Browse CVEs

CRITICAL 9.8 CVE-2024-27228 there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote code execution with no additional execution privileg… Android Mitigation only Fix from $2,3002024-03-11 HIGH 8.4 CVE-2024-22005 there is a possible Authentication Bypass due to improperly used crypto. This could lead to local escalation of privilege with no additional executio… Android Mitigation only Fix from $1,9502024-03-11 HIGH 7.1 CVE-2024-22009 In init_data of , there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no add… Android No fix yet Fix from $1,9502024-03-11 HIGH 8.4 CVE-2024-25993 In tmu_reset_tmu_trip_counter of , there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of priv… Android Mitigation only Fix from $1,9502024-03-11 HIGH 8.4 CVE-2024-27204 In tmu_set_gov_active of tmu.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privile… Android Mitigation only Fix from $1,9502024-03-11 HIGH 7.8 CVE-2024-26610 In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: fix a memory corruption iwl_fw_ini_trigger_tlv::data is a pointe… Linux Kernel 5.10.210 / 5.15.149+ Fix from $1,9502024-03-11 HIGH 7.5 CVE-2024-26620 In the Linux kernel, the following vulnerability has been resolved: s390/vfio-ap: always filter entire AP matrix The vfio_ap_mdev_filter_matrix fun… Linux Kernel 6.1.76 / 6.6.15+ Fix from $1,9502024-03-11 HIGH 7.8 CVE-2023-52494 In the Linux kernel, the following vulnerability has been resolved: bus: mhi: host: Add alignment check for event ring read pointer Though we do ch… Linux Kernel 5.15.149 / 6.1.76+ Fix from $1,9502024-03-11 HIGH 7.8 CVE-2023-52495 In the Linux kernel, the following vulnerability has been resolved: soc: qcom: pmic_glink_altmode: fix port sanity check The PMIC GLINK altmode dri… Linux Kernel 6.6.15 / 6.7.3+ Fix from $1,9502024-03-11 HIGH 7.8 CVE-2024-1696 In Santesoft Sante FFT Imaging versions 1.4.1 and prior once a user opens a malicious DCM file on affected FFT Imaging installations, a local attacke… Fft Imaging 1.4.2+ Fix from $1,9502024-03-11 CRITICAL 9.8 CVE-2024-0039 In attp_build_value_cmd of att_protocol.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code exe… Android Patch available Fix from $2,3002024-03-11 HIGH 7.8 CVE-2024-0049 In multiple locations, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with n… Android Patch available Fix from $1,9502024-03-11 HIGH 7.8 CVE-2024-0050 In getConfig of SoftVideoDecoderOMXComponent.cpp, there is a possible out of bounds write due to a missing validation check. This could lead to a loc… Android Patch available Fix from $1,9502024-03-11 HIGH 7.8 CVE-2024-0051 In onQueueFilled of SoftMPEG4.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of priv… Android Patch available Fix from $1,9502024-03-11 HIGH 7.8 CVE-2024-23610 An out of bounds write due to a missing bounds check in LabVIEW may result in remote code execution. Successful exploitation requires an attacker to … Labview after 2020 Fix from $1,9502024-03-11 HIGH 7.8 CVE-2024-23611 An out of bounds write due to a missing bounds check in LabVIEW may result in remote code execution. Successful exploitation requires an attacker to … Labview after 2020 Fix from $1,9502024-03-11 HIGH 7.8 CVE-2024-23608 An out of bounds write due to a missing bounds check in LabVIEW may result in remote code execution. Successful exploitation requires an attacker to… Labview after 2020 Fix from $1,9502024-03-11 CRITICAL 9.8 CVE-2024-2184 Buffer overflow in identifier field of WSD probe request process of Small Office Multifunction Printers and Laser Printers(*) which may allow an atta… Mitigation only Fix from $2,3002024-03-11 HIGH 7.8 CVE-2024-23265 A memory corruption vulnerability was addressed with improved locking. This issue is fixed in iOS 16.7.6 and iPadOS 16.7.6, iOS 17.4 and iPadOS 17.4,… Ipados 1.1 / 10.4+ Fix from $1,9502024-03-08 HIGH 7.8 CVE-2024-23270 The issue was addressed with improved memory handling. This issue is fixed in iOS 17.4 and iPadOS 17.4, macOS Monterey 12.7.4, macOS Sonoma 14.4, mac… Ipad Os 12.7.4 / 13.6.5+ Fix from $1,9502024-03-08 HIGH 8.8 CVE-2024-23226 The issue was addressed with improved memory handling. This issue is fixed in iOS 17.4 and iPadOS 17.4, macOS Sonoma 14.4, tvOS 17.4, visionOS 1.1, w… Ipad Os 1.1 / 10.4+ Fix from $1,9502024-03-08 MEDIUM 6.7 CVE-2024-23234 An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in macOS Monterey 12.7.4, macOS Sonoma 14.4, macOS Ven… macOS 12.7.4 / 13.6.5+ Fix from $1,6002024-03-08 HIGH 8.8 CVE-2023-48725EPSS 19% A stack-based buffer overflow vulnerability exists in the JSON Parsing getblockschedule() functionality of Netgear RAX30 1.0.11.96 and 1.0.7.78. A sp… Rax30 Firmware No fix yet Fix from $1,9502024-03-07 HIGH 8.8 CVE-2023-51395 The vulnerability described by CVE-2023-0972 has been additionally discovered in Silicon Labs Z-Wave end devices. This vulnerability may allow an una… Mitigation only Fix from $1,9502024-03-07 HIGH 8.8 CVE-2024-2174EPSS 13% Inappropriate implementation in V8 in Google Chrome prior to 122.0.6261.111 allowed a remote attacker to potentially exploit heap corruption via a cr… Chrome 122.0.6261.111+ Fix from $1,9502024-03-06 HIGH 8.8 CVE-2024-2173EPSS 14% Out of bounds memory access in V8 in Google Chrome prior to 122.0.6261.111 allowed a remote attacker to perform out of bounds memory access via a cra… Chrome 122.0.6261.111+ Fix from $1,9502024-03-06 MEDIUM 5.5 CVE-2023-52596 In the Linux kernel, the following vulnerability has been resolved: sysctl: Fix out of bounds access for empty sysctl registers When registering ta… Linux Kernel 6.6.16 / 6.7.4+ Fix from $1,6002024-03-06 HIGH 7.5 CVE-2024-1220 A stack-based buffer overflow in the built-in web server in Moxa NPort W2150A/W2250A Series firmware version 2.3 and prior allows a remote attacker t… Nport W2150a Firmware after 2.3 Fix from $1,9502024-03-06 HIGH 7.8 CVE-2024-23225 KEV A memory corruption issue was addressed with improved validation. This issue is fixed in iOS 16.7.6 and iPadOS 16.7.6, iOS 17.4 and iPadOS 17.4, macO… Ipados 1.1 / 10.4+ Fix from $1,9502024-03-05 HIGH 7.8 CVE-2024-23296 KEV A memory corruption issue was addressed with improved validation. This issue is fixed in iOS 16.7.8 and iPadOS 16.7.8, iOS 17.4 and iPadOS 17.4, macO… Ipados 1.1 / 10.4+ Fix from $1,9502024-03-05