Browse CVEs

HIGH 7.8 CVE-2022-38223 There is an out-of-bounds write in checkType located in etc.c in w3m 0.5.3. It can be triggered by sending a crafted HTML file to the w3m binary. It … Fedora No fix yet Fix from $1,9502022-08-15 HIGH 8.8 CVE-2022-2624 Heap buffer overflow in PDF in Google Chrome prior to 104.0.5112.79 allowed a remote attacker who convinced a user to engage in specific user interac… Chrome 104.0.5112.79+ Fix from $1,9502022-08-12 CRITICAL 9.8 CVE-2022-2587 Out of bounds write in Chrome OS Audio Server in Google Chrome on Chrome OS prior to 102.0.5005.125 allowed a remote attacker to potentially exploit … Chrome 102.0.5005.125+ Fix from $2,3002022-08-12 HIGH 7.5 CVE-2022-35557 A stack overflow vulnerability exists in /goform/wifiSSIDget in Tenda W6 V1.0.0.9(4122) version, which can be exploited by attackers to cause a denia… W6 Firmware No fix yet Fix from $1,9502022-08-12 HIGH 7.5 CVE-2022-35558 A stack overflow vulnerability exists in /goform/WifiMacFilterGet in Tenda W6 V1.0.0.9(4122) version, which can be exploited by attackers to cause a … W6 Firmware No fix yet Fix from $1,9502022-08-12 CRITICAL 9.8 CVE-2022-35559EPSS 11% A stack overflow vulnerability exists in /goform/setAutoPing in Tenda W6 V1.0.0.9(4122), which allows an attacker to construct ping1 parameters and p… W6 Firmware No fix yet Fix from $2,3002022-08-12 HIGH 7.5 CVE-2022-35560 A stack overflow vulnerability exists in /goform/wifiSSIDset in Tenda W6 V1.0.0.9(4122) version, which can be exploited by attackers to cause a denia… W6 Firmware No fix yet Fix from $1,9502022-08-12 HIGH 7.5 CVE-2022-35561 A stack overflow vulnerability exists in /goform/WifiMacFilterSet in Tenda W6 V1.0.0.9(4122) version, which can be exploited by attackers to cause a … W6 Firmware No fix yet Fix from $1,9502022-08-12 MEDIUM 6.8 CVE-2022-20313 In Bluetooth, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System exe… Android Mitigation only Fix from $1,6002022-08-12 MEDIUM 6.5 CVE-2022-20273 In Bluetooth, there is a possible out of bounds read due to a heap buffer overflow. This could lead to remote information disclosure with no addition… Android Mitigation only Fix from $1,6002022-08-12 MEDIUM 6.8 CVE-2022-20269 In Bluetooth, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System … Android Mitigation only Fix from $1,6002022-08-12 CRITICAL 9.8 CVE-2022-28750 Zoom On-Premise Meeting Connector Zone Controller (ZC) before version 4.8.20220419.112 fails to properly parse STUN error codes, which can result in … Meeting Connector 4.8.20220419.112+ Fix from $2,3002022-08-11 HIGH 7.8 CVE-2022-34260 Adobe Illustrator versions 26.3.1 (and earlier) and 25.4.6 (and earlier) are affected by an out-of-bounds write vulnerability that could result in ar… Illustrator after 26.3.1 Fix from $1,9502022-08-11 HIGH 7.8 CVE-2022-35667 Adobe Acrobat Reader versions 22.001.20169 (and earlier), 20.005.30362 (and earlier) and 17.012.30249 (and earlier) are affected by an out-of-bounds … Acrobat Dc after 22.001.20169 Fix from $1,9502022-08-11 CRITICAL 9.8 CVE-2022-20400 In cd_CodeMsg of cd_codec.c, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no … Android Mitigation only Fix from $2,3002022-08-11 HIGH 7.5 CVE-2022-20244 In Bluetooth, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if more than 10… Android Mitigation only Fix from $1,9502022-08-11 HIGH 7.5 CVE-2022-20247 In Media, there is a possible out of bounds read due to a heap buffer overflow. This could lead to remote information disclosure with no additional e… Android Mitigation only Fix from $1,9502022-08-11 MEDIUM 6.7 CVE-2022-20369 In v4l2_m2m_querybuf of v4l2-mem2mem.c, there is a possible out of bounds write due to improper input validation. This could lead to local escalation… Debian Linux Patch available Fix from $1,6002022-08-11 CRITICAL 9.8 CVE-2022-20237 In BuildDevIDResponse of miscdatabuilder.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code e… Android Mitigation only Fix from $2,3002022-08-11 HIGH 8.8 CVE-2022-20345 In l2cble_process_sig_cmd of l2c_ble.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execut… Android Mitigation only Fix from $1,9502022-08-10 HIGH 7.8 CVE-2022-20792 A vulnerability in the regex module used by the signature database load module of Clam AntiVirus (ClamAV) versions 0.104.0 through 0.104.2 and LTS ve… Clamav after 0.104.2 Fix from $1,9502022-08-10 HIGH 7.8 CVE-2022-30176 Azure RTOS GUIX Studio Remote Code Execution Vulnerability Azure Real Time Operating System Guix Studio Mitigation only Fix from $1,9502022-08-09 CRITICAL 9.8 CVE-2022-37452 Exim before 4.95 has a heap-based buffer overflow for the alias list in host_name_lookup in host.c when sender_host_name is set. Debian Linux 4.95+ Fix from $2,3002022-08-07 CRITICAL 9.8 CVE-2022-26376 A memory corruption vulnerability exists in the httpd unescape functionality of Asuswrt prior to 3.0.0.4.386_48706 and Asuswrt-Merlin New Gen prior t… Asuswrt 3.0.0.4.386_48706 / 3.0.0.4.386_48750+ Fix from $2,3002022-08-05 CRITICAL 9.8 CVE-2022-27631 A memory corruption vulnerability exists in the httpd unescape functionality of DD-WRT Revision 32270 - Revision 48599. A specially-crafted HTTP requ… Dd Wrt after 48599 Fix from $2,3002022-08-05 CRITICAL 9.8 CVE-2022-28664 A memory corruption vulnerability exists in the httpd unescape functionality of FreshTomato 2022.1. A specially-crafted HTTP request can lead to memo… Freshtomato No fix yet Fix from $2,3002022-08-05 CRITICAL 9.8 CVE-2022-28665 A memory corruption vulnerability exists in the httpd unescape functionality of FreshTomato 2022.1. A specially-crafted HTTP request can lead to memo… Freshtomato No fix yet Fix from $2,3002022-08-05 CRITICAL 9.8 CVE-2022-29465 An out-of-bounds write vulnerability exists in the PSD Header processing memory allocation functionality of Accusoft ImageGear 20.0. A specially-craf… Imagegear No fix yet Fix from $2,3002022-08-05 CRITICAL 9.8 CVE-2022-25996 A stack-based buffer overflow vulnerability exists in the confsrv addTimeGroup functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14. A specially-… Linkhub Mesh Wifi Ac1200 No fix yet Fix from $2,3002022-08-05 CRITICAL 9.8 CVE-2022-26009 A stack-based buffer overflow vulnerability exists in the confsrv ucloud_set_node_location functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14. … Linkhub Mesh Wifi Ac1200 No fix yet Fix from $2,3002022-08-05