Browse CVEs

HIGH 7.5 CVE-2023-2912 Use After Free vulnerability in Secomea SiteManager Embedded allows Obstruction. Sitemanager Embedded 11.0+ Fix from $1,9502023-07-17 MEDIUM 6.5 CVE-2023-36833 A Use After Free vulnerability in the packet forwarding engine (PFE) of Juniper Networks Junos OS Evolved on PTX10001-36MR, and PTX10004, PTX10008, P… Junos Os Evolved Mitigation only Fix from $1,6002023-07-14 HIGH 7.8 CVE-2023-21255 In multiple functions of binder.c, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege wi… Debian Linux Patch available Fix from $1,9502023-07-13 MEDIUM 6.7 CVE-2023-35693 In incfs_kill_sb of fs/incfs/vfs.c, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege w… Android Patch available Fix from $1,6002023-07-13 HIGH 8.8 CVE-2023-3600 During the worker lifecycle, a use-after-free condition could have occurred, which could have led to a potentially exploitable crash. This vulnerabil… Firefox 115.0.1 / 115.0.2+ Fix from $1,9502023-07-12 HIGH 7.8 CVE-2023-2763 Use-After-Free, Out-of-bounds Write and Heap-based Buffer Overflow vulnerabilities exist in the DWG and DXF file reading procedure in SOLIDWORKS Desk… 3dexperience Solidworks after 2023 Fix from $1,9502023-07-12 HIGH 7.8 CVE-2023-2762 A Use-After-Free vulnerability in SLDPRT file reading procedure exists in SOLIDWORKS Desktop from Release SOLIDWORKS 2021 through Release SOLIDWORKS … 3dexperience Solidworks after 2023 Fix from $1,9502023-07-12 MEDIUM 6.6 CVE-2023-35351 Windows Active Directory Certificate Services (AD CS) Remote Code Execution Vulnerability Windows Server 2008 Patch available Fix from $1,6002023-07-11 HIGH 7.8 CVE-2023-35313 Windows Online Certificate Status Protocol (OCSP) SnapIn Remote Code Execution Vulnerability Windows 10 1507 10.0.10240.20048 / 10.0.14393.6085+ Fix from $1,9502023-07-11 HIGH 7.8 CVE-2023-35323 Windows OLE Remote Code Execution Vulnerability Windows 11 21h2 10.0.22000.2176+ Fix from $1,9502023-07-11 HIGH 8.8 CVE-2023-35300 Remote Procedure Call Runtime Remote Code Execution Vulnerability Windows 10 1507 10.0.10240.20048 / 10.0.14393.6085+ Fix from $1,9502023-07-11 HIGH 7.8 CVE-2023-33149 Microsoft Office Graphics Remote Code Execution Vulnerability 365 Apps Patch available Fix from $1,9502023-07-11 HIGH 8.8 CVE-2023-33153 Microsoft Outlook Remote Code Execution Vulnerability 365 Apps Patch available Fix from $1,9502023-07-11 MEDIUM 6.7 CVE-2023-32055 Active Template Library Elevation of Privilege Vulnerability Windows 10 1507 10.0.10240.20048 / 10.0.14393.6085+ Fix from $1,6002023-07-11 HIGH 7.8 CVE-2023-21756 Windows Win32k Elevation of Privilege Vulnerability Windows 10 1507 10.0.10240.20048 / 10.0.14393.6085+ Fix from $1,9502023-07-11 HIGH 7.2 CVE-2023-32033 Microsoft Failover Cluster Remote Code Execution Vulnerability Windows Server 2008 Patch available Fix from $1,9502023-07-11 HIGH 8.8 CVE-2023-32038 Microsoft ODBC Driver Remote Code Execution Vulnerability Windows 10 1507 10.0.10240.20048 / 10.0.14393.6085+ Fix from $1,9502023-07-11 HIGH 7.8 CVE-2023-3269 A vulnerability exists in the memory management subsystem of the Linux kernel. The lock handling for accessing and updating virtual memory areas (VMA… Linux Kernel 6.1.37 / 6.3.11+ Fix from $1,9502023-07-11 HIGH 8.0 CVE-2023-1902 The bluetooth HCI host layer logic not clearing a global reference to a state pointer after handling connection events may allow a malicious HCI Cont… Zephyr after 3.3.0 Fix from $1,9502023-07-10 CRITICAL 9.1 CVE-2021-32495 Radare2 has a use-after-free vulnerability in pyc parser's get_none_object function. Attacker can read freed memory afterwards. This will allow attac… Radare2 Patch available Fix from $2,3002023-07-07 HIGH 7.5 CVE-2021-33796 In MuJS before version 1.1.2, a use-after-free flaw in the regexp source property access may cause denial of service. Mujs 1.1.2+ Fix from $1,9502023-07-07 CRITICAL 9.8 CVE-2023-29824 A use-after-free issue was discovered in Py_FindObjects() function in SciPy versions prior to 1.8.0. NOTE: the vendor and discoverer indicate that th… Scipy 1.8.0+ Fix from $2,3002023-07-06 MEDIUM 5.5 CVE-2023-37454 An issue was discovered in the Linux kernel through 6.4.2. A crafted UDF filesystem image causes a use-after-free write operation in the udf_put_supe… Linux Kernel after 6.4.2 Fix from $1,6002023-07-06 CRITICAL 9.8 CVE-2022-48511 Use After Free (UAF) vulnerability in the audio PCM driver module under special conditions. Successful exploitation of this vulnerability may cause a… Emui Mitigation only Fix from $2,3002023-07-06 CRITICAL 9.8 CVE-2022-48512 Use After Free (UAF) vulnerability in the Vdecoderservice service. Successful exploitation of this vulnerability may cause the image decoding feature… Emui Mitigation only Fix from $2,3002023-07-06 CRITICAL 9.8 CVE-2021-46894 Use After Free (UAF) vulnerability in the uinput module.Successful exploitation of this vulnerability may lead to kernel privilege escalation. Emui Mitigation only Fix from $2,3002023-07-06 HIGH 7.8 CVE-2023-31248 Linux Kernel nftables Use-After-Free Local Privilege Escalation Vulnerability; `nft_chain_lookup_byid()` failed to check whether a chain was active a… Linux Kernel 5.10.188 / 5.15.121+ Fix from $1,9502023-07-05 HIGH 8.8 CVE-2023-37209 A use-after-free condition existed in `NotifyOnHistoryReload` where a `LoadingSessionHistoryEntry` object was freed and a reference to that object re… Firefox 115.0+ Fix from $1,9502023-07-05 HIGH 8.8 CVE-2023-37201 An attacker could have triggered a use-after-free condition when creating a WebRTC connection over HTTPS. This vulnerability affects Firefox < 115, F… Firefox 102.13 / 115.0+ Fix from $1,9502023-07-05 HIGH 8.8 CVE-2023-37202 Cross-compartment wrappers wrapping a scripted proxy could have caused objects from other compartments to be stored in the main compartment resulting… Firefox 102.13 / 115.0+ Fix from $1,9502023-07-05