Browse CVEs

HIGH 7.8 CVE-2018-4347 A use after free issue was addressed with improved memory management. This issue affected versions prior to iOS 12, macOS Mojave 10.14, tvOS 12, watc… Iphone Os 5.0 / 7.7+ Fix from $1,9502019-04-03 HIGH 8.8 CVE-2018-4315EPSS 9% A use after free issue was addressed with improved memory management. This issue affected versions prior to iOS 12, tvOS 12, Safari 12, iTunes 12.9 f… Safari 7.7 / 12+ Fix from $1,9502019-04-03 HIGH 8.8 CVE-2018-4317EPSS 9% A use after free issue was addressed with improved memory management. This issue affected versions prior to iOS 12, tvOS 12, Safari 12, iTunes 12.9 f… Safari 7.7 / 12+ Fix from $1,9502019-04-03 HIGH 8.8 CVE-2018-4318EPSS 9% A use after free issue was addressed with improved memory management. This issue affected versions prior to iOS 12, tvOS 12, Safari 12, iTunes 12.9 f… Safari 7.7 / 12+ Fix from $1,9502019-04-03 HIGH 8.8 CVE-2018-4306EPSS 9% A use after free issue was addressed with improved memory management. This issue affected versions prior to iOS 12, tvOS 12, Safari 12, iTunes 12.9 f… Safari 7.7 / 12+ Fix from $1,9502019-04-03 HIGH 8.8 CVE-2018-4312EPSS 9% A use after free issue was addressed with improved memory management. This issue affected versions prior to iOS 12, tvOS 12, Safari 12, iTunes 12.9 f… Safari 7.7 / 12+ Fix from $1,9502019-04-03 HIGH 8.8 CVE-2018-4314EPSS 11% A use after free issue was addressed with improved memory management. This issue affected versions prior to iOS 12, tvOS 12, Safari 12, iTunes 12.9 f… Safari 7.7 / 12+ Fix from $1,9502019-04-03 HIGH 8.8 CVE-2018-4197EPSS 9% A use after free issue was addressed with improved memory management. This issue affected versions prior to iOS 12, tvOS 12, Safari 12, iTunes 12.9 f… Safari 7.7 / 12+ Fix from $1,9502019-04-03 HIGH 7.8 CVE-2019-8956 In the Linux Kernel before versions 4.20.8 and 4.19.21 a use-after-free error in the "sctp_sendmsg()" function (net/sctp/socket.c) when handling SCTP… Linux Kernel 4.19.21 / 4.20.8+ Fix from $1,9502019-04-01 HIGH 7.5 CVE-2019-1741 A vulnerability in the Cisco Encrypted Traffic Analytics (ETA) feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to ca… Ios Xe Patch available Fix from $1,9502019-03-28 HIGH 7.5 CVE-2019-3829EPSS 59% A vulnerability was found in gnutls versions from 3.5.8 before 3.6.7. A memory corruption (double free) vulnerability in the certificate verification… Fedora 3.6.7+ Fix from $1,9502019-03-27 HIGH 8.8 CVE-2019-3817 A use-after-free flaw has been discovered in libcomps before version 0.1.10 in the way ObjMRTrees are merged. An attacker, who is able to make an app… Libcomps 0.1.10+ Fix from $1,9502019-03-27 CRITICAL 9.8 CVE-2019-10125EPSS 5% An issue was discovered in aio_poll() in fs/aio.c in the Linux kernel through 5.0.4. A file may be released by aio_poll_wake() if an expected event i… Linux Kernel 4.19.38 / 5.0.5+ Fix from $2,3002019-03-27 MEDIUM 6.5 CVE-2019-6734 This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit PhantomPDF. User interaction is req… Phantompdf after 9.3.0.10826 Fix from $1,6002019-03-21 HIGH 7.8 CVE-2019-7221 The KVM implementation in the Linux kernel through 4.20.5 has a Use-after-Free. Linux Kernel after 4.20.5 Fix from $1,9502019-03-21 HIGH 8.8 CVE-2019-6727 This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader. User interaction is required to exp… Phantompdf after 9.3.0.10826 Fix from $1,9502019-03-21 HIGH 8.8 CVE-2019-6730 This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader. User interaction is required to exp… Phantompdf after 9.3.0.10826 Fix from $1,9502019-03-21 MEDIUM 6.5 CVE-2018-18091 Use after free in Kernel Mode Driver in Intel(R) Graphics Driver for Windows* before versions 10.18.x.5059 (aka 15.33.x.5059), 10.18.x.5057 (aka 15.3… Graphics Driver Patch available Fix from $1,6002019-03-14 MEDIUM 5.5 CVE-2019-9706 Vixie Cron before the 3.0pl1-133 Debian package allows local users to cause a denial of service (use-after-free and daemon crash) because of a force_… Cron Patch available Fix from $1,6002019-03-12 CRITICAL 9.8 CVE-2018-18492EPSS 10% A use-after-free vulnerability can occur after deleting a selection element due to a weak reference to the select element in the options collection. … Firefox 60.4.0 / 64.0+ Fix from $2,3002019-02-28 HIGH 7.8 CVE-2019-2000 In several functions of binder.c, there is possible memory corruption due to a use after free. This could lead to local escalation of privilege with … Android No fix yet Fix from $1,9502019-02-28 HIGH 7.5 CVE-2019-1992 In bta_hl_sdp_query_results of bta_hl_main.cc, there is a possible use-after-free due to a race condition. This could lead to remote code execution w… Android Mitigation only Fix from $1,9502019-02-28 HIGH 7.8 CVE-2018-13900 Use-after-free vulnerability will occur as there is no protection for the route table`s rule in IPA driver in Snapdragon Auto, Snapdragon Consumer IO… Mdm9150 Firmware Patch available Fix from $1,9502019-02-25 HIGH 7.8 CVE-2018-13905 KGSL syncsource lock not handled properly during syncsource cleanup can lead to use after free issue in Snapdragon Auto, Snapdragon Consumer IOT, Sna… Mdm9206 Firmware Patch available Fix from $1,9502019-02-25 CRITICAL 9.8 CVE-2019-9020EPSS 10% An issue was discovered in PHP before 5.6.40, 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x before 7.3.1. Invalid input to the function xmlrpc_de… PHP 5.6.40 / 7.1.26+ Fix from $2,3002019-02-22 HIGH 7.5 CVE-2019-9003 In the Linux kernel before 4.20.5, attackers can trigger a drivers/char/ipmi/ipmi_msghandler.c use-after-free and OOPS by arranging for certain simul… Linux Kernel 4.19.18 / 4.20.5+ Fix from $1,9502019-02-22 HIGH 8.8 CVE-2019-5772 Sharing of objects over calls into JavaScript runtime in PDFium in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to potentially explo… Chrome 72.0.3626.81+ Fix from $1,9502019-02-19 HIGH 8.8 CVE-2019-5756 Inappropriate memory management when caching in PDFium in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to execute arbitrary code ins… Chrome 72.0.3626.81+ Fix from $1,9502019-02-19 CRITICAL 9.6 CVE-2019-5759 Incorrect lifetime handling in HTML select elements in Google Chrome on Android and Mac prior to 72.0.3626.81 allowed a remote attacker to potentiall… Chrome 72.0.3626.81+ Fix from $2,3002019-02-19 HIGH 8.8 CVE-2019-5760 Insufficient checks of pointer validity in WebRTC in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to potentially exploit heap corrup… Chrome 72.0.3626.81+ Fix from $1,9502019-02-19