Browse CVEs

HIGH 8.1 CVE-2023-41773 Layer 2 Tunneling Protocol Remote Code Execution Vulnerability Windows 10 1507 10.0.10240.20232 / 10.0.14393.6351+ Fix from $1,9502023-10-10 HIGH 8.1 CVE-2023-41774 Layer 2 Tunneling Protocol Remote Code Execution Vulnerability Windows 10 1507 10.0.10240.20232 / 10.0.14393.6351+ Fix from $1,9502023-10-10 HIGH 7.8 CVE-2023-36743 Win32k Elevation of Privilege Vulnerability Windows 10 1507 10.0.10240.20232 / 10.0.14393.6351+ Fix from $1,9502023-10-10 HIGH 7.0 CVE-2023-36776 Win32k Elevation of Privilege Vulnerability Windows 10 1507 10.0.10240.20232 / 10.0.14393.6351+ Fix from $1,9502023-10-10 HIGH 7.0 CVE-2023-36902 Windows Runtime Remote Code Execution Vulnerability Windows 10 1607 10.0.14393.6351 / 10.0.17763.4974+ Fix from $1,9502023-10-10 HIGH 7.8 CVE-2023-36726 Windows Internet Key Exchange (IKE) Extension Elevation of Privilege Vulnerability Windows 10 1507 10.0.10240.20232 / 10.0.14393.6351+ Fix from $1,9502023-10-10 HIGH 7.8 CVE-2023-36605 Windows Named Pipe Filesystem Elevation of Privilege Vulnerability Windows 10 1809 10.0.17763.4974 / 10.0.19041.3570+ Fix from $1,9502023-10-10 HIGH 7.3 CVE-2023-36583 Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability Windows 10 10.0.10240.20232 / 10.0.14393.6351+ Fix from $1,9502023-10-10 HIGH 7.0 CVE-2023-36565 Microsoft Office Graphics Elevation of Privilege Vulnerability 365 Copilot 16.0.14326.21606 / 16.0.16827.20138+ Fix from $1,9502023-10-10 MEDIUM 5.3 CVE-2023-41675 A use after free vulnerability [CWE-416] in FortiOS version 7.2.0 through 7.2.4 and version 7.0.0 through 7.0.10 and FortiProxy version 7.2.0 through… Fortiproxy after 7.2.4 Fix from $1,6002023-10-10 HIGH 7.5 CVE-2023-40632 In jpg driver, there is a possible use after free due to a logic error. This could lead to remote information disclosure no additional execution priv… Android Mitigation only Fix from $1,9502023-10-08 MEDIUM 6.5 CVE-2023-45322 libxml2 through 2.11.5 has a use-after-free that can only occur after a certain memory allocation fails. This occurs in xmlUnlinkNode in tree.c. NOTE… Libxml2 after 2.11.5 Fix from $1,6002023-10-06 HIGH 8.8 CVE-2023-39928 A use-after-free vulnerability exists in the MediaRecorder API of Webkit WebKitGTK 2.40.5. A specially crafted web page can abuse this vulnerability … Debian Linux Mitigation only Fix from $1,9502023-10-06 CRITICAL 9.8 CVE-2023-38703 PJSIP is a free and open source multimedia communication library written in C with high level API in C, C++, Java, C#, and Python languages. SRTP is … Pjsip after 2.13.1 Fix from $2,3002023-10-06 HIGH 7.8 CVE-2023-33029 Memory corruption in DSP Service during a remote call from HLOS to DSP. Ar8035 Firmware Patch available Fix from $1,9502023-10-03 HIGH 7.8 CVE-2023-33039 Memory corruption in Automotive Display while destroying the image handle created using connected display driver. Qam8295p Firmware No fix yet Fix from $1,9502023-10-03 HIGH 7.8 CVE-2023-5345 A use-after-free vulnerability in the Linux kernel's fs/smb/client component can be exploited to achieve local privilege escalation. In case of an e… Linux Kernel 6.1.56 / 6.5.6+ Fix from $1,9502023-10-03 MEDIUM 5.5 CVE-2023-4211 KEV A local non-privileged user can make improper GPU memory processing operations to gain access to already freed memory. 5th Gen Gpu Architecture Kernel Driver Mitigation only Fix from $1,6002023-10-01 HIGH 8.8 CVE-2023-5186 Use after free in Passwords in Google Chrome prior to 117.0.5938.132 allowed a remote attacker who convinced a user to engage in specific UI interact… Chrome 117.0.5938.132+ Fix from $1,9502023-09-28 HIGH 8.8 CVE-2023-5187 Use after free in Extensions in Google Chrome prior to 117.0.5938.132 allowed an attacker who convinced a user to install a malicious extension to po… Chrome 117.0.5938.132+ Fix from $1,9502023-09-28 MEDIUM 6.6 CVE-2023-5197 A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation. Addition… Debian Linux 5.10.198 / 5.15.134+ Fix from $1,6002023-09-27 MEDIUM 6.5 CVE-2023-5171 During Ion compilation, a Garbage Collection could have resulted in a use-after-free condition, allowing an attacker to write two NUL bytes, and caus… Firefox 115.3 / 118+ Fix from $1,6002023-09-27 CRITICAL 9.8 CVE-2023-5172 A hashtable in the Ion Engine could have been mutated while there was a live interior reference, leading to a potential use-after-free and exploitab… Firefox 118+ Fix from $2,3002023-09-27 CRITICAL 9.8 CVE-2023-5174 If Windows failed to duplicate a handle during process creation, the sandbox code may have inadvertently freed a pointer twice, resulting in a use-af… Firefox 115.3 / 118+ Fix from $2,3002023-09-27 CRITICAL 9.8 CVE-2023-5175 During process shutdown, it was possible that an `ImageBitmap` was created that would later be used after being freed from a different codepath, lead… Firefox 118+ Fix from $2,3002023-09-27 HIGH 7.8 CVE-2023-41995 A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 17 and iPadOS 17, macOS Sonoma 14. An app may be abl… Ipados 14.0 / 16.6+ Fix from $1,9502023-09-27 HIGH 7.8 CVE-2023-41071 A use-after-free issue was addressed with improved memory management. This issue is fixed in tvOS 17, iOS 17 and iPadOS 17, watchOS 10, macOS Ventura… Ipados 10.0 / 13.6+ Fix from $1,9502023-09-27 HIGH 8.8 CVE-2023-39434 A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 17 and iPadOS 17, watchOS 10, macOS Sonoma 14. Proce… Ipados 10.0 / 14.0+ Fix from $1,9502023-09-27 HIGH 7.8 CVE-2023-32541 A use-after-free vulnerability exists in the footerr functionality of Hancom Office 2020 HWord 11.0.0.7520. A specially crafted .doc file can lead to… Hancom Office 2020 No fix yet Fix from $1,9502023-09-27 CRITICAL 9.8 CVE-2023-39453 A use-after-free vulnerability exists in the tif_parse_sub_IFD functionality of Accusoft ImageGear 20.1. A specially crafted malformed file can lead … Imagegear No fix yet Fix from $2,3002023-09-25