Browse CVEs

CRITICAL 9.8 CVE-2020-11272 Before enqueuing a frame to the PE queue for further processing, an entry in a hash table can be deleted and using a stale version later can lead to … Apq8009 Firmware Patch available Fix from $2,3002021-02-22 HIGH 7.4 CVE-2020-11277 Possible race condition during async fastrpc session after sending RPC message due to the fastrpc ctx gets free during async session in Snapdragon Co… Pm3003a Firmware Mitigation only Fix from $1,9502021-02-22 MEDIUM 6.7 CVE-2020-11147 Use after free issue in audio modules while removing and freeing objects during list iteration due to incorrect usage of macro in Snapdragon Compute,… Aqt1000 Firmware Mitigation only Fix from $1,6002021-02-22 CRITICAL 9.8 CVE-2021-27377 An issue was discovered in the yottadb crate before 1.2.0 for Rust. For some memory-allocation patterns, ydb_subscript_next_st and ydb_subscript_prev… Yottadb 1.2.0+ Fix from $2,3002021-02-18 MEDIUM 5.5 CVE-2020-12361 Use after free in some Intel(R) Graphics Drivers before version 15.33.51.5146 may allow an authenticated user to potentially enable denial of service… Graphics Drivers 15.33.51.5146+ Fix from $1,6002021-02-17 HIGH 7.8 CVE-2020-35512 A use-after-free flaw was found in D-Bus Development branch <= 1.13.16, dbus-1.12.x stable branch <= 1.12.18, and dbus-1.10.x and older branches <= 1… Dbus Mitigation only Fix from $1,9502021-02-15 HIGH 8.8 CVE-2021-21035 Acrobat Reader DC versions versions 2020.013.20074 (and earlier), 2020.001.30018 (and earlier) and 2017.011.30188 (and earlier) are affected by a Use… Acrobat after 20.013.20074 Fix from $1,9502021-02-11 HIGH 7.8 CVE-2021-21039 Acrobat Reader DC versions versions 2020.013.20074 (and earlier), 2020.001.30018 (and earlier) and 2017.011.30188 (and earlier) are affected by a Use… Acrobat after 20.013.20074 Fix from $1,9502021-02-11 HIGH 7.8 CVE-2021-21040 Acrobat Reader DC versions versions 2020.013.20074 (and earlier), 2020.001.30018 (and earlier) and 2017.011.30188 (and earlier) are affected by a Use… Acrobat after 20.013.20074 Fix from $1,9502021-02-11 HIGH 7.8 CVE-2021-21041 Acrobat Reader DC versions versions 2020.013.20074 (and earlier), 2020.001.30018 (and earlier) and 2017.011.30188 (and earlier) are affected by a use… Acrobat after 20.013.20074 Fix from $1,9502021-02-11 HIGH 8.8 CVE-2021-21021 Acrobat Reader DC versions versions 2020.013.20074 (and earlier), 2020.001.30018 (and earlier) and 2017.011.30188 (and earlier) are affected by a Use… Acrobat after 20.013.20074 Fix from $1,9502021-02-11 HIGH 8.8 CVE-2021-21028 Acrobat Reader DC versions versions 2020.013.20074 (and earlier), 2020.001.30018 (and earlier) and 2017.011.30188 (and earlier) are affected by a Use… Acrobat after 20.013.20074 Fix from $1,9502021-02-11 HIGH 8.8 CVE-2021-21033 Acrobat Reader DC versions versions 2020.013.20074 (and earlier), 2020.001.30018 (and earlier) and 2017.011.30188 (and earlier) are affected by a Use… Acrobat after 20.013.20074 Fix from $1,9502021-02-11 HIGH 8.8 CVE-2020-13548EPSS 66% In Foxit Reader 10.1.0.37527, a specially crafted PDF document can trigger reuse of previously free memory which can lead to arbitrary code execution… Foxit Reader No fix yet Fix from $1,9502021-02-10 HIGH 7.8 CVE-2021-0332 In bootFinished of SurfaceFlinger.cpp, there is a possible memory corruption due to a use after