Browse CVEs

HIGH 7.8 CVE-2020-22429 redox-os v0.1.0 was discovered to contain a use-after-free bug via the gethostbyaddr() function at /src/header/netdb/mod.rs. Redox No fix yet Fix from $1,9502023-05-03 HIGH 8.8 CVE-2023-2461 Use after free in OS Inputs in Google Chrome on ChromeOS prior to 113.0.5672.63 allowed a remote attacker who convinced a user to enage in specific U… Chrome 113.0.5672.63+ Fix from $1,9502023-05-03 HIGH 7.8 CVE-2022-33292 Memory corruption in Qualcomm IPC due to use after free while receiving the incoming packet and reposting it. Sg4150p Firmware Patch available Fix from $1,9502023-05-02 HIGH 7.8 CVE-2023-2235 A use-after-free vulnerability in the Linux Kernel Performance Events system can be exploited to achieve local privilege escalation. The perf_grou… Linux Kernel 5.15.104 / 6.1.21+ Fix from $1,9502023-05-01 HIGH 7.8 CVE-2023-2236 A use-after-free vulnerability in the Linux Kernel io_uring subsystem can be exploited to achieve local privilege escalation. Both io_install_fixed_… Linux Kernel 6.0.11+ Fix from $1,9502023-05-01 HIGH 7.8 CVE-2023-30549 Apptainer is an open source container platform for Linux. There is an ext4 use-after-free flaw that is exploitable through versions of Apptainer < 1.… Apptainer 1.1.8+ Fix from $1,9502023-04-25 HIGH 8.8 CVE-2023-27352 This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Sonos One Speaker 70.3-35220. Authenticat… One Firmware 11.7.1 / 15.1+ Fix from $1,9502023-04-20 MEDIUM 5.5 CVE-2023-2162 A use-after-free vulnerability was found in iscsi_sw_tcp_session_create in drivers/scsi/iscsi_tcp.c in SCSI sub-component in the Linux Kernel. In thi… Linux Kernel 6.2+ Fix from $1,6002023-04-19 CRITICAL 9.8 CVE-2023-21096 In OnWakelockReleased of attribution_processor.cc, there is a use after free that could lead to remote code execution with no additional execution pr… Android Patch available Fix from $2,3002023-04-19 HIGH 7.5 CVE-2023-2135 Use after free in DevTools in Google Chrome prior to 112.0.5615.137 allowed a remote attacker who convinced a user to enable specific preconditions t… Chrome 112.0.5615.137+ Fix from $1,9502023-04-19 MEDIUM 5.5 CVE-2023-28980 A Use After Free vulnerability in the routing protocol daemon of Juniper Networks Junos OS and Junos OS Evolved allows a locally authenticated attack… Junos Mitigation only Fix from $1,6002023-04-17 MEDIUM 5.3 CVE-2023-28984 A Use After Free vulnerability in the Layer 2 Address Learning Manager (l2alm) of Juniper Networks Junos OS on QFX Series allows an adjacent attacker… Junos Mitigation only Fix from $1,6002023-04-17 MEDIUM 6.4 CVE-2023-30772 The Linux kernel before 6.2.9 has a race condition and resultant use-after-free in drivers/power/supply/da9150-charger.c if a physically proximate at… Linux Kernel 6.2.9+ Fix from $1,6002023-04-16 MEDIUM 5.3 CVE-2023-29132 Irssi 1.3.x and 1.4.x before 1.4.4 has a use-after-free because of use of a stale special collector reference. This occurs when printing of a non-for… Irssi 1.4.4+ Fix from $1,6002023-04-14 HIGH 7.8 CVE-2023-26414 Adobe Substance 3D Designer version 12.4.0 (and earlier) is affected by a Use After Free vulnerability that could result in arbitrary code execution … Substance 3d Designer after 12.4.0 Fix from $1,9502023-04-13 HIGH 