Browse CVEs

CRITICAL 9.8 CVE-2018-17609 Foxit PhantomPDF and Reader before 9.3 allow remote attackers to execute arbitrary code or cause a denial of service (use-after-free) because propert… Phantompdf 9.3+ Fix from $2,3002018-09-28 CRITICAL 9.8 CVE-2018-17610 Foxit PhantomPDF and Reader before 9.3 allow remote attackers to execute arbitrary code or cause a denial of service (use-after-free) because propert… Phantompdf 9.3+ Fix from $2,3002018-09-28 CRITICAL 9.8 CVE-2018-17611 Foxit PhantomPDF and Reader before 9.3 allow remote attackers to execute arbitrary code or cause a denial of service (use-after-free) because propert… Phantompdf 9.3+ Fix from $2,3002018-09-28 CRITICAL 9.8 CVE-2018-14809 Fuji Electric V-Server 4.0.3.0 and prior, A use after free vulnerability has been identified, which may allow remote code execution. V Server Firmware after 4.0.3.0 Fix from $2,3002018-09-26 HIGH 8.8 CVE-2018-6054 Use after free in WebUI in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to potentially exploit heap corruption via a crafted Chrome… Chrome 64.0.3282.119+ Fix from $1,9502018-09-25 HIGH 8.8 CVE-2018-6031 Use after free in PDFium in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF f… Chrome 64.0.3282.119+ Fix from $1,9502018-09-25 HIGH 8.8 CVE-2018-10496 This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Samsung Internet Browser Fixed in version 6.4.0.1… Samsung Internet Browser 6.4.0.15+ Fix from $1,9502018-09-24 MEDIUM 6.5 CVE-2018-17236 The function MP4Free() in mp4property.cpp in libmp4v2 2.1.0 internally calls free() on a invalid pointer, raising a SIGABRT signal. Mp4v2 No fix yet Fix from $1,6002018-09-20 HIGH 7.8 CVE-2018-17182 An issue was discovered in the Linux kernel through 4.18.8. The vmacache_flush_all function in mm/vmacache.c mishandles sequence number overflows. An… Linux Kernel 3.16.58 / 3.18.123+ Fix from $1,9502018-09-19 HIGH 7.8 CVE-2018-11843 In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, lack fo check on return value in WMA resp… Android Patch available Fix from $1,9502018-09-18 HIGH 7.0 CVE-2018-11818 In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, LUT configuration is passed down to drive… Android Patch available Fix from $1,9502018-09-18 HIGH 7.8 CVE-2018-11300 In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, callback executed from the other thread h… Android Patch available Fix from $1,9502018-09-18 HIGH 7.8 CVE-2018-11281 In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, while calling IPA_IOC_MDFY_RT_RULE IPA IO… Android Patch available Fix from $1,9502018-09-18 HIGH 7.8 CVE-2018-11286 In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, while accessing global variable "debug_cl… Android Patch available Fix from $1,9502018-09-18 HIGH 7.0 CVE-2018-14625 A flaw was found in the Linux Kernel where an attacker may be able to have an uncontrolled read to kernel-memory from within a vm guest. A race condi… Linux Kernel Patch available Fix from $1,9502018-09-10 HIGH 7.8 CVE-2018-16540 In Artifex Ghostscript before 9.24, attackers able to supply crafted PostScript files to the builtin PDF14 converter could use a use-after-free in co… Openshift Container Platform Patch available Fix from $1,9502018-09-05 MEDIUM 5.5 CVE-2018-16541 In Artifex Ghostscript before 9.24, attackers able to supply crafted PostScript files could use incorrect free logic in pagedevice replacement to cra… Ubuntu Linux Patch available Fix from $1,6002018-09-05 HIGH 7.8 CVE-2018-6555 The irda_setsockopt function in net/irda/af_irda.c and later in drivers/staging/irda/net/af_irda.c in the Linux kernel before 4.17 allows local users… Linux Kernel 4.17+ Fix from $1,9502018-09-04 HIGH 7.8 CVE-2018-14619 A flaw was found in the crypto subsystem of the Linux kernel before version kernel-4.15-rc4. The "null skcipher" was being dropped when each af_alg_c… Linux Kernel 4.14.8+ Fix from $1,9502018-08-30 HIGH 8.8 CVE-2017-15399 A use after free in V8 in Google Chrome prior to 62.0.3202.89 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML pag… Chrome 62.0.3202.89+ Fix from $1,9502018-08-28 HIGH 8.8 CVE-2017-15412 Use after free in libxml2 before 2.9.5, as used in Google Chrome prior to 63.0.3239.84 and other products, allowed a remote attacker to potentially e… Enterprise Linux Desktop 2.9.5 / 63.0.3239.84+ Fix from $1,9502018-08-28 HIGH 8.8 CVE-2017-15411 Use after free in PDFium in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF fi… Chrome 63.0.3239.84+ Fix from $1,9502018-08-28 HIGH 8.8 CVE-2017-15410 Use after free in PDFium in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF fi… Chrome 63.0.3239.84+ Fix from $1,9502018-08-28 HIGH 7.8 CVE-2018-15857 An invalid free in ExprAppendMultiKeysymList in xkbcomp/ast-build.c in xkbcommon before 0.8.1 could be used by local attackers to crash xkbcommon key… Ubuntu Linux 0.8.1+ Fix from $1,9502018-08-25 HIGH 7.8 CVE-2018-10902 It was found that the raw midi kernel driver does not protect against concurrent access which leads to a double realloc (double free) in snd_rawmidi_… Debian Linux Patch available Fix from $1,9502018-08-21 CRITICAL 9.8 CVE-2018-1000217 Dave Gamble cJSON version 1.7.3 and earlier contains a CWE-416: Use After Free vulnerability in cJSON library that can result in Possible crash, corr… Cjson 1.7.4+ Fix from $2,3002018-08-20 HIGH 7.8 CVE-2018-14424 The daemon in GDM through 3.29.1 does not properly unexport display objects from its D-Bus interface when they are destroyed, which allows a local at… Gnome Display Manager after 3.29.1 Fix from $1,9502018-08-14 HIGH 7.8 CVE-2018-3924EPSS 44% An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Software's Foxit PDF Reader version 9.1.5096. A specially crafte… Foxit Reader after 9.1.0.5096 Fix from $1,9502018-08-01 HIGH 8.8 CVE-2018-3939 An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Software's PDF Reader, version 9.1.0.5096. A specially crafted P… Foxit Reader after 9.1.0.5096 Fix from $1,9502018-08-01 CRITICAL 9.8 CVE-2016-8619 The function `read_data()` in security.c in curl before version 7.51.0 is vulnerable to memory double free. Curl 7.51.0+ Fix from $2,3002018-08-01