Browse CVEs

HIGH 7.0 CVE-2022-41222 mm/mremap.c in the Linux kernel before 5.13.3 has a use-after-free via a stale TLB because an rmap lock is not held during a PUD move. Linux Kernel 5.4.211 / 5.10.137+ Fix from $1,9502022-09-21 MEDIUM 5.5 CVE-2022-41218 In drivers/media/dvb-core/dmxdev.c in the Linux kernel through 5.19.10, there is a use-after-free caused by refcount races, affecting dvb_demux_open … Linux Kernel after 5.19.10 Fix from $1,6002022-09-21 CRITICAL 9.8 CVE-2022-40009 SWFTools commit 772e55a was discovered to contain a heap-use-after-free via the function grow_unicode at /lib/ttf.c. Swftools No fix yet Fix from $2,3002022-09-20 HIGH 7.8 CVE-2022-3239 A flaw use after free in the Linux kernel video4linux driver was found in the way user triggers em28xx_usb_probe() for the Empia 28xx based TV cards.… Linux Kernel 4.14.295 / 4.19.238+ Fix from $1,9502022-09-19 MEDIUM 5.5 CVE-2022-35709 Adobe Bridge version 12.0.2 (and earlier) and 11.1.3 (and earlier) are affected by a Use After Free vulnerability that could lead to disclosure of se… Bridge 11.1.4 / 12.0.3+ Fix from $1,6002022-09-19 MEDIUM 5.5 CVE-2022-38425 Adobe Bridge version 12.0.2 (and earlier) and 11.1.3 (and earlier) are affected by a Use After Free vulnerability that could lead to disclosure of se… Bridge 11.1.4 / 12.0.3+ Fix from $1,6002022-09-19 HIGH 7.8 CVE-2022-35704 Adobe Bridge version 12.0.2 (and earlier) and 11.1.3 (and earlier) are affected by a Use After Free vulnerability that could result in arbitrary code… Bridge 11.1.4 / 12.0.3+ Fix from $1,9502022-09-19 HIGH 7.8 CVE-2022-3235 Use After Free in GitHub repository vim/vim prior to 9.0.0490. Fedora 9.0.0490+ Fix from $1,9502022-09-18 HIGH 7.8 CVE-2022-38434 Adobe Photoshop versions 22.5.8 (and earlier) and 23.4.2 (and earlier) are affected by a Use After Free vulnerability that could result in arbitrary … Photoshop after 23.4.2 Fix from $1,9502022-09-16 MEDIUM 5.5 CVE-2022-38428 Adobe Photoshop versions 22.5.8 (and earlier) and 23.4.2 (and earlier) are affected by a Use After Free vulnerability that could lead to disclosure o… Photoshop after 23.4.2 Fix from $1,6002022-09-16 HIGH 7.8 CVE-2022-3176 There exists a use-after-free in io_uring in the Linux kernel. Signalfd_poll() and binder_poll() use a waitqueue whose lifetime is the current task. … Linux Kernel 5.4.212 / 5.10.141+ Fix from $1,9502022-09-16 HIGH 7.8 CVE-2022-25693 Memory corruption in graphics due to use-after-free while graphics profiling in Snapdragon Connectivity, Snapdragon Mobile Sd 8 Gen1 5g Firmware Patch available Fix from $1,9502022-09-16 HIGH 7.8 CVE-2022-22092 Memory corruption in kernel due to use after free issue in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile Ar8035 Firmware Mitigation only Fix from $1,9502022-09-16 HIGH 7.8 CVE-2022-22095 Memory corruption in synx driver due to use-after-free condition in the synx driver due to accessing object handles without acquiring lock in Snapdra… Apq8053 Firmware Patch available Fix from $1,9502022-09-16 HIGH 7.8 CVE-2022-40637 This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ansys SpaceClaim 2022 R1. User interaction is requi… Spaceclaim Mitigation only Fix from $1,9502022-09-15 HIGH 7.8 CVE-2022-40638 This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ansys SpaceClaim 2022 R1. User interaction is requi… Spaceclaim Mitigation only Fix from $1,9502022-09-15 HIGH 7.8 CVE-2022-40639 This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ansys SpaceClaim 2022 R1. User interaction is requi… Spaceclaim Mitigation only Fix from $1,9502022-09-15 HIGH 7.8 CVE-2022-2977 A flaw was found in the Linux kernel implementation of proxied virtualized TPM devices. On a system where virtualized TPM devices are configured (thi… Linux Kernel 4.14.276 / 4.19.238+ Fix from $1,9502022-09-14 HIGH 8.1 CVE-2022-40674 libexpat before 2.4.9 has a use-after-free in the doContent function in xmlparse.c. Debian Linux 2.4.9+ Fix from $1,9502022-09-14 HIGH 7.0 CVE-2021-0697 In PVRSRVRGXSubmitTransferKM of rgxtransfer.c, there is a possible user after free due to a race condition. This could lead to local escalation of pr… Android Mitigation only Fix from $1,9502022-09-13 HIGH 7.8 CVE-2022-2979 Opening a specially crafted file could cause the affected product to fail to release its memory reference potentially resulting in arbitrary code exe… Cx Programmer 9.78+ Fix from $1,9502022-09-12 MEDIUM 5.5 CVE-2022-40133 A use-after-free(UAF) vulnerability was found in function 'vmw_execbuf_tie_context' in drivers/gpu/vmxgfx/vmxgfx_execbuf.c in Linux kernel's vmwgfx d… Linux Kernel 6.1.7+ Fix from $1,6002022-09-09 MEDIUM 5.5 CVE-2022-38457 A use-after-free(UAF) vulnerability was found in function 'vmw_cmd_res_check' in drivers/gpu/vmxgfx/vmxgfx_execbuf.c in Linux kernel's vmwgfx driver … Linux Kernel 6.1.7+ Fix from $1,6002022-09-09 HIGH 7.8 CVE-2022-36847 Use after free vulnerability in mtp_send_signal function of MTP driver prior to SMR Sep-2022 Release 1 allows attackers to perform malicious actions. Android Mitigation only Fix from $1,9502022-09-09 HIGH 7.8 CVE-2022-36849 Use after free vulnerability in sdp_mm_set_process_sensitive function of sdpmm driver prior to SMR Sep-2022 Release 1 allows attackers to perform mal… Android Mitigation only Fix from $1,9502022-09-09 HIGH 7.8 CVE-2022-36855 A use after free vulnerability in iva_ctl driver prior to SMR Sep-2022 Release 1 allows attacker to cause memory access fault. Android Mitigation only Fix from $1,9502022-09-09 CRITICAL 9.8 CVE-2022-2526 A use-after-free vulnerability was found in systemd. This issue occurs due to the on_stream_io() function and dns_stream_complete() function in 'reso… Systemd Patch available Fix from $2,3002022-09-09 HIGH 7.8 CVE-2022-3134 Use After Free in GitHub repository vim/vim prior to 9.0.0389. Debian Linux 9.0.0389+ Fix from $1,9502022-09-06 MEDIUM 6.7 CVE-2022-26453 In teei, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execution privil… Android Mitigation only Fix from $1,6002022-09-06 HIGH 7.8 CVE-2022-3099 Use After Free in GitHub repository vim/vim prior to 9.0.0360. Fedora 9.0.0360+ Fix from $1,9502022-09-03