7.8 CVE-2023-26410 Adobe Substance 3D Designer version 12.4.0 (and earlier) is affected by a Use After Free vulnerability that could result in arbitrary code execution … Substance 3d Designer after 12.4.0 Fix from $1,9502023-04-13 HIGH 7.8 CVE-2022-33298 Memory corruption due to use after free in Modem while modem initialization. Aqt1000 Firmware No fix yet Fix from $1,9502023-04-13 HIGH 7.8 CVE-2023-26392 Adobe Substance 3D Stager version 2.0.1 (and earlier) is affected by a Use After Free vulnerability that could result in arbitrary code execution in … Substance 3d Stager after 2.0.1 Fix from $1,9502023-04-12 HIGH 7.8 CVE-2023-26384 Adobe Substance 3D Stager version 2.0.1 (and earlier) is affected by a Use After Free vulnerability that could result in arbitrary code execution in … Substance 3d Stager after 2.0.1 Fix from $1,9502023-04-12 HIGH 7.8 CVE-2023-22235 InCopy versions 18.1 (and earlier), 17.4 (and earlier) are affected by a Use After Free vulnerability that could result in arbitrary code execution i… Incopy 17.4.1 / 18.2+ Fix from $1,9502023-04-12 HIGH 7.8 CVE-2023-26423 Adobe Acrobat Reader versions 23.001.20093 (and earlier) and 20.005.30441 (and earlier) are affected by a Use After Free vulnerability that could res… Acrobat after 23.001.20093 Fix from $1,9502023-04-12 HIGH 7.8 CVE-2023-26424 Adobe Acrobat Reader versions 23.001.20093 (and earlier) and 20.005.30441 (and earlier) are affected by a Use After Free vulnerability that could res… Acrobat after 23.001.20093 Fix from $1,9502023-04-12 HIGH 7.8 CVE-2023-26422 Adobe Acrobat Reader versions 23.001.20093 (and earlier) and 20.005.30441 (and earlier) are affected by a Use After Free vulnerability that could res… Acrobat after 23.001.20093 Fix from $1,9502023-04-12 HIGH 7.8 CVE-2023-26419 Adobe Acrobat Reader versions 23.001.20093 (and earlier) and 20.005.30441 (and earlier) are affected by a Use After Free vulnerability that could res… Acrobat after 23.001.20093 Fix from $1,9502023-04-12 HIGH 7.8 CVE-2023-26420 Adobe Acrobat Reader versions 23.001.20093 (and earlier) and 20.005.30441 (and earlier) are affected by a Use After Free vulnerability that could res… Acrobat after 23.001.20093 Fix from $1,9502023-04-12 HIGH 7.8 CVE-2023-26418 Adobe Acrobat Reader versions 23.001.20093 (and earlier) and 20.005.30441 (and earlier) are affected by a Use After Free vulnerability that could res… Acrobat after 23.001.20093 Fix from $1,9502023-04-12 HIGH 7.8 CVE-2023-26417 Adobe Acrobat Reader versions 23.001.20093 (and earlier) and 20.005.30441 (and earlier) are affected by a Use After Free vulnerability that could res… Acrobat after 23.001.20093 Fix from $1,9502023-04-12 HIGH 7.0 CVE-2023-1872 A use-after-free vulnerability in the Linux Kernel io_uring system can be exploited to achieve local privilege escalation. The io_file_get_fixed fun… Linux Kernel 5.17+ Fix from $1,9502023-04-12 HIGH 7.8 CVE-2023-1829 A use-after-free vulnerability in the Linux Kernel traffic control index filter (tcindex) can be exploited to achieve local privilege escalation. The… Linux Kernel 4.14.308 / 4.19.276+ Fix from $1,9502023-04-12 MEDIUM 6.6 CVE-2023-28305 Windows DNS Server Remote Code Execution Vulnerability Windows Server 2008 Patch available Fix from $1,6002023-04-11