Browse CVEs

HIGH 7.8 CVE-2021-41682 There is a heap-use-after-free at ecma-helpers-string.c:1940 in ecma_compare_ecma_non_direct_strings in JerryScript 2.4.0 Jerryscript Patch available Fix from $1,9502022-06-20 CRITICAL 9.8 CVE-2022-21806 A use-after-free vulnerability exists in the mips_collector appsrv_server functionality of Anker Eufy Homebase 2 2.1.8.5h. A specially-crafted set of… Eufy Homebase 2 Firmware No fix yet Fix from $2,3002022-06-17 MEDIUM 5.3 CVE-2022-27512 Temporary disruption of the ADM license service. The impact of this includes preventing new licenses from being issued or renewed by Citrix ADM. Application Delivery Management 13.0-85.19 / 13.1-21.53+ Fix from $1,6002022-06-16 HIGH 7.8 CVE-2022-30655 Adobe InCopy versions 17.2 (and earlier) and 16.4.1 (and earlier) are affected by a Use-After-Free vulnerability that could result in arbitrary code … Incopy after 17.2 Fix from $1,9502022-06-16 HIGH 7.8 CVE-2022-30657 Adobe InCopy versions 17.2 (and earlier) and 16.4.1 (and earlier) are affected by a Use-After-Free vulnerability that could result in arbitrary code … Incopy after 17.2 Fix from $1,9502022-06-16 HIGH 7.8 CVE-2022-30647 Adobe Illustrator versions 26.0.2 (and earlier) and 25.4.5 (and earlier) are affected by a Use-After-Free vulnerability that could result in arbitrar… Illustrator after 26.0.2 Fix from $1,9502022-06-15 HIGH 7.8 CVE-2022-30648 Adobe Illustrator versions 26.0.2 (and earlier) and 25.4.5 (and earlier) are affected by a Use-After-Free vulnerability that could result in arbitrar… Illustrator after 26.0.2 Fix from $1,9502022-06-15 HIGH 7.8 CVE-2022-28842 Adobe Bridge version 12.0.1 (and earlier versions) is affected by a Use-After-Free vulnerability that could result in arbitrary code execution in the… Bridge after 12.0.1 Fix from $1,9502022-06-15 HIGH 7.8 CVE-2022-28849 Adobe Bridge version 12.0.1 (and earlier versions) is affected by a Use-After-Free vulnerability that could result in arbitrary code execution in the… Bridge after 12.0.1 Fix from $1,9502022-06-15 MEDIUM 6.7 CVE-2022-20185 In TBD of TBD, there is a possible use after free bug. This could lead to local escalation of privilege with System execution privileges needed. User… Android Mitigation only Fix from $1,6002022-06-15 HIGH 7.0 CVE-2022-20141 In ip_check_mc_rcu of igmp.c, there is a possible use after free due to improper locking. This could lead to local escalation of privilege when openi… Android Mitigation only Fix from $1,9502022-06-15 MEDIUM 5.5 CVE-2022-21504 The code in UEK6 U3 was missing an appropiate file descriptor count to be missing. This resulted in a use count error that allowed a file descriptor … Linux Patch available Fix from $1,6002022-06-14 HIGH 7.8 CVE-2022-22071 KEV Possible use after free when process shell memory is freed using IOCTL munmap call and process initialization is in progress in Snapdragon Auto, Snap… Apq8053 Firmware Patch available Fix from $1,9502022-06-14 HIGH 7.8 CVE-2022-22090 Memory corruption in audio due to use after free while managing buffers from internal cache in Snapdragon Compute, Snapdragon Connectivity, Snapdrago… Sd 8 Gen1 5g Firmware Mitigation only Fix from $1,9502022-06-14 HIGH 7.8 CVE-2022-22068 kernel event may contain unexpected content which is not generated by NPU software in asynchronous execution mode in Snapdragon Auto, Snapdragon Comp… Apq8053 Firmware Patch available Fix from $1,9502022-06-14 MEDIUM 6.7 CVE-2021-35120 Improper handling between export and release functions on the same handle from client can lead to use after free in Snapdragon Compute, Snapdragon Co… Apq8053 Firmware Patch available Fix from $1,6002022-06-14 HIGH 7.8 CVE-2021-35130 Memory corruption in graphics support layer due to use after free condition in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, S… Ar8035 Firmware Patch available Fix from $1,9502022-06-14 HIGH 7.8 CVE-2021-30334 Possible use after free due to lack of null check of DRM file status after file structure is freed in Snapdragon Auto, Snapdragon Compute, Snapdragon… Apq8009w Firmware Patch available Fix from $1,9502022-06-14 HIGH 7.8 CVE-2022-29522 Use after free vulnerability exists in the simulator module contained in the graphic editor 'V-SFT' versions prior to v6.1.6.0, which may allow an at… V Server 4.0.12.0 / 4.0.13.0a+ Fix from $1,9502022-06-14 HIGH 7.8 CVE-2022-2042 Use After Free in GitHub repository vim/vim prior to 8.2. Vim 8.2.5072 / 11.7+ Fix from $1,9502022-06-10 HIGH 7.5 CVE-2022-29227 Envoy is a cloud-native high-performance edge/middle/service proxy. In versions prior to 1.22.1 if Envoy attempts to send an internal redirect of an … Envoy 1.22.1+ Fix from $1,9502022-06-09 HIGH 7.5 CVE-2022-29228 Envoy is a cloud-native high-performance proxy. In versions prior to 1.22.1 the OAuth filter would try to invoke the remaining filters in the chain a… Envoy 1.22.1+ Fix from $1,9502022-06-09 HIGH 7.8 CVE-2022-1998 A use after free in the Linux kernel File System notify functionality was found in the way user triggers copy_info_records_to_user() call to fail in … Linux Kernel 5.10.97 / 5.15.20+ Fix from $1,9502022-06-09 HIGH 8.8 CVE-2022-21745 In WIFI Firmware, there is a possible memory corruption due to a use after free. This could lead to remote escalation of privilege, when devices are … Android Mitigation only Fix from $1,9502022-06-06 HIGH 7.8 CVE-2022-32250 net/netfilter/nf_tables_api.c in the Linux kernel through 5.18.1 allows a local user (able to create user/net namespaces) to escalate privileges to r… Linux Kernel 4.9.318 / 4.14.283+ Fix from $1,9502022-06-02 HIGH 7.8 CVE-2022-29692 Unicorn Engine v1.0.3 was discovered to contain a use-after-free vulnerability via the hook function. Unicorn Engine No fix yet Fix from $1,9502022-06-02 HIGH 7.8 CVE-2022-1968 Use After Free in GitHub repository vim/vim prior to 8.2. Debian Linux 8.2.5050 / 13.0+ Fix from $1,9502022-06-02 HIGH 7.8 CVE-2022-1786 A use-after-free flaw was found in the Linux kernel’s io_uring subsystem in the way a user sets up a ring with IORING_SETUP_IOPOLL with more than one… Linux Kernel 5.12+ Fix from $1,9502022-06-02 HIGH 7.8 CVE-2022-1419 The root cause of this vulnerability is that the ioctl$DRM_IOCTL_MODE_DESTROY_DUMB can decrease refcount of *drm_vgem_gem_object *(created in *vgem_g… Linux Kernel 5.6+ Fix from $1,9502022-06-02 HIGH 7.8 CVE-2022-1652 Linux Kernel could allow a local attacker to execute arbitrary code on the system, caused by a concurrency use-after-free flaw in the bad_flp_intr fu… Linux Kernel 4.9.316 / 4.14.281+ Fix from $1,9502022-06-02