Browse CVEs

MEDIUM 6.5 CVE-2021-3975 A use-after-free flaw was found in libvirt. The qemuMonitorUnregister() function in qemuProcessHandleMonitorEOF is called using multiple threads with… Libvirt 7.1.0+ Fix from $1,6002022-08-23 HIGH 7.8 CVE-2022-2938 A flaw was found in the Linux kernel's implementation of Pressure Stall Information. While the feature is disabled by default, it could allow an atta… Linux Kernel 5.4.177 / 5.10.97+ Fix from $1,9502022-08-23 HIGH 7.8 CVE-2022-2946 Use After Free in GitHub repository vim/vim prior to 9.0.0246. Fedora 9.0.0246+ Fix from $1,9502022-08-23 CRITICAL 9.8 CVE-2022-38667 HTTP applications (servers) based on Crow through 1.0+4 may allow a Use-After-Free and code execution when HTTP pipelining is used. The HTTP parser s… Crow after 1.0 Fix from $2,3002022-08-22 CRITICAL 9.8 CVE-2022-23459 Jsonxx or Json++ is a JSON parser, writer and reader written in C++. In affected versions of jsonxx use of the Value class may lead to memory corrupt… Json\+\+ Mitigation only Fix from $2,3002022-08-19 HIGH 7.8 CVE-2022-2889 Use After Free in GitHub repository vim/vim prior to 9.0.0225. Fedora 9.0.0225+ Fix from $1,9502022-08-19 CRITICAL 9.8 CVE-2022-35164 LibreDWG v0.12.4.4608 & commit f2dea29 was discovered to contain a heap use-after-free via bit_copy_chain. Libredwg 0.12.4.4608+ Fix from $2,3002022-08-18 HIGH 7.8 CVE-2022-2862 Use After Free in GitHub repository vim/vim prior to 9.0.0221. Fedora 9.0.0221+ Fix from $1,9502022-08-17 CRITICAL 9.8 CVE-2022-36190 GPAC mp4box 2.1-DEV-revUNKNOWN-master has a use-after-free vulnerability in function gf_isom_dovi_config_get. This vulnerability was fixed in commit … Gpac 2.2.0+ Fix from $2,3002022-08-17 MEDIUM 5.5 CVE-2022-36149 tifig v0.2.2 was discovered to contain a heap-use-after-free via temInfoEntry(). Tifig No fix yet Fix from $1,6002022-08-16 HIGH 7.8 CVE-2022-2817 Use After Free in GitHub repository vim/vim prior to 9.0.0213. Fedora 9.0.0213+ Fix from $1,9502022-08-15 HIGH 8.8 CVE-2022-2613 Use after free in Input in Google Chrome on Chrome OS prior to 104.0.5112.79 allowed a remote attacker who convinced a user to enage in specific user… Chrome 104.0.5112.79+ Fix from $1,9502022-08-12 HIGH 8.8 CVE-2022-2614 Use after free in Sign-In Flow in Google Chrome prior to 104.0.5112.79 allowed a remote attacker to potentially exploit heap corruption via a crafted… Chrome 104.0.5112.79+ Fix from $1,9502022-08-12 HIGH 8.8 CVE-2022-2621 Use after free in Extensions in Google Chrome prior to 104.0.5112.79 allowed an attacker who convinced a user to install a malicious extension to pot… Chrome 104.0.5112.79+ Fix from $1,9502022-08-12 HIGH 8.8 CVE-2022-2603 Use after free in Omnibox in Google Chrome prior to 104.0.5112.79 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML… Chrome 104.0.5112.79+ Fix from $1,9502022-08-12 HIGH 8.8 CVE-2022-2604 Use after free in Safe Browsing in Google Chrome prior to 104.0.5112.79 allowed a remote attacker to potentially exploit heap corruption via a crafte… Chrome 104.0.5112.79+ Fix from $1,9502022-08-12 HIGH 8.8 CVE-2022-2606 Use after free in Managed devices API in Google Chrome prior to 104.0.5112.79 allowed a remote attacker who convinced a user to enable a specific Ent… Chrome 104.0.5112.79+ Fix from $1,9502022-08-12 HIGH 7.8 CVE-2021-29117 A use-after-free vulnerability when parsing a specially crafted file in Esri ArcReader 10.8.1 (and earlier) allows an unauthenticated attacker to ach… Arcreader after 10.8.1 Fix from $1,9502022-08-12 HIGH 7.8 CVE-2022-20325 In Media, there is a possible code execution due to a use after free. This could lead to local escalation of privilege with no additional execution p… Android Mitigation only Fix from $1,9502022-08-12 MEDIUM 6.7 CVE-2022-20306 In Camera Provider HAL, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with System e… Android Mitigation only Fix from $1,6002022-08-12 MEDIUM 5.5 CVE-2022-35670 Adobe Acrobat Reader versions 22.001.20169 (and earlier), 20.005.30362 (and earlier) and 17.012.30249 (and earlier) are affected by a Use After Free … Acrobat Dc after 22.001.20169 Fix from $1,6002022-08-11 HIGH 7.8 CVE-2022-35675 Adobe FrameMaker versions 2019 Update 8 (and earlier) and 2020 Update 4 (and earlier) are affected by a Use After Free vulnerability that could resul… Framemaker after 2020.0.4 Fix from $1,9502022-08-11 HIGH 7.8 CVE-2022-34263 Adobe Illustrator versions 26.3.1 (and earlier) and 25.4.6 (and earlier) are affected by a Use After Free vulnerability that could result in arbitrar… Illustrator after 26.3.1 Fix from $1,9502022-08-11 HIGH 7.8 CVE-2022-35665 Adobe Acrobat Reader versions 22.001.20169 (and earlier), 20.005.30362 (and earlier) and 17.012.30249 (and earlier) are affected by a Use After Free … Acrobat Dc after 22.001.20169 Fix from $1,9502022-08-11 MEDIUM 6.7 CVE-2022-20379 In lwis_buffer_alloc of lwis_buffer.c, there is a possible arbitrary code execution due to a use after free. This could lead to local escalation of p… Android Mitigation only Fix from $1,6002022-08-11 MEDIUM 6.7 CVE-2022-20372 In exynos5_i2c_irq of (TBD), there is a possible out of bounds write due to a use after free. This could lead to local escalation of privilege with S… Android Mitigation only Fix from $1,6002022-08-11 MEDIUM 6.7 CVE-2022-20158 In bdi_put and bdi_unregister of backing-dev.c, there is a possible memory corruption due to a use after free. This could lead to local escalation of… Android Patch available Fix from $1,6002022-08-11 HIGH 7.8 CVE-2022-34705 Windows Defender Credential Guard Elevation of Privilege Vulnerability Windows 10 No fix yet Fix from $1,9502022-08-09 HIGH 7.8 CVE-2022-34707 Windows Kernel Elevation of Privilege Vulnerability Windows 10 No fix yet Fix from $1,9502022-08-09 HIGH 7.8 CVE-2022-1158 A flaw was found in KVM. When updating a guest's page table entry, vm_pgoff was improperly used as the offset to get the page's pfn. As vaddr and vm_… Linux Kernel 5.4.189 / 5.10.110+ Fix from $1,9502022-08-05