Browse CVEs

MEDIUM 5.5 CVE-2023-0160 A deadlock flaw was found in the Linux kernel’s BPF subsystem. This flaw allows a local user to potentially crash the system. Linux Kernel 6.4+ Fix from $1,6002023-07-18 MEDIUM 6.7 CVE-2023-21400 In multiple functions of io_uring.c, there is a possible kernel memory corruption due to improper locking. This could lead to local escalation of pr… Debian Linux No fix yet Fix from $1,6002023-07-13 HIGH 7.3 CVE-2023-21189 In startLockTaskMode of LockTaskController.java, there is a possible bypass of lock task mode due to a logic error in the code. This could lead to lo… Android Mitigation only Fix from $1,9502023-06-28 HIGH 7.8 CVE-2023-21120 In multiple functions of cdm_engine.cpp, there is a possible use-after-free due to improper locking. This could lead to local escalation of privilege… Android Mitigation only Fix from $1,9502023-06-15 MEDIUM 6.7 CVE-2023-20743 In vcu, there is a possible out of bounds write due to improper locking. This could lead to local escalation of privilege with System execution privi… Iot Yocto Mitigation only Fix from $1,6002023-06-06 MEDIUM 6.7 CVE-2023-20745 In vcu, there is a possible out of bounds write due to improper locking. This could lead to local escalation of privilege with System execution privi… Iot Yocto Mitigation only Fix from $1,6002023-06-06 MEDIUM 6.7 CVE-2023-20746 In vcu, there is a possible out of bounds write due to improper locking. This could lead to local escalation of privilege with System execution privi… Iot Yocto Mitigation only Fix from $1,6002023-06-06 MEDIUM 6.7 CVE-2023-20737 In vcu, there is a possible use after free due to improper locking. This could lead to local escalation of privilege with System execution privileges… Iot Yocto Mitigation only Fix from $1,6002023-06-06 MEDIUM 6.7 CVE-2023-20733 In vcu, there is a possible use after free due to improper locking. This could lead to local escalation of privilege with System execution privileges… Iot Yocto Mitigation only Fix from $1,6002023-06-06 HIGH 7.5 CVE-2023-22318 Denial of service in Webconf in Tribe29 Checkmk Appliance before 1.6.5. Checkmk Appliance Firmware 1.6.5+ Fix from $1,9502023-05-15 HIGH 7.8 CVE-2023-2007 The specific flaw exists within the DPT I2O Controller driver. The issue results from the lack of proper locking when performing operations on an obj… Linux Kernel 6.0+ Fix from $1,9502023-04-24 HIGH 7.8 CVE-2023-21000 In MediaCodec.cpp, there is a possible use after free due to improper locking. This could lead to local escalation of privilege with no additional ex… Android Patch available Fix from $1,9502023-03-24 HIGH 7.8 CVE-2023-20939 In multiple functions of looper_backed_event_loop.cpp, there is a possible way to corrupt memory due to improper locking. This could lead to local es… Android Patch available Fix from $1,9502023-02-28 MEDIUM 6.7 CVE-2023-20618 In vcu, there is a possible memory corruption due to improper locking. This could lead to local escalation of privilege with System execution privile… Android Mitigation only Fix from $1,6002023-02-06 MEDIUM 6.7 CVE-2023-20619 In vcu, there is a possible memory corruption due to improper locking. This could lead to local escalation of privilege with System execution privile… Android Mitigation only Fix from $1,6002023-02-06 HIGH 7.8 CVE-2023-20928 In binder_vma_close of binder.c, there is a possible use after free due to improper locking. This could lead to local escalation of privilege with no… Android No fix yet Fix from $1,9502023-01-26 HIGH 7.5 CVE-2023-22412 An Improper Locking vulnerability in the SIP ALG of Juniper Networks Junos OS on MX Series with MS-MPC or MS-MIC card and SRX Series allows an unauth… Junos Mitigation only Fix from $1,9502023-01-13 HIGH 7.5 CVE-2022-48216 Uniswap Universal Router before 1.1.0 mishandles reentrancy. This would have allowed theft of funds. Universal Router Firmware 1.1.0+ Fix from $1,9502023-01-04 MEDIUM 5.5 CVE-2021-43395 An issue was discovered in illumos before f859e7171bb5db34321e45585839c6c3200ebb90, OmniOS Community Edition r151038, OpenIndiana Hipster 2021.04, an… Illumos 2022-01-18+ Fix from $1,6002022-12-26 HIGH 7.8 CVE-2022-20566 In l2cap_chan_put of l2cap_core, there is a possible use after free due to improper locking. This could lead to local escalation of privilege with no… Android Patch available Fix from $1,9502022-12-16 HIGH 7.5 CVE-2022-3996 If an X.509 certificate contains a malformed policy constraint and policy processing is enabled, then a write lock will be taken twice recursively. … OpenSSL after 3.0.7 Fix from $1,9502022-12-13 MEDIUM 5.5 CVE-2022-42328 Guests can trigger deadlock in Linux netback driver T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabil… Linux Kernel 6.0+ Fix from $1,6002022-12-07 MEDIUM 5.5 CVE-2022-42329 Guests can trigger deadlock in Linux netback driver T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabil… Linux Kernel 6.0+ Fix from $1,6002022-12-07 MEDIUM 5.5 CVE-2022-42775 In camera driver, there is a possible memory corruption due to improper locking. This could lead to local denial of service in kernel. Android Mitigation only Fix from $1,6002022-12-06 MEDIUM 5.5 CVE-2022-39131 In camera driver, there is a possible memory corruption due to improper locking. This could lead to local denial of service in kernel. Android Mitigation only Fix from $1,6002022-12-06 MEDIUM 5.5 CVE-2022-4129 A flaw was found in the Linux kernel's Layer 2 Tunneling Protocol (L2TP). A missing lock when clearing sk_user_data can lead to a race condition and … Layer 2 Tunneling Protocol 6.0+ Fix from $1,6002022-11-28 MEDIUM 6.5 CVE-2022-39358 Metabase is data visualization software. Prior to versions 0.44.5, 1.44.5, 0.43.7, 1.43.7, 0.42.6, and 1.42.6, it was possible to circumvent locked p… Metabase 0.42.6 / 0.43.7+ Fix from $1,6002022-10-26 MEDIUM 5.5 CVE-2022-38690 In camera driver, there is a possible memory corruption due to improper locking. This could lead to local denial of service in kernel. Android No fix yet Fix from $1,6002022-10-14 HIGH 7.0 CVE-2022-20422 In emulation_proc_handler of armv8_deprecated.c, there is a possible way to corrupt memory due to a race condition. This could lead to local escalati… Debian Linux Patch available Fix from $1,9502022-10-11 MEDIUM 6.7 CVE-2022-26473 In vdec fmt, there is a possible use after free due to improper locking. This could lead to local escalation of privilege with System execution privi… Android Mitigation only Fix from $1,6002022-10-07