Browse CVEs

CRITICAL 9.8 CVE-2023-23557 An error in Hermes' algorithm for copying objects properties prior to commit a00d237346894c6067a594983be6634f4168c9ad could be used by a malicious at… Hermes 2023-01-10+ Fix from $2,3002023-05-18 CRITICAL 9.8 CVE-2023-25933 A type confusion bug in TypedArray prior to commit e6ed9c1a4b02dc219de1648f44cd808a56171b81 could have been used by a malicious attacker to execute a… Hermes Patch available Fix from $2,3002023-05-18 HIGH 8.8 CVE-2023-2724EPSS 29% Type confusion in V8 in Google Chrome prior to 113.0.5672.126 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML pag… Chrome 113.0.5672.126+ Fix from $1,9502023-05-16 MEDIUM 6.7 CVE-2023-20673 In vcu, there is a possible memory corruption due to type confusion. This could lead to local escalation of privilege with System execution privilege… Iot Yocto Mitigation only Fix from $1,6002023-05-15 MEDIUM 6.5 CVE-2023-24944 Windows Bluetooth Driver Information Disclosure Vulnerability Windows 10 1809 10.0.17763.4377 / 10.0.19042.2965+ Fix from $1,6002023-05-09 CRITICAL 9.8 CVE-2023-24823 RIOT-OS, an operating system that supports Internet of Things devices, contains a network stack with the ability to process 6LoWPAN frames. Prior to … Riot 2022.10+ Fix from $2,3002023-04-24 CRITICAL 10.0 CVE-2021-33970 Buffer Overflow vulnerability in Qihoo 360 Chrome v13.0.2170.0 allows attacker to escalate priveleges. Chrome No fix yet Fix from $2,3002023-04-19 HIGH 8.8 CVE-2023-2033 KEVEPSS 41% Type confusion in V8 in Google Chrome prior to 112.0.5615.121 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML pag… Chrome 7.1.5 / 112.0.5615.121+ Fix from $1,9502023-04-14 HIGH 8.8 CVE-2023-28243 Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability Windows 10 1507 10.0.10240.19869 / 10.0.14393.5850+ Fix from $1,9502023-04-11 HIGH 8.8 CVE-2023-24927 Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability Windows 10 1507 10.0.10240.19869 / 10.0.14393.5850+ Fix from $1,9502023-04-11 HIGH 8.8 CVE-2023-24929 Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability Windows 10 1507 10.0.10240.19869 / 10.0.14393.5850+ Fix from $1,9502023-04-11 HIGH 8.8 CVE-2023-24885 Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability Windows 10 1507 10.0.10240.19869 / 10.0.14393.5850+ Fix from $1,9502023-04-11 HIGH 7.8 CVE-2021-46878 An issue was discovered in Treasure Data Fluent Bit 1.7.1, erroneous parsing in flb_pack_msgpack_to_json_format leads to type confusion bug that inte… Fluent Bit Patch available Fix from $1,9502023-04-11 CRITICAL 9.8 CVE-2023-26063 Certain Lexmark devices through 2023-02-19 access a Resource By Using an Incompatible Type. Cxtpc Firmware No fix yet Fix from $2,3002023-04-10 HIGH 7.8 CVE-2022-37377 This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Editor 11.1.1.53537;. User interaction is… Pdf Editor 10.1.9 / 11.2.3+ Fix from $1,9502023-03-29 MEDIUM 5.5 CVE-2023-1076 A flaw was found in the Linux Kernel. The tun/tap sockets have their socket UID hardcoded to 0 due to a type confusion in their initialization functi… Linux Kernel Patch available Fix from $1,6002023-03-27 HIGH 7.0 CVE-2023-1077 In the Linux kernel, pick_next_rt_entity() may return a type confused entry, not detected by the BUG_ON condition, as the confused entry will not be … Linux Kernel 4.19.293 / 5.4.235+ Fix from $1,9502023-03-27 HIGH 7.8 CVE-2023-1078 A flaw was found in the Linux Kernel in RDS (Reliable Datagram Sockets) protocol. The rds_rm_zerocopy_callback() uses list_entry() on the head of a l… Linux Kernel 4.19.273 / 5.4.232+ Fix from $1,9502023-03-27 MEDIUM 6.7 CVE-2023-21056 In lwis_slc_buffer_free of lwis_device_slc.c, there is a possible memory corruption due to type confusion. This could lead to local escalation of pri… Android Mitigation only Fix from $1,6002023-03-24 MEDIUM 5.5 CVE-2023-0083 The ArKUI framework subsystem within OpenHarmony-v3.1.5 and prior versions, OpenHarmony-v3.0.7 and prior versions has an Improper Input Validation… Openharmony after 3.1.5 Fix from $1,6002023-03-10 MEDIUM 6.3 CVE-2023-1235 Type confusion in DevTools in Google Chrome prior to 111.0.5563.64 allowed a remote attacker who had compromised the renderer process to potentially … Chrome 111.0.5563.64+ Fix from $1,6002023-03-07 HIGH 8.8 CVE-2023-1214 Type confusion in V8 in Google Chrome prior to 111.0.5563.64 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page… Chrome 111.0.5563.64+ Fix from $1,9502023-03-07 HIGH 8.8 CVE-2023-1215 Type confusion in CSS in Google Chrome prior to 111.0.5563.64 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML pag… Chrome 111.0.5563.64+ Fix from $1,9502023-03-07 HIGH 8.8 CVE-2023-23529 KEVEPSS 10% A type confusion issue was addressed with improved checks. This issue is fixed in iOS 15.7.4 and iPadOS 15.7.4, iOS 16.3.1 and iPadOS 16.3.1, macOS V… Safari 13.2.1 / 15.7.4+ Fix from $1,9502023-02-27 HIGH 8.8 CVE-2023-22579 Due to improper parameter filtering in the sequalize js library, can a attacker peform injection. Sequelize 6.28.1+ Fix from $1,9502023-02-16 HIGH 7.4 CVE-2023-0286EPSS 60% There is a type confusion vulnerability relating to X.400 address processing inside an X.509 GeneralName. X.400 addresses were parsed as an ASN1_STRI… OpenSSL 1.0.2zg / 1.1.1t+ Fix from $1,9502023-02-08 HIGH 8.8 CVE-2023-0696 Type confusion in V8 in Google Chrome prior to 110.0.5481.77 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page… Chrome 110.0.5481.77+ Fix from $1,9502023-02-07 HIGH 8.8 CVE-2023-0702 Type confusion in Data Transfer in Google Chrome prior to 110.0.5481.77 allowed a remote attacker who convinced a user to engage in specific UI inter… Chrome 110.0.5481.77+ Fix from $1,9502023-02-07 HIGH 8.8 CVE-2023-0703 Type confusion in DevTools in Google Chrome prior to 110.0.5481.77 allowed a remote attacker who convinced a user to engage in specific UI interactio… Chrome 110.0.5481.77+ Fix from $1,9502023-02-07 MEDIUM 6.7 CVE-2023-20616 In ion, there is a possible out of bounds read due to type confusion. This could lead to local escalation of privilege with System execution privileg… Android Mitigation only Fix from $1,6002023-02-06