Kernel 4.4.271 / 4.9.271+ Fix from $1,6002024-03-25 MEDIUM 6.5 CVE-2024-30161 In Qt 6.5.4, 6.5.5, and 6.6.2, QNetworkReply header data might be accessed via a dangling pointer in Qt for WebAssembly (wasm). (Earlier and later ve… Qt Patch available Fix from $1,6002024-03-24 HIGH 7.8 CVE-2024-1848 Heap-based Buffer Overflow, Memory Corruption, Out-Of-Bounds Read, Out-Of-Bounds Write, Stack-based Buffer Overflow, Type Confusion, Uninitialized Va… Mitigation only Fix from $1,9502024-03-22 HIGH 8.8 CVE-2024-27934 Deno is a JavaScript, TypeScript, and WebAssembly runtime. Starting in version 1.36.2 and prior to version 1.40.3, use of inherently unsafe `*const c… Deno 1.40.3+ Fix from $1,9502024-03-21 HIGH 8.8 CVE-2024-2627 Use after free in Canvas in Google Chrome prior to 123.0.6312.58 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML … Chrome 123.0.6312.58+ Fix from $1,9502024-03-20 HIGH 8.1 CVE-2024-2612 If an attacker could find a way to trigger a particular code path in `SafeRefPtr`, it could have triggered a crash or potentially be leveraged to ach… Firefox 115.9 / 124.0+ Fix from $1,9502024-03-19 HIGH 7.8 CVE-2024-20752EPSS 8% Bridge versions 13.0.5, 14.0.1 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the contex… Bridge 13.0.6 / 14.0.2+ Fix from $1,9502024-03-18 HIGH 7.8 CVE-2021-47123 In the Linux kernel, the following vulnerability has been resolved: io_uring: fix ltout double free on completion race Always remove linked timeout… Linux Kernel 5.12.10+ Fix from $1,9502024-03-15 HIGH 7.8 CVE-2021-47131 In the Linux kernel, the following vulnerability has been resolved: net/tls: Fix use-after-free after the TLS device goes down and up When a netdev… Linux Kernel 5.10.43 / 5.12.10+ Fix from $1,9502024-03-15 HIGH 7.8 CVE-2021-47111 In the Linux kernel, the following vulnerability has been resolved: xen-netback: take a reference to the RX task thread Do this in order to prevent… Linux Kernel 5.10.43 / 5.12.10+ Fix from $1,9502024-03-15 MEDIUM 5.5 CVE-2021-47113 In the Linux kernel, the following vulnerability has been resolved: btrfs: abort in rename_exchange if we fail to insert the second ref Error injec… Linux Kernel 5.10.43 / 5.12.10+ Fix from $1,6002024-03-15 HIGH 7.8 CVE-2021-47118 In the Linux kernel, the following vulnerability has been resolved: pid: take a reference when initializing `cad_pid` During boot, kernel_init_free… Linux Kernel 4.4.272 / 4.9.272+ Fix from $1,9502024-03-15 HIGH 7.1 CVE-2024-26630 In the Linux kernel, the following vulnerability has been resolved: mm: cachestat: fix folio read-after-free in cache walk In cachestat, we access … Linux Kernel 6.6.21 / 6.7.9+ Fix from $1,9502024-03-13 HIGH 8.8 CVE-2024-2400 Use after free in Performance Manager in Google Chrome prior to 122.0.6261.128 allowed a remote attacker to potentially exploit heap corruption via a… Chrome 122.0.6261.128+ Fix from $1,9502024-03-13 HIGH 7.8 CVE-2024-23300 A use-after-free issue was addressed with improved memory management. This issue is fixed in GarageBand 10.4.11. Processing a maliciously crafted fil… Garageband 10.4.11+ Fix from $1,9502024-03-12 HIGH 7.8 CVE-2024-26182EPSS 6% Windows Kernel Elevation of Privilege Vulnerability Windows 10 1607 10.0.14393.6796 / 10.0.17763.5576+ Fix from $1,9502024-03-12 HIGH 7.0 CVE-2024-21439 Windows Telephony Server Elevation of Privilege Vulnerability Windows 10 1507 10.0.10240.20526 / 10.0.14393.6796+ Fix from $1,9502024-03-12 HIGH 7.3 CVE-2024-21443 Windows Kernel Elevation of Privilege Vulnerability Windows 10 1809 10.0.17763.5576 / 10.0.19044.4170+ Fix from $1,9502024-03-12 HIGH 7.8 CVE-2024-21437EPSS 8% Windows Graphics Component Elevation of Privilege Vulnerability Windows 10 1507 10.0.10240.20526 / 10.0.14393.6796+ Fix from $1,9502024-03-12 HIGH 7.8 CVE-2024-21426 Microsoft SharePoint Server Remote Code Execution Vulnerability Sharepoint Server Patch available Fix from $1,9502024-03-12 CRITICAL 9.8 CVE-2024-21334EPSS 20% Open Management Infrastructure (OMI) Remote Code Execution Vulnerability Open Management Infrastructure 1.8.1-0+ Fix from $2,3002024-03-12 HIGH 8.1 CVE-2024-21407EPSS 16% Windows Hyper-V Remote Code Execution Vulnerability Windows 10 1507 10.0.10240.20526 / 10.0.14393.6796+ Fix from $1,9502024-03-12 HIGH 8.4 CVE-2024-27213 In BroadcastSystemMessage of servicemgr.cpp, there is a possible Remote Code Execution due to a use after free. This could lead to local escalation o… Android Mitigation only Fix from $1,9502024-03-11