Browse CVEs

HIGH 7.8 CVE-2023-29321 Adobe Animate versions 22.0.9 (and earlier) and 23.0.1 (and earlier) are affected by a Use After Free vulnerability that could result in arbitrary co… Animate after 22.0.9 Fix from $1,9502023-06-15 HIGH 7.0 CVE-2023-21101 In multiple functions of WVDrmPlugin.cpp, there is a possible use after free due to a race condition. This could lead to local escalation of privileg… Android Mitigation only Fix from $1,9502023-06-15 HIGH 8.8 CVE-2023-21108 In sdpu_build_uuid_seq of sdp_discovery.cc, there is a possible out of bounds write due to a use after free. This could lead to remote code execution… Android Patch available Fix from $1,9502023-06-15 HIGH 7.8 CVE-2023-21120 In multiple functions of cdm_engine.cpp, there is a possible use-after-free due to improper locking. This could lead to local escalation of privilege… Android Mitigation only Fix from $1,9502023-06-15 HIGH 7.8 CVE-2023-32018 Windows Hello Remote Code Execution Vulnerability Windows 11 22h2 10.0.22621.1848+ Fix from $1,9502023-06-14 HIGH 7.3 CVE-2023-33128 .NET and Visual Studio Remote Code Execution Vulnerability .net 6.0.18 / 7.0.7+ Fix from $1,9502023-06-14 HIGH 7.0 CVE-2023-29361 Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability Windows 10 21h2 10.0.19044.3086 / 10.0.19045.3087+ Fix from $1,9502023-06-14 HIGH 7.8 CVE-2023-29365 Windows Media Remote Code Execution Vulnerability Windows 10 1507 10.0.10240.19983 / 10.0.14393.5989+ Fix from $1,9502023-06-14 HIGH 7.8 CVE-2023-29358 Windows GDI Elevation of Privilege Vulnerability Windows 10 1507 10.0.10240.19983 / 10.0.14393.5989+ Fix from $1,9502023-06-14 HIGH 8.8 CVE-2023-3214 Use after free in Autofill payments in Google Chrome prior to 114.0.5735.133 allowed a remote attacker to potentially exploit heap corruption via a c… Chrome 114.0.5735.133+ Fix from $1,9502023-06-13 HIGH 8.8 CVE-2023-3215EPSS 14% Use after free in WebRTC in Google Chrome prior to 114.0.5735.133 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML… Chrome 114.0.5735.133+ Fix from $1,9502023-06-13 HIGH 8.8 CVE-2023-3217EPSS 13% Use after free in WebXR in Google Chrome prior to 114.0.5735.133 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML … Chrome 114.0.5735.133+ Fix from $1,9502023-06-13 MEDIUM 6.7 CVE-2023-3159 A use after free issue was discovered in driver/firewire in outbound_phy_packet_callback in the Linux Kernel. In this flaw a local attacker with spec… Linux Kernel 5.18+ Fix from $1,6002023-06-12 HIGH 7.5 CVE-2023-34494 NanoMQ 0.16.5 is vulnerable to heap-use-after-free in the nano_ctx_send function of nmq_mqtt.c. Nanomq Patch available Fix from $1,9502023-06-12 HIGH 7.1 CVE-2023-3141 A use-after-free flaw was found in r592_remove in drivers/memstick/host/r592.c in media access in the Linux Kernel. This flaw allows a local attacker… Linux Kernel 4.14.316 / 4.19.284+ Fix from $1,9502023-06-09 HIGH 7.5 CVE-2023-33657 A use-after-free vulnerability exists in NanoMQ 0.17.2. The vulnerability can be triggered by calling the function nni_mqtt_msg_get_publish_property(… Nanomq Patch available Fix from $1,9502023-06-08 MEDIUM 5.5 CVE-2023-33595 CPython v3.12.0 alpha 7 was discovered to contain a heap use-after-free via the function ascii_decode at /Objects/unicodeobject.c. Python Patch available Fix from $1,6002023-06-07 HIGH 8.1 CVE-2023-30576 Apache Guacamole 0.9.10 through 1.5.1 may continue to reference a freed RDP audio input buffer. Depending on timing, this may allow an attacker to ex… Guacamole 1.5.2+ Fix from $1,9502023-06-07 HIGH 7.8 CVE-2023-28653 The affected application lacks proper validation of user-supplied data when parsing project files (e.g., CSP). This could lead to a use-after-free vu… Cscape Mitigation only Fix from $1,9502023-06-06 MEDIUM 6.7 CVE-2023-20744 In vcu, there is a possible use after free due to a logic error. This could lead to local escalation of privilege with System execution privileges ne… Iot Yocto Mitigation only Fix from $1,6002023-06-06 HIGH 7.8 CVE-2022-33263 Memory corruption due to use after free in Core when multiple DCI clients register and deregister. Aqt1000 Firmware Mitigation only Fix from $1,9502023-06-06 HIGH 7.8 CVE-2023-3111 A use after free vulnerability was found in prepare_to_relocate in fs/btrfs/relocation.c in btrfs in the Linux Kernel. This possible flaw can be trig… Linux Kernel 4.14.318 / 4.19.286+ Fix from $1,9502023-06-05 HIGH 8.8 CVE-2023-29536 An attacker could cause the memory manager to incorrectly free a pointer that addresses attacker-controlled memory, resulting in an assertion, memory… Firefox 102.10 / 112.0+ Fix from $1,9502023-06-02 HIGH 8.8 CVE-2023-29543 An attacker could have caused memory corruption and a potentially exploitable use-after-free of a pointer in a global object's debugger vector. This … Firefox 112.0+ Fix from $1,9502023-06-02 HIGH 8.8 CVE-2023-25735 Cross-compartment wrappers wrapping a scripted proxy could have caused objects from other compartments to be stored in the main compartment resulting… Firefox 102.8 / 110.0+ Fix from $1,9502023-06-02 HIGH 8.8 CVE-2023-25739 Module load requests that failed were not being checked as to whether or not they were cancelled causing a use-after-free in <code>ScriptLoadContext<… Firefox 102.8 / 110.0+ Fix from $1,9502023-06-02 MEDIUM 5.5 CVE-2023-28469 An issue was discovered in the Arm Mali GPU Kernel Driver. A non-privileged user can make improper GPU processing operations to gain access to alread… Avalon Gpu Kernel Driver Mitigation only Fix from $1,6002023-06-02 HIGH 7.8 CVE-2023-2598 A flaw was found in the fixed buffer registration code for io_uring (io_sqe_buffer_register in io_uring/rsrc.c) in the Linux kernel that allows out-o… Linux Kernel 6.3.2+ Fix from $1,9502023-06-01 MEDIUM 5.5 CVE-2023-2985 A use after free flaw was found in hfsplus_put_super in fs/hfsplus/super.c in the Linux Kernel. This flaw could allow a local user to cause a denial … Linux Kernel 6.3+ Fix from $1,6002023-06-01 HIGH 8.8 CVE-2023-2930 Use after free in Extensions in Google Chrome prior to 114.0.5735.90 allowed an attacker who convinced a user to install a malicious extension to pot… Chrome 114.0.5735.90+ Fix from $1,9502023-05-30