Browse CVEs

HIGH 8.8 CVE-2021-30565 Out of bounds write in Tab Groups in Google Chrome on Linux and ChromeOS prior to 92.0.4515.107 allowed an attacker who convinced a user to install a… Chrome 92.0.4515.107+ Fix from $1,9502021-08-03 HIGH 8.8 CVE-2021-30566 Stack buffer overflow in Printing in Google Chrome prior to 92.0.4515.107 allowed a remote attacker who had compromised the renderer process to poten… Chrome 92.0.4515.107+ Fix from $1,9502021-08-03 HIGH 8.8 CVE-2021-30568 Heap buffer overflow in WebGL in Google Chrome prior to 92.0.4515.107 allowed a remote attacker to potentially exploit heap corruption via a crafted … Chrome 92.0.4515.107+ Fix from $1,9502021-08-03 HIGH 8.8 CVE-2021-30575 Out of bounds write in Autofill in Google Chrome prior to 92.0.4515.107 allowed a remote attacker who had compromised the renderer process to potenti… Chrome 92.0.4515.107+ Fix from $1,9502021-08-03 HIGH 8.8 CVE-2021-30559 Out of bounds write in ANGLE in Google Chrome prior to 91.0.4472.164 allowed a remote attacker to potentially exploit heap corruption via a crafted H… Chrome 91.0.4472.164+ Fix from $1,9502021-08-03 HIGH 8.8 CVE-2021-30564 Heap buffer overflow in WebXR in Google Chrome prior to 91.0.4472.164 allowed a remote attacker to potentially exploit heap corruption via a crafted … Chrome 91.0.4472.164+ Fix from $1,9502021-08-03 HIGH 7.8 CVE-2021-22423 A component of the HarmonyOS has a Out-of-bounds Write Vulnerability. Local attackers may exploit this vulnerability to cause integer overflow. Harmonyos Mitigation only Fix from $1,9502021-08-03 CRITICAL 9.8 CVE-2021-33485 CODESYS Control Runtime system before 3.5.17.10 has a Heap-based Buffer Overflow. Control 3.5.17.10 / 4.2.0.0+ Fix from $2,3002021-08-03 HIGH 8.2 CVE-2021-27954 A heap-based buffer overflow vulnerability exists on the ecobee3 lite 4.5.81.200 device in the HKProcessConfig function of the HomeKit Wireless Acces… Ecobee3 Lite Firmware No fix yet Fix from $1,9502021-08-03 HIGH 7.5 CVE-2021-22414 There is a Memory Buffer Errors Vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause the system to reset. Emui No fix yet Fix from $1,9502021-08-02 HIGH 8.1 CVE-2021-22427 There is a Heap-based Buffer Overflow Vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to authentication byp… Emui No fix yet Fix from $1,9502021-08-02 CRITICAL 9.8 CVE-2021-22438 There is a Memory Buffer Improper Operation Limit Vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause maliciou… Emui No fix yet Fix from $2,3002021-08-02 CRITICAL 9.8 CVE-2021-37164 A buffer overflow issue was discovered in HMI3 Control Panel in Swisslog Healthcare Nexus Panel operated by released versions of software before Nexu… Hmi 3 Control Panel Firmware 7.2.5.7+ Fix from $2,3002021-08-02 HIGH 8.8 CVE-2021-36004 Adobe InDesign version 16.0 (and earlier) is affected by an Out-of-bounds Write vulnerability in the CoolType library. An unauthenticated attacker co… Indesign after 16.0 Fix from $1,9502021-07-30 HIGH 7.8 CVE-2021-37576 arch/powerpc/kvm/book3s_rtas.c in the Linux kernel through 5.13.5 on the powerpc platform allows KVM guest OS users to cause host OS memory corruptio… Linux Kernel 4.4.277 / 4.9.277+ Fix from $1,9502021-07-26 HIGH 8.8 CVE-2015-2100 Multiple stack-based buffer overflows in WebGate eDVR