free. This could lead to local escalation of privileg… Android Patch available Fix from $1,9502021-02-10 MEDIUM 6.5 CVE-2021-0335 In process of C2SoftHevcDec.cpp, there is a possible out of bounds write due to a use after free. This could lead to remote information disclosure wi… Android Patch available Fix from $1,6002021-02-10 HIGH 7.8 CVE-2021-0330 In add_user_ce and remove_user_ce of storaged.cpp, there is a possible use-after-free due to improper locking. This could lead to local escalation of… Android Patch available Fix from $1,9502021-02-10 CRITICAL 9.8 CVE-2019-17582 A use-after-free in the _zip_dirent_read function of zip_dirent.c in libzip 1.2.0 allows attackers to have an unspecified impact by attempting to unz… Libzip Patch available Fix from $2,3002021-02-09 CRITICAL 9.6 CVE-2021-21142 Use after free in Payments in Google Chrome on Mac prior to 88.0.4324.146 allowed a remote attacker to potentially perform a sandbox escape via a cra… Chrome 88.0.4324.146+ Fix from $2,3002021-02-09 HIGH 8.8 CVE-2021-21145 Use after free in Fonts in Google Chrome prior to 88.0.4324.146 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML p… Chrome 88.0.4324.146+ Fix from $1,9502021-02-09 CRITICAL 9.6 CVE-2021-21146 Use after free in Navigation in Google Chrome prior to 88.0.4324.146 allowed a remote attacker who had compromised the renderer process to potentiall… Chrome 88.0.4324.146+ Fix from $2,3002021-02-09 HIGH 8.6 CVE-2021-21138 Use after free in DevTools in Google Chrome prior to 88.0.4324.96 allowed a local attacker to potentially perform a sandbox escape via a crafted file. Chrome 88.0.4324.96+ Fix from $1,9502021-02-09 HIGH 8.8 CVE-2021-21119EPSS 7% Use after free in Media in Google Chrome prior to 88.0.4324.96 allowed a remote attacker who had compromised the renderer process to potentially expl… Chrome 88.0.705.50 / 88.0.4324.96+ Fix from $1,9502021-02-09 HIGH 8.8 CVE-2021-21120EPSS 7% Use after free in WebSQL in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML p… Chrome 88.0.705.50 / 88.0.4324.96+ Fix from $1,9502021-02-09 CRITICAL 9.6 CVE-2021-21121EPSS 6% Use after free in Omnibox in Google Chrome on Linux prior to 88.0.4324.96 allowed a remote attacker to potentially perform a sandbox escape via a cra… Chrome 88.0.705.50 / 88.0.4324.96+ Fix from $2,3002021-02-09 HIGH 8.8 CVE-2021-21122EPSS 7% Use after free in Blink in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML pa… Chrome 88.0.705.50 / 88.0.4324.96+ Fix from $1,9502021-02-09 CRITICAL 9.6 CVE-2021-21124EPSS 8% Potential user after free in Speech Recognizer in Google Chrome on Android prior to 88.0.4324.96 allowed a remote attacker to potentially perform a s… Chrome 88.0.705.50 / 88.0.4324.96+ Fix from $2,3002021-02-09 HIGH 8.8 CVE-2020-16044 Use after free in WebRTC in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to potentially exploit heap corruption via a crafted SCTP p… Chrome 88.0.4324.96+ Fix from $1,9502021-02-09 MEDIUM 6.7 CVE-2021-0349 In display driver, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execut… Android Mitigation only Fix from $1,6002021-02-04 CRITICAL 9.8 CVE-2021-26689 An issue was discovered on LG mobile devices with Android OS 8.0, 8.1, 9.0, and 10 software. The USB laf gadget has a use-after-free. The LG ID is LV… Android Mitigation only Fix from $2,3002021-02-04