Browse CVEs

HIGH 7.8 CVE-2024-53166 In the Linux kernel, the following vulnerability has been resolved: block, bfq: fix bfqq uaf in bfq_limit_depth() Set new allocated bfqq to bic or … Linux Kernel 6.6.64 / 6.11.11+ Fix from $1,9502024-12-27 HIGH 7.8 CVE-2024-53168 In the Linux kernel, the following vulnerability has been resolved: sunrpc: fix one UAF issue caused by sunrpc kernel tcp socket BUG: KASAN: slab-u… Linux Kernel 6.6.64 / 6.11.11+ Fix from $1,9502024-12-27 HIGH 7.8 CVE-2024-12175 Another “use after free” code execution vulnerability exists in the Rockwell Automation Arena® that could allow a threat actor to craft a DOE file an… Arena 16.20.07+ Fix from $1,9502024-12-19 CRITICAL 9.8 CVE-2021-32589EPSS 9% A Use After Free (CWE-416) vulnerability in FortiManager version 7.0.0, version 6.4.5 and below, version 6.2.7 and below, version 6.0.10 and below, v… Fortianalyzer 5.3.7 / 5.6.11+ Fix from $2,3002024-12-19 HIGH 7.8 CVE-2022-44518 Acrobat Reader DC version 22.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (and earlier) are affected by a use-after-free vuln… Acrobat Dc after 22.001.20085 Fix from $1,9502024-12-19 MEDIUM 5.5 CVE-2022-44519 Acrobat Reader DC version 22.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (and earlier) are affected by a use-after-free vuln… Acrobat Dc after 22.001.20085 Fix from $1,6002024-12-19 HIGH 7.8 CVE-2022-44520 Acrobat Reader DC version 22.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (and earlier) are affected by a use-after-free vuln… Acrobat Dc after 22.001.20085 Fix from $1,9502024-12-19 HIGH 7.8 CVE-2022-44514 Acrobat Reader DC version 22.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (and earlier) are affected by a use-after-free vuln… Acrobat Dc after 22.001.20085 Fix from $1,9502024-12-19 HIGH 8.8 CVE-2024-12694 Use after free in Compositing in Google Chrome prior to 131.0.6778.204 allowed a remote attacker to potentially exploit heap corruption via a crafted… Chrome 131.0.6778.204+ Fix from $1,9502024-12-18 HIGH 7.8 CVE-2024-47040 There is a possible UAF due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges ne… Android Mitigation only Fix from $1,9502024-12-18 HIGH 8.8 CVE-2024-47810 A use-after-free vulnerability exists in the way Foxit Reader 2024.3.0.26795 handles a 3D page object. A specially crafted Javascript code inside a m… Pdf Editor after 2024.3.0.26795 Fix from $1,9502024-12-18 HIGH 8.8 CVE-2024-49576 A use-after-free vulnerability exists in the way Foxit Reader 2024.3.0.26795 handles a checkbox CBF_Widget object. A specially crafted Javascript cod… Pdf Editor after 2024.3.0.26795 Fix from $1,9502024-12-18 HIGH 7.8 CVE-2024-46971 Software installed and run as a non-privileged user may conduct GPU system calls to read and write freed physical memory from the GPU. Mitigation only Fix from $1,9502024-12-13 HIGH 7.8 CVE-2024-47892 Software installed and run as a non-privileged user may conduct GPU system calls to read and write freed physical memory from the GPU. Mitigation only Fix from $1,9502024-12-13 HIGH 8.1 CVE-2024-49132 Windows Remote Desktop Services Remote Code Execution Vulnerability Windows 10 1809 10.0.17763.6659 / 10.0.19044.5247+ Fix from $1,9502024-12-12 HIGH 7.8 CVE-2024-49142 Microsoft Access Remote Code Execution Vulnerability 365 Apps No fix yet Fix from $1,9502024-12-12 HIGH 8.1 CVE-2024-49126 Windows Local Security Authority Subsystem Service (LSASS) Remote Code Execution Vulnerability Windows 10 1507 10.0.10240.20857 / 10.0.14393.7606+ Fix from $1,9502024-12-12 HIGH 8.1 CVE-2024-49127 Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability Windows 10 1507 10.0.10240.20857 / 10.0.14393.7606+ Fix from $1,9502024-12-12 HIGH 8.1 CVE-2024-49128 Sensitive data storage in improperly locked memory in Windows Remote Desktop Services allows an unauthorized attacker to execute code over a network. Windows Server 2012 10.0.14393.7606 / 10.0.17763.6659+ Fix from $1,9502024-12-12 HIGH 8.1 CVE-2024-49116EPSS 10% Windows Remote Desktop Services Remote Code Execution Vulnerability Windows Server 2016 10.0.14393.7606 / 10.0.17763.6659+ Fix from $1,9502024-12-12 HIGH 8.1 CVE-2024-49118 Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability Windows 10 1507 10.0.10240.20857 / 10.0.14393.7606+ Fix from $1,9502024-12-12 HIGH 8.1 CVE-2024-49122EPSS 20% Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability Windows 10 1507 10.0.10240.20857 / 10.0.14393.7606+ Fix from $1,9502024-12-12 HIGH 8.1 CVE-2024-49115 Windows Remote Desktop Services Remote Code Execution Vulnerability Windows Server 2016 10.0.14393.7606 / 10.0.17763.6659+ Fix from $1,9502024-12-12 HIGH 8.1 CVE-2024-49106 Windows Remote Desktop Services Remote Code Execution Vulnerability Windows Server 2016 10.0.14393.7606 / 10.0.17763.6659+ Fix from $1,9502024-12-12 HIGH 8.1 CVE-2024-49108 Windows Remote Desktop Services Remote Code Execution Vulnerability Windows Server 2016 10.0.14393.7606 / 10.0.17763.6659+ Fix from $1,9502024-12-12 HIGH 7.0 CVE-2024-49097 Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability Windows 10 1809 10.0.17763.6659 / 10.0.19044.5247+ Fix from $1,9502024-12-12 HIGH 7.8 CVE-2024-49079 Input Method Editor (IME) Remote Code Execution Vulnerability Windows 10 1507 10.0.10240.20857 / 10.0.14393.7606+ Fix from $1,9502024-12-12 HIGH 7.8 CVE-2024-49074 Windows Kernel-Mode Driver Elevation of Privilege Vulnerability Windows 10 1809 10.0.17763.6659 / 10.0.19044.5247+ Fix from $1,9502024-12-12 HIGH 7.8 CVE-2024-49069 Microsoft Excel Remote Code Execution Vulnerability 365 Apps Mitigation only Fix from $1,9502024-12-12 CRITICAL 9.1 CVE-2024-47834 GStreamer is a library for constructing graphs of media-handling components. An Use-After-Free read vulnerability has been discovered affecting the p… Gstreamer 1.24.10+ Fix from $2,3002024-12-12