Browse CVEs

HIGH 7.0 CVE-2023-4622 A use-after-free vulnerability in the Linux kernel's af_unix component can be exploited to achieve local privilege escalation. The unix_stream_sendp… Linux Kernel 6.1.47+ Fix from $1,9502023-09-06 HIGH 7.8 CVE-2023-4623 A use-after-free vulnerability in the Linux kernel's net/sched: sch_hfsc (HFSC qdisc traffic control) component can be exploited to achieve local pri… Linux Kernel 4.14.327 / 4.19.295+ Fix from $1,9502023-09-06 HIGH 7.8 CVE-2023-4015 A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation. On an er… Linux Kernel 5.10.190 / 5.15.124+ Fix from $1,9502023-09-06 HIGH 7.8 CVE-2023-4206 A use-after-free vulnerability in the Linux kernel's net/sched: cls_route component can be exploited to achieve local privilege escalation. When rou… Linux Kernel 4.14.322 / 4.19.291+ Fix from $1,9502023-09-06 HIGH 7.8 CVE-2023-4207 A use-after-free vulnerability in the Linux kernel's net/sched: cls_fw component can be exploited to achieve local privilege escalation. When fw_cha… Linux Kernel 4.14.326 / 4.19.295+ Fix from $1,9502023-09-06 HIGH 7.8 CVE-2023-4208 A use-after-free vulnerability in the Linux kernel's net/sched: cls_u32 component can be exploited to achieve local privilege escalation. When u32_c… Linux Kernel 4.14.322 / 4.19.291+ Fix from $1,9502023-09-06 HIGH 7.0 CVE-2023-4244 A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation. Due to… Linux Kernel 4.19.316 / 5.4.262+ Fix from $1,9502023-09-06 HIGH 7.8 CVE-2023-3777 A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation. When nf_… Linux Kernel 5.10.188 / 5.15.123+ Fix from $1,9502023-09-06 MEDIUM 5.5 CVE-2021-39859 Acrobat Reader DC versions 2021.005.20060 (and earlier), 2020.004.30006 (and earlier) and 2017.011.30199 (and earlier) are affected by a Use After Fr… Acrobat Dc 17.011.30202 / 20.004.30015+ Fix from $1,6002023-09-06 HIGH 7.8 CVE-2021-21088 Acrobat Reader DC versions versions 2020.013.20074 (and earlier), 2020.001.30018 (and earlier) and 2017.011.30188 (and earlier) are affected by a Use… Acrobat 17.011.30190 / 20.001.30020+ Fix from $1,9502023-09-06 HIGH 7.8 CVE-2023-3472 Use after free vulnerability in Panasonic KW Watcher versions 1.00 through 2.82 may allow attackers to execute arbitrary code. Kw Watcher 2.83+ Fix from $1,9502023-09-06 HIGH 8.8 CVE-2023-4763 Use after free in Networks in Google Chrome prior to 116.0.5845.179 allowed a remote attacker to potentially exploit heap corruption via a crafted HT… Chrome 116.0.5845.179+ Fix from $1,9502023-09-05 HIGH 7.8 CVE-2023-33021 Memory corruption in Graphics while processing user packets for command submission. Apq8064au Firmware Patch available Fix from $1,9502023-09-05 HIGH 7.8 CVE-2023-4750 Use After Free in GitHub repository vim/vim prior to 9.0.1857. Fedora 9.0.1857 / 14.1+ Fix from $1,9502023-09-04 HIGH 7.8 CVE-2023-4752 Use After Free in GitHub repository vim/vim prior to 9.0.1858. Fedora 9.0.1858 / 14.1+ Fix from $1,9502023-09-04 MEDIUM 5.5 CVE-2023-4755 Use After Free in GitHub repository gpac/gpac prior to 2.3-DEV. Gpac 2.3+ Fix from $1,6002023-09-04 HIGH 7.8 CVE-2023-4733 Use After Free in GitHub repository vim/vim prior to 9.0.1840. Fedora 9.0.1840 / 14.1+ Fix from $1,9502023-09-04 MEDIUM 6.5 CVE-2023-20849 In imgsys_cmdq, there is a possible use after free due to a missing valid range checking. This could lead to local escalation of privilege with Syste… Linux Kernel Mitigation only Fix from $1,6002023-09-04 MEDIUM 6.4 CVE-2023-20834 In pda, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges… Android Mitigation only Fix from $1,6002023-09-04 MEDIUM 6.4 CVE-2023-20835 In camsys, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privile… Yocto Mitigation only Fix from $1,6002023-09-04 HIGH 7.8 CVE-2023-3297 In Ubuntu's accountsservice an unprivileged local attacker can trigger a use-after-free vulnerability in accountsservice by sending a D-Bus message t… Accountsservice 0.6.55-0ubuntu12 / 22.07.5-2ubuntu1.4+ Fix from $1,9502023-09-01 CRITICAL 9.8 CVE-2023-40187 FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. Affected versions of the 3.x beta branch ar… Freerdp No fix yet Fix from $2,3002023-08-31 CRITICAL 9.8 CVE-2023-39355 FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. Versions of FreeRDP on the 3.x release bran… Debian Linux Patch available Fix from $2,3002023-08-31 MEDIUM 6.3 CVE-2023-4611 A use-after-free flaw was found in mm/mempolicy.c in the memory management subsystem in the Linux Kernel. This issue is caused by a race between mbin… Linux Kernel 6.5+ Fix from $1,6002023-08-29 HIGH 8.8 CVE-2023-4572 Use after free in MediaStream in Google Chrome prior to 116.0.5845.140 allowed a remote attacker to potentially exploit heap corruption via a crafted… Chrome 116.0.5845.140+ Fix from $1,9502023-08-29 MEDIUM 5.5 CVE-2023-39562 GPAC v2.3-DEV-rev449-g5948e4f70-master was discovered to contain a heap-use-after-free via the gf_bs_align function at bitstream.c. This vulnerabilit… Gpac No fix yet Fix from $1,6002023-08-28 HIGH 7.5 CVE-2023-36741 Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability Edge Chromium 116.0.1938.62+ Fix from $1,9502023-08-26 HIGH 8.8 CVE-2022-46884 A potential use-after-free vulnerability existed in SVG Images if the Refresh Driver was destroyed at an inopportune time. This could have lead to m… Firefox 106.0+ Fix from $1,9502023-08-24 HIGH 8.8 CVE-2023-4429 Use after free in Loader in Google Chrome prior to 116.0.5845.110 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML… Chrome 116.0.5845.110+ Fix from $1,9502023-08-23 HIGH 8.8 CVE-2023-4430EPSS 9% Use after free in Vulkan in Google Chrome prior to 116.0.5845.110 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML… Chrome 116.0.5845.110+ Fix from $1,9502023-08-23