Browse CVEs

MEDIUM 5.5 CVE-2024-50237 In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower Avoid p… Linux Kernel 4.19.323 / 5.4.285+ Fix from $1,6002024-11-09 MEDIUM 5.5 CVE-2024-50241 In the Linux kernel, the following vulnerability has been resolved: NFSD: Initialize struct nfsd4_copy earlier Ensure the refcount and async_copies… Linux Kernel 6.11.7+ Fix from $1,6002024-11-09 MEDIUM 5.5 CVE-2024-50173 In the Linux kernel, the following vulnerability has been resolved: drm/panthor: Fix access to uninitialized variable in tick_ctx_cleanup() The gro… Linux Kernel 6.10.14 / 6.11.3+ Fix from $1,6002024-11-08 HIGH 7.8 CVE-2024-50143 In the Linux kernel, the following vulnerability has been resolved: udf: fix uninit-value use in udf_get_fileshortad Check for overflow when comput… Linux Kernel 4.19.323 / 5.4.285+ Fix from $1,9502024-11-07 MEDIUM 5.5 CVE-2024-50110 In the Linux kernel, the following vulnerability has been resolved: xfrm: fix one more kernel-infoleak in algo dumping During fuzz testing, the fol… Linux Kernel 5.15.170 / 6.1.115+ Fix from $1,6002024-11-05 HIGH 7.8 CVE-2024-8896 A maliciously crafted DXF file when parsed in acdb25.dll through Autodesk AutoCAD can force to access a variable prior to initialization. A malicious… Autocad 2025.1.1+ Fix from $1,9502024-10-29 HIGH 7.1 CVE-2024-50033 In the Linux kernel, the following vulnerability has been resolved: slip: make slhc_remember() more robust against malicious packets syzbot found t… Linux Kernel 5.10.227 / 5.15.168+ Fix from $1,9502024-10-21 HIGH 7.1 CVE-2024-50035 In the Linux kernel, the following vulnerability has been resolved: ppp: fix ppp_async_encode() illegal access syzbot reported an issue in ppp_asyn… Linux Kernel 5.10.227 / 5.15.168+ Fix from $1,9502024-10-21 MEDIUM 5.5 CVE-2022-48949 In the Linux kernel, the following vulnerability has been resolved: igb: Initialize mailbox message for VF reset When a MAC address is not assigned… Linux Kernel 4.14.303 / 4.19.270+ Fix from $1,6002024-10-21 MEDIUM 5.5 CVE-2024-50014 In the Linux kernel, the following vulnerability has been resolved: ext4: fix access to uninitialised lock in fc replay path The following kernel t… Linux Kernel 6.10.14 / 6.11.3+ Fix from $1,6002024-10-21 MEDIUM 5.5 CVE-2024-49990 In the Linux kernel, the following vulnerability has been resolved: drm/xe/hdcp: Check GSC structure validity Sometimes xe_gsc is not initialized w… Linux Kernel 6.10.14 / 6.11.3+ Fix from $1,6002024-10-21 HIGH 7.1 CVE-2024-49900 In the Linux kernel, the following vulnerability has been resolved: jfs: Fix uninit-value access of new_ea in ea_buffer syzbot reports that lzo1x_1… Linux Kernel 5.10.227 / 5.15.168+ Fix from $1,9502024-10-21 CRITICAL 9.1 CVE-2024-47685 In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put() syzbot reported that … Debian Linux 4.19.323 / 5.4.285+ Fix from $2,3002024-10-21 MEDIUM 5.5 CVE-2024-47687 In the Linux kernel, the following vulnerability has been resolved: vdpa/mlx5: Fix invalid mr resource destroy Certain error paths from mlx5_vdpa_d… Linux Kernel 6.10.13 / 6.11.2+ Fix from $1,6002024-10-21 HIGH 7.8 CVE-2024-47966 Delta Electronics CNCSoft-G2 lacks proper initialization of memory prior to accessing it. An attacker can manipulate users to visit a malicious page … Cncsoft G2 Mitigation only Fix from $1,9502024-10-10 MEDIUM 6.5 CVE-2024-43537 Windows Mobile Broadband Driver Denial of Service Vulnerability Windows 10 1809 10.0.17763.6414 / 10.0.19044.5011+ Fix from $1,6002024-10-08 HIGH 7.1 CVE-2024-43502EPSS 6% Windows Kernel Elevation of Privilege Vulnerability Windows 10 1809 10.0.17763.6414 / 10.0.19044.5011+ Fix from $1,9502024-10-08 HIGH 7.1 CVE-2024-46865 In the Linux kernel, the following vulnerability has been resolved: fou: fix initialization of grc The grc must be initialize first. There can be a… Linux Kernel Patch available Fix from $1,9502024-09-27 MEDIUM 5.5 CVE-2024-46784 In the Linux kernel, the following vulnerability has been resolved: net: mana: Fix error handling in mana_create_txq/rxq's NAPI cleanup Currently n… Linux Kernel 6.1.110 / 6.6.51+ Fix from $1,6002024-09-18 HIGH 7.7 CVE-2024-43458 Windows Networking Information Disclosure Vulnerability Windows 10 1607 10.0.14393.7336+ Fix from $1,9502024-09-10 HIGH 8.8 CVE-2024-38260 Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability Windows Server 2008 10.0.14393.7336 / 10.0.17763.6293+ Fix from $1,9502024-09-10 MEDIUM 6.2 CVE-2024-38254 Windows Authentication Information Disclosure Vulnerability Windows 10 1507 10.0.10240.20766 / 10.0.14393.7336+ Fix from $1,6002024-09-10 MEDIUM 5.5 CVE-2024-38256 Windows Kernel-Mode Driver Information Disclosure Vulnerability Windows 10 1507 10.0.10240.20766 / 10.0.14393.7336+ Fix from $1,6002024-09-10 HIGH 7.5 CVE-2024-38257 Microsoft AllJoyn API Information Disclosure Vulnerability Windows 10 1607 10.0.14393.7336 / 10.0.17763.6293+ Fix from $1,9502024-09-10 CRITICAL 9.8 CVE-2024-8654 MongoDB Server may access non-initialized region of memory leading to unexpected behaviour when zero arguments are called in internal aggregation sta… MongoDB after 6.0.3 Fix from $2,3002024-09-10 HIGH 8.8 CVE-2024-8178 The ctl_write_buffer and ctl_read_buffer functions allocated memory to be returned to userspace, without initializing it. Malicious software running… FreeBSD 13.3+ Fix from $1,9502024-09-05 HIGH 7.1 CVE-2024-44999 In the Linux kernel, the following vulnerability has been resolved: gtp: pull network headers in gtp_dev_xmit() syzbot/KMSAN reported use of uninit… Linux Kernel 4.19.321 / 5.4.283+ Fix from $1,9502024-09-04 MEDIUM 5.5 CVE-2024-45005 In the Linux kernel, the following vulnerability has been resolved: KVM: s390: fix validity interception issue when gisa is switched off We might r… Linux Kernel 6.6.48 / 6.10.7+ Fix from $1,6002024-09-04 HIGH 7.1 CVE-2024-44983 In the Linux kernel, the following vulnerability has been resolved: netfilter: flowtable: validate vlan header Ensure there is sufficient room to a… Linux Kernel 5.15.166 / 6.1.107+ Fix from $1,9502024-09-04 HIGH 7.1 CVE-2024-43815 In the Linux kernel, the following vulnerability has been resolved: crypto: mxs-dcp - Ensure payload is zero when using key slot We could leak stac… Linux Kernel 6.10.3+ Fix from $1,9502024-08-17