Browse CVEs

HIGH 7.8 CVE-2023-28575 The cam_get_device_priv function does not check the type of handle being returned (device/session/link). This would lead to invalid type usage if a w… Aqt1000 Firmware Patch available Fix from $1,9502023-08-08 MEDIUM 5.5 CVE-2023-4194 A flaw was found in the Linux kernel's TUN/TAP functionality. This issue could allow a local user to bypass network filters and gain unauthorized acc… Linux Kernel after 6.4 Fix from $1,6002023-08-07 HIGH 8.1 CVE-2023-4068EPSS 16% Type Confusion in V8 in Google Chrome prior to 115.0.5790.170 allowed a remote attacker to perform arbitrary read/write via a crafted HTML page. (Chr… Chrome 115.0.5790.170+ Fix from $1,9502023-08-03 HIGH 8.8 CVE-2023-4069EPSS 25% Type Confusion in V8 in Google Chrome prior to 115.0.5790.170 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML pag… Chrome 115.0.5790.170+ Fix from $1,9502023-08-03 HIGH 8.1 CVE-2023-4070 Type Confusion in V8 in Google Chrome prior to 115.0.5790.170 allowed a remote attacker to perform arbitrary read/write via a crafted HTML page. (Chr… Chrome 115.0.5790.170+ Fix from $1,9502023-08-03 HIGH 8.8 CVE-2022-4912 Type Confusion in MathML in Google Chrome prior to 105.0.5195.52 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML … Chrome 105.0.5195.52+ Fix from $1,9502023-07-29 HIGH 7.8 CVE-2023-28729 A type confusion vulnerability in Panasonic Control FPWIN Pro versions 7.6.0.3 and all previous versions may allow arbitrary code execution when open… Control Fpwin Pro after 7.6.0.3 Fix from $1,9502023-07-21 MEDIUM 5.3 CVE-2023-34967EPSS 61% A Type Confusion vulnerability was found in Samba's mdssvc RPC service for Spotlight. When parsing Spotlight mdssvc RPC packets, one encoded data str… Fedora 4.16.11 / 4.17.10+ Fix from $1,6002023-07-20 HIGH 7.8 CVE-2023-32664 A type confusion vulnerability exists in the Javascript checkThisBox method as implemented in Foxit Reader 12.1.2.15332. Specially crafted Javascript… Pdf Reader No fix yet Fix from $1,9502023-07-19 HIGH 7.8 CVE-2023-36887 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability Edge Chromium 114.0.1823.82+ Fix from $1,9502023-07-14 CRITICAL 9.8 CVE-2023-38199 coreruleset (aka OWASP ModSecurity Core Rule Set) through 3.3.4 does not detect multiple Content-Type request headers on some platforms. This might a… Coreruleset after 3.3.4 Fix from $2,3002023-07-13 HIGH 7.8 CVE-2023-35356 Windows Kernel Elevation of Privilege Vulnerability Windows 10 1607 10.0.14393.6085 / 10.0.17763.4645+ Fix from $1,9502023-07-11 HIGH 8.1 CVE-2023-35297 Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability Windows 10 1507 10.0.10240.20048 / 10.0.14393.6085+ Fix from $1,9502023-07-11 HIGH 7.8 CVE-2023-37376 A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions < V2201.0008), Tecnomatix Plant Simulation V2302 (All versions… Tecnomatix 2201.0008 / 2302.0002+ Fix from $1,9502023-07-11 HIGH 8.8 CVE-2023-2234 Union variant confusion allows any malicious BT controller to execute arbitrary code on the Zephyr host. Zephyr after 3.3.0 Fix from $1,9502023-07-10 CRITICAL 9.8 CVE-2022-48511 Use After Free (UAF) vulnerability in the audio PCM driver module under special conditions. Successful exploitation of this vulnerability may cause a… Emui Mitigation only Fix from $2,3002023-07-06 MEDIUM 6.7 CVE-2023-20768 In ion, there is a possible out of bounds read due to type confusion. This could lead to local escalation of privilege with System execution privileg… Android Mitigation only Fix from $1,6002023-07-04 HIGH 8.8 CVE-2023-3420EPSS 56% Type Confusion in V8 in Google Chrome prior to 114.0.5735.198 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML pag… Chrome 114.0.5735.198+ Fix from $1,9502023-06-26 HIGH 8.8 CVE-2023-32439 KEVEPSS 24% A type confusion issue was addressed with improved checks. This issue is fixed in iOS 16.5.1 and iPadOS 16.5.1, iOS 15.7.7 and iPadOS 15.7.7, macOS V… Safari 2.42.3 / 13.4.1+ Fix from $1,9502023-06-23 HIGH 7.8 CVE-2023-27930 A type confusion issue was addressed with improved checks. This issue is fixed in iOS 16.5 and iPadOS 16.5, watchOS 9.5, tvOS 16.5, macOS Ventura 13.… Ipados 9.5 / 13.4+ Fix from $1,9502023-06-23 MEDIUM 5.5 CVE-2023-3022 A flaw was found in the IPv6 module of the Linux kernel. The arg.result was not used consistently in fib6_rule_lookup, sometimes holding rt6_info and… Linux Kernel after 5.1 Fix from $1,6002023-06-19 HIGH 8.8 CVE-2023-3216 Type confusion in V8 in Google Chrome prior to 114.0.5735.133 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML pag… Chrome 114.0.5735.133+ Fix from $1,9502023-06-13 HIGH 8.8 CVE-2023-3079 KEVEPSS 32% Type confusion in V8 in Google Chrome prior to 114.0.5735.110 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML pag… Chrome 7.1.5 / 114.0.5735.110+ Fix from $1,9502023-06-05 HIGH 8.8 CVE-2023-28162 While implementing AudioWorklets, some code may have casted one type to another, invalid, dynamic type. This could have led to a potentially exploita… Firefox 102.9 / 111.0+ Fix from $1,9502023-06-02 HIGH 8.8 CVE-2023-2935EPSS 24% Type Confusion in V8 in Google Chrome prior to 114.0.5735.90 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page… Chrome 114.0.5735.90+ Fix from $1,9502023-05-30 HIGH 8.8 CVE-2023-2936EPSS 23% Type Confusion in V8 in Google Chrome prior to 114.0.5735.90 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page… Chrome 114.0.5735.90+ Fix from $1,9502023-05-30 CRITICAL 9.8 CVE-2023-23557 An error in Hermes' algorithm for copying objects properties prior to commit a00d237346894c6067a594983be6634f4168c9ad could be used by a malicious at… Hermes 2023-01-10+ Fix from $2,3002023-05-18 CRITICAL 9.8 CVE-2023-25933 A type confusion bug in TypedArray prior to commit e6ed9c1a4b02dc219de1648f44cd808a56171b81 could have been used by a malicious attacker to execute a… Hermes Patch available Fix from $2,3002023-05-18 HIGH 8.8 CVE-2023-2724EPSS 29% Type confusion in V8 in Google Chrome prior to 113.0.5672.126 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML pag… Chrome 113.0.5672.126+ Fix from $1,9502023-05-16 MEDIUM 6.7 CVE-2023-20673 In vcu, there is a possible memory corruption due to type confusion. This could lead to local escalation of privilege with System execution privilege… Iot Yocto Mitigation only Fix from $1,6002023-05-15