Manager and Control Center allow remote attackers to execute arbitrary code via unspecified vec… Control Center Mitigation only Fix from $1,9502021-07-22 MEDIUM 6.2 CVE-2021-35520 A Buffer Overflow in Thrift command handlers in IDEMIA Morpho Wave Compact and VisionPass devices before 2.6.2 allows physically proximate authentica… Morphowave Compact Mdpi Firmware 2.6.2+ Fix from $1,6002021-07-22 CRITICAL 9.8 CVE-2021-35522 A Buffer Overflow in Thrift command handlers in IDEMIA Morpho Wave Compact and VisionPass devices before 2.6.2, Sigma devices before 4.9.4, and MA VP… Morphowave Compact Mdpi Firmware 2.6.2+ Fix from $2,3002021-07-22 MEDIUM 5.5 CVE-2021-37220 MuPDF through 1.18.1 has an out-of-bounds write because the cached color converter does not properly consider the maximum key size of a hash table. T… Fedora after 1.18.1 Fix from $1,6002021-07-21 HIGH 7.8 CVE-2020-19491 There is an invalid memory access bug in cgif.c that leads to a Segmentation fault in sam2p 0.49.4. A crafted input will lead to a denial of service … Sam2p Patch available Fix from $1,9502021-07-21 MEDIUM 5.5 CVE-2020-19469 An issue has been found in function DCTStream::reset in PDF2JSON 0.70 that allows attackers to cause a Denial of Service due to an invalid write of s… Pdf2json Patch available Fix from $1,6002021-07-21 MEDIUM 5.5 CVE-2020-19475 An issue has been found in function CCITTFaxStream::lookChar in PDF2JSON 0.70 that allows attackers to cause a Denial of Service due to an invalid wr… Pdf2json Patch available Fix from $1,6002021-07-21 MEDIUM 5.5 CVE-2020-19609 Artifex MuPDF before 1.18.0 has a heap based buffer over-write in tiff_expand_colormap() function when parsing TIFF files allowing attackers to cause… Debian Linux 1.18.0+ Fix from $1,6002021-07-21 MEDIUM 6.5 CVE-2020-20219 Mikrotik RouterOs 6.44.6 (long-term tree) suffers from a memory corruption vulnerability in the /nova/bin/igmp-proxy process. An authenticated remote… Routeros No fix yet Fix from $1,6002021-07-21 HIGH 7.8 CVE-2021-1099 NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager (vGPU plugin) that could allow an attacker to cause stack-based buffer overf… Virtual Gpu 8.8 / 11.5+ Fix from $1,9502021-07-21 HIGH 7.8 CVE-2021-33909EPSS 10% fs/seq_file.c in the Linux kernel 3.16 through 5.13.x before 5.13.4 does not properly restrict seq buffer allocations, leading to an integer overflow… Linux Kernel 3.13 / 4.4.276+ Fix from $1,9502021-07-20 HIGH 8.8 CVE-2021-3246 A heap buffer overflow vulnerability in msadpcm_decode_block of libsndfile 1.0.30 allows attackers to execute arbitrary code via a crafted WAV file. Fedora Patch available Fix from $1,9502021-07-20 MEDIUM 5.5 CVE-2021-36978 QPDF 9.x through 9.1.1 and 10.x through 10.0.4 has a heap-based buffer overflow in Pl_ASCII85Decoder::write (called from Pl_AES_PDF::flush and Pl_AES… Qpdf after 10.0.4 Fix from $1,6002021-07-20 MEDIUM 5.5 CVE-2021-36979 Unicorn Engine 1.0.2 has an out-of-bounds write in tb_flush_armeb (called from cpu_arm_exec_armeb and tcg_cpu_exec_armeb). Fedora Patch available Fix from $1,6002021-07-20 HIGH 7.8 CVE-2019-25050 netCDF in GDAL 2.4.2 through 3.0.4 has a stack-based buffer overflow in nc4_get_att (called from nc4_get_att_tc and nc_get_att_text) and in uffd_clea… Gdal after 3.0.4 Fix from $1,9502021-07-20