Browse CVEs

MEDIUM 6.7 CVE-2023-21020 In registerSignalHandlers of main.c, there is a possible local arbitrary code execution due to a use after free. This could lead to local escalation … Android Patch available Fix from $1,6002023-03-24 MEDIUM 6.7 CVE-2023-21038 In cs40l2x_cp_trigger_queue_show of cs40l2x.c, there is a possible out of bounds write due to a use after free. This could lead to local escalation o… Android Mitigation only Fix from $1,6002023-03-24 MEDIUM 5.5 CVE-2023-1249 A use-after-free flaw was found in the Linux kernel’s core dump subsystem. This flaw allows a local user to crash the system. Only if patch 390031c94… Linux Kernel 5.18+ Fix from $1,6002023-03-23 HIGH 7.8 CVE-2023-1252 A use-after-free flaw was found in the Linux kernel’s Ext4 File System in how a user triggers several file operations simultaneously with the overlay… Linux Kernel 5.10.80 / 5.14.19+ Fix from $1,9502023-03-23 HIGH 8.6 CVE-2023-20027 A vulnerability in the implementation of the IPv4 Virtual Fragmentation Reassembly (VFR) feature of Cisco IOS XE Software could allow an unauthentica… Ios Xe Mitigation only Fix from $1,9502023-03-23 HIGH 7.8 CVE-2023-26426 Illustrator version 26.5.2 (and earlier) and 27.2.0 (and earlier) are affected by a Use After Free vulnerability that could result in arbitrary code … Illustrator 27.3.1+ Fix from $1,9502023-03-22 HIGH 7.8 CVE-2022-4095 A use-after-free flaw was found in Linux kernel before 5.19.2. This issue occurs in cmd_hdl_filter in drivers/staging/rtl8712/rtl8712_cmd.c, allowing… Linux Kernel 4.9.328 / 4.14.293+ Fix from $1,9502023-03-22 HIGH 7.8 CVE-2023-1281 Use After Free vulnerability in Linux kernel traffic control index filter (tcindex) allows Privilege Escalation. The imperfect hash area can be updat… Linux Kernel 5.10.169 / 5.15.95+ Fix from $1,9502023-03-22 HIGH 8.8 CVE-2023-1528 Use after free in Passwords in Google Chrome prior to 111.0.5563.110 allowed a remote attacker who had compromised the renderer process to potentiall… Chrome 111.0.5563.110+ Fix from $1,9502023-03-21 HIGH 8.8 CVE-2023-1530 Use after free in PDF in Google Chrome prior to 111.0.5563.110 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML pa… Chrome 111.0.5563.110+ Fix from $1,9502023-03-21 HIGH 8.8 CVE-2023-1531 Use after free in ANGLE in Google Chrome prior to 111.0.5563.110 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML … Chrome 111.0.5563.110+ Fix from $1,9502023-03-21 HIGH 8.8 CVE-2023-1533 Use after free in WebProtect in Google Chrome prior to 111.0.5563.110 allowed a remote attacker to potentially exploit heap corruption via a crafted … Chrome 111.0.5563.110+ Fix from $1,9502023-03-21 HIGH 7.8 CVE-2022-42332 x86 shadow plus log-dirty mode use-after-free In environments where host assisted address translation is necessary but Hardware Assisted Paging (HAP)… Debian Linux Mitigation only Fix from $1,9502023-03-21 CRITICAL 9.8 CVE-2023-21459 Use after free vulnerability in decon driver prior to SMR Mar-2023 Release 1 allows attackers to cause memory access fault. Android Mitigation only Fix from $2,3002023-03-16 HIGH 7.8 CVE-2023-23420 Windows Kernel Elevation of Privilege Vulnerability Windows 10 10.0.10240.19805 / 10.0.14393.5786+ Fix from $1,9502023-03-14 HIGH 7.8 CVE-2023-23421 Windows Kernel Elevation of Privilege Vulnerability Windows 10 10.0.10240.19805 / 10.0.14393.5786+ Fix from $1,9502023-03-14 HIGH 8.1 CVE-2023-23404 Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability Windows 10 1507 10.0.10240.19805 / 10.0.14393.5786+ Fix from $1,9502023-03-14 CRITICAL 9.8 CVE-2023-23392 HTTP Protocol Stack Remote Code Execution Vulnerability Windows 11 21h2 10.0.22000.1413 / 10.0.22000.1696+ Fix from $2,3002023-03-14 MEDIUM 5.5 CVE-2022-47460 In gpu device, there is a memory corruption due to a use after free. This could lead to local denial of service in kernel. Android No fix yet Fix from $1,6002023-03-10 HIGH 7.8 CVE-2022-33245 Memory corruption in WLAN due to use after free Apq8064au Firmware Patch available Fix from $1,9502023-03-10 HIGH 7.8 CVE-2023-22436 The kernel subsystem function check_permission_for_set_tokenid within OpenHarmony-v3.1.5 and prior versions has an UAF vulnerability which local at… Openharmony after 3.1.5 Fix from $1,9502023-03-10 HIGH 7.8 CVE-2023-0030 A use-after-free flaw was found in the Linux kernel’s nouveau driver in how a user triggers a memory overflow that causes the nvkm_vma_tail function … Linux Kernel 5.0+ Fix from $1,9502023-03-08 HIGH 8.8 CVE-2022-46394 An issue was discovered in the Arm Mali GPU Kernel Driver. A non-privileged user can make improper GPU processing operations to gain access to alread… Avalon Gpu Kernel Driver Mitigation only Fix from $1,9502023-03-08 HIGH 8.8 CVE-2023-1227 Use after free in Core in Google Chrome on Lacros prior to 111.0.5563.64 allowed a remote attacker who convinced a user to engage in specific UI inte… Chrome 111.0.5563.64+ Fix from $1,9502023-03-07 HIGH 8.8 CVE-2023-1213 Use after free in Swiftshader in Google Chrome prior to 111.0.5563.64 allowed a remote attacker to potentially exploit heap corruption via a crafted … Chrome 111.0.5563.64+ Fix from $1,9502023-03-07 HIGH 8.8 CVE-2023-1216 Use after free in DevTools in Google Chrome prior to 111.0.5563.64 allowed a remote attacker who had convienced the user to engage in direct UI inter… Chrome 111.0.5563.64+ Fix from $1,9502023-03-07 HIGH 8.8 CVE-2023-1218 Use after free in WebRTC in Google Chrome prior to 111.0.5563.64 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML … Chrome 111.0.5563.64+ Fix from $1,9502023-03-07 HIGH 7.8 CVE-2022-3424 A use-after-free flaw was found in the Linux kernel’s SGI GRU driver in the way the first gru_file_unlocked_ioctl function is called by the user, whe… Linux Kernel 4.9.337 / 4.14.303+ Fix from $1,9502023-03-06 CRITICAL 9.8 CVE-2023-24734EPSS 21% An arbitrary file upload vulnerability in the camera_upload.php component of PMB v7.4.6 allows attackers to execute arbitrary code via a crafted imag… Pmb No fix yet Fix from $2,3002023-03-06 HIGH 8.8 CVE-2022-46395 An issue was discovered in the Arm Mali GPU Kernel Driver. A non-privileged user can make improper GPU processing operations to gain access to alread… Avalon Gpu Kernel Driver No fix yet Fix from $1,9502023-03-06