Browse CVEs

HIGH 7.8 CVE-2022-20421 In binder_inc_ref_for_node of binder.c, there is a possible way to corrupt memory due to a use after free. This could lead to local escalation of pri… Debian Linux Patch available Fix from $1,9502022-10-11 MEDIUM 6.7 CVE-2022-20409 In io_identity_cow of io_uring.c, there is a possible way to corrupt memory due to a use after free. This could lead to local escalation of privilege… Android Patch available Fix from $1,6002022-10-11 HIGH 7.0 CVE-2021-0696 In dllist_remove_node of TBD, there is a possible use after free bug due to a race condition. This could lead to local escalation of privilege with n… Android Mitigation only Fix from $1,9502022-10-11 MEDIUM 5.5 CVE-2022-42703 mm/rmap.c in the Linux kernel before 5.19.7 has a use-after-free related to leaf anon_vma double reuse. Linux Kernel 5.19.7+ Fix from $1,6002022-10-09 HIGH 7.8 CVE-2021-40166 A maliciously crafted PNG file in Autodesk Image Processing component may be used to attempt to free an object that has already been freed while pars… Autocad 2019.1.4 / 2020.1.5+ Fix from $1,9502022-10-07 HIGH 7.8 CVE-2022-39853 A use after free vulnerability in perf-mgr driver prior to SMR Oct-2022 Release 1 allows attacker to cause memory access fault. Android Mitigation only Fix from $1,9502022-10-07 MEDIUM 5.3 CVE-2022-39847 Use after free vulnerability in set_nft_pid and signal_handler function of NFC driver prior to SMR Oct-2022 Release 1 allows attackers to perform mal… Android Mitigation only Fix from $1,6002022-10-07 HIGH 7.8 CVE-2022-3352 Use After Free in GitHub repository vim/vim prior to 9.0.0614. Fedora 9.0.0614+ Fix from $1,9502022-09-29 HIGH 7.8 CVE-2022-38222 There is a use-after-free issue in JBIG2Stream::close() located in JBIG2Stream.cc in Xpdf 4.04. It can be triggered by sending a crafted PDF file to … Xpdf No fix yet Fix from $1,9502022-09-29 HIGH 7.5 CVE-2022-40278 An issue was discovered in Samsung TizenRT through 3.0_GBM (and 3.1_PRE). createDB in security/provisioning/src/provisioningdatabasemanager.c has a m… Tizenrt No fix yet Fix from $1,9502022-09-29 HIGH 7.8 CVE-2022-22058 Memory corruption due to use after free issue in kernel while processing ION handles in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,… Apq8009 Firmware Patch available Fix from $1,9502022-09-26 HIGH 8.8 CVE-2022-3055 Use after free in Passwords in Google Chrome prior to 105.0.5195.52 allowed a remote attacker who convinced a user to engage in specific UI interacti… Chrome 105.0.5195.52+ Fix from $1,9502022-09-26 HIGH 8.8 CVE-2022-3058 Use after free in Sign-In Flow in Google Chrome prior to 105.0.5195.52 allowed a remote attacker who convinced a user to engage in specific UI intera… Chrome 105.0.5195.52+ Fix from $1,9502022-09-26 HIGH 8.8 CVE-2022-3196 Use after free in PDF in Google Chrome prior to 105.0.5195.125 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF fil… Chrome 105.0.5195.125+ Fix from $1,9502022-09-26 HIGH 8.8 CVE-2022-3197 Use after free in PDF in Google Chrome prior to 105.0.5195.125 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF fil… Chrome 105.0.5195.125+ Fix from $1,9502022-09-26 HIGH 8.8 CVE-2022-3198 Use after free in PDF in Google Chrome prior to 105.0.5195.125 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF fil… Chrome 105.0.5195.125+ Fix from $1,9502022-09-26 HIGH 8.8 CVE-2022-3199 Use after free in Frames in Google Chrome prior to 105.0.5195.125 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML… Chrome 105.0.5195.125+ Fix from $1,9502022-09-26 HIGH 8.8 CVE-2022-3041 Use after free in WebSQL in Google Chrome prior to 105.0.5195.52 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML … Chrome 105.0.5195.52+ Fix from $1,9502022-09-26 HIGH 8.8 CVE-2022-3046 Use after free in Browser Tag in Google Chrome prior to 105.0.5195.52 allowed an attacker who convinced a user to install a malicious extension to po… Chrome 105.0.5195.52+ Fix from $1,9502022-09-26 HIGH 8.8 CVE-2022-2855 Use after free in ANGLE in Google Chrome prior to 104.0.5112.101 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML … Chrome 104.0.5112.101+ Fix from $1,9502022-09-26 HIGH 8.8 CVE-2022-2858 Use after free in Sign-In Flow in Google Chrome prior to 104.0.5112.101 allowed a remote attacker to potentially exploit heap corruption via specific… Chrome 104.0.5112.101+ Fix from $1,9502022-09-26 HIGH 8.8 CVE-2022-2859 Use after free in Chrome OS Shell in Google Chrome prior to 104.0.5112.101 allowed a remote attacker who convinced a user to engage in specific UI in… Chrome 104.0.5112.101+ Fix from $1,9502022-09-26 HIGH 8.8 CVE-2022-2998EPSS 30% Use after free in Browser Creation in Google Chrome prior to 104.0.5112.101 allowed a remote attacker who had convinced a user to engage in a specifi… Chrome 104.0.5112.101+ Fix from $1,9502022-09-26 HIGH 8.8 CVE-2022-3038 KEVEPSS 25% Use after free in Network Service in Google Chrome prior to 105.0.5195.52 allowed a remote attacker to potentially exploit heap corruption via a craf… Chrome 105.0.5195.52+ Fix from $1,9502022-09-26 HIGH 8.8 CVE-2022-3039 Use after free in WebSQL in Google Chrome prior to 105.0.5195.52 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML … Chrome 105.0.5195.52+ Fix from $1,9502022-09-26 HIGH 8.8 CVE-2022-2852 Use after free in FedCM in Google Chrome prior to 104.0.5112.101 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML … Chrome 104.0.5112.101+ Fix from $1,9502022-09-26 HIGH 7.8 CVE-2022-3297 Use After Free in GitHub repository vim/vim prior to 9.0.0579. Fedora 9.0.0579+ Fix from $1,9502022-09-25 HIGH 8.8 CVE-2022-22628 A use after free issue was addressed with improved memory management. This issue is fixed in macOS Monterey 12.3, Safari 15.4, watchOS 8.5, iOS 15.4 … Safari 8.5 / 12.3+ Fix from $1,9502022-09-23 HIGH 8.8 CVE-2022-22624 A use after free issue was addressed with improved memory management. This issue is fixed in macOS Monterey 12.3, iOS 15.4 and iPadOS 15.4, tvOS 15.4… Safari 12.3 / 15.4+ Fix from $1,9502022-09-23 HIGH 7.8 CVE-2022-3256 Use After Free in GitHub repository vim/vim prior to 9.0.0530. Fedora 9.0.0530+ Fix from $1,9502022-09-22