Browse CVEs

MEDIUM 5.5 CVE-2023-46100 in OpenHarmony v3.2.2 and prior versions allow a local attacker get sensitive buffer information through use of uninitialized resource. Openharmony after 3.2.2 Fix from $1,6002023-11-20 HIGH 8.8 CVE-2023-38151 Microsoft Host Integration Server 2020 Remote Code Execution Vulnerability Host Integration Server Patch available Fix from $1,9502023-11-14 MEDIUM 6.5 CVE-2023-36398 Windows NTFS Information Disclosure Vulnerability Windows 10 1507 10.0.10240.20308 / 10.0.14393.6452+ Fix from $1,6002023-11-14 MEDIUM 5.5 CVE-2023-45663 stb_image is a single file MIT licensed library for processing images. The stbi__getn function reads a specified number of bytes from context (typica… Stb Image.h Mitigation only Fix from $1,6002023-10-21 MEDIUM 5.3 CVE-2023-31192 An information disclosure vulnerability exists in the ClientConnect() functionality of SoftEther VPN 5.01.9674. A specially crafted network packet ca… Vpn Patch available Fix from $1,6002023-10-12 MEDIUM 5.5 CVE-2023-36713EPSS 8% Windows Common Log File System Driver Information Disclosure Vulnerability Windows 10 1507 10.0.10240.20232 / 10.0.14393.6351+ Fix from $1,6002023-10-10 HIGH 7.8 CVE-2023-36704 Windows Setup Files Cleanup Remote Code Execution Vulnerability Windows 10 1809 10.0.17763.4974+ Fix from $1,9502023-10-10 HIGH 7.5 CVE-2023-36567 Windows Deployment Services Information Disclosure Vulnerability Windows 10 1507 10.0.10240.20232 / 10.0.17763.4974+ Fix from $1,9502023-10-10 MEDIUM 5.5 CVE-2023-25585 A flaw was found in Binutils. The use of an uninitialized field in the struct module *module may lead to application crash and local denial of servic… Binutils Patch available Fix from $1,6002023-09-14 MEDIUM 5.5 CVE-2023-25586 A flaw was found in Binutils. A logic fail in the bfd_init_section_decompress_status function may lead to the use of an uninitialized variable that c… Binutils Patch available Fix from $1,6002023-09-14 MEDIUM 5.5 CVE-2023-25588 A flaw was found in Binutils. The field `the_bfd` of `asymbol`struct is uninitialized in the `bfd_mach_o_get_synthetic_symtab` function, which may le… Binutils Patch available Fix from $1,6002023-09-14 MEDIUM 5.5 CVE-2023-38140 Windows Kernel Information Disclosure Vulnerability Windows 10 1607 10.0.14393.6252 / 10.0.17763.4851+ Fix from $1,6002023-09-12 HIGH 7.5 CVE-2023-21233 In multiple locations of avrc, there is a possible leak of heap data due to uninitialized data. This could lead to remote information disclosure with… Android Mitigation only Fix from $1,9502023-08-14 MEDIUM 5.5 CVE-2023-21276 In writeToParcel of CursorWindow.cpp, there is a possible information disclosure due to uninitialized data. This could lead to local information disc… Android Patch available Fix from $1,6002023-08-14 HIGH 7.5 CVE-2023-36913 Microsoft Message Queuing Information Disclosure Vulnerability Windows 10 10.0.10240.20107 / 10.0.14393.6167+ Fix from $1,9502023-08-08 MEDIUM 5.5 CVE-2023-3488 Uninitialized buffer in GBL parser in Silicon Labs GSDK v4.3.0 and earlier allows attacker to leak data from Secure stack via malformed GBL file. Gecko Software Development Kit after 4.3.0 Fix from $1,6002023-07-28 MEDIUM 5.5 CVE-2021-0948 The PVRSRVBridgeGetMultiCoreInfo ioctl in the PowerVR kernel driver can return uninitialized kernel memory to user space. The contents of this memory… Android Mitigation only Fix from $1,6002023-07-13 MEDIUM 5.5 CVE-2023-35326 Windows CDP User Components Information Disclosure Vulnerability Windows 10 1809 10.0.17763.4645 / 10.0.19041.3208+ Fix from $1,6002023-07-11 HIGH 7.5 CVE-2023-35325 Windows Print Spooler Information Disclosure Vulnerability Windows 10 1507 10.0.10240.20048 / 10.0.14393.6085+ Fix from $1,9502023-07-11 MEDIUM 5.5 CVE-2023-32041 Windows Update Orchestrator Service Information Disclosure Vulnerability Windows 10 1607 10.0.14393.6085 / 10.0.17763.4645+ Fix from $1,6002023-07-11 HIGH 7.5 CVE-2023-32042 OLE Automation Information Disclosure Vulnerability Windows 10 1507 10.0.10240.20048 / 10.0.14393.6085+ Fix from $1,9502023-07-11 HIGH 7.5 CVE-2023-35847 VirtualSquare picoTCP (aka PicoTCP-NG) through 2.1 does not have an MSS lower bound (e.g., it could be zero). Picotcp after 2.1 Fix from $1,9502023-06-19 MEDIUM 5.5 CVE-2023-2747 The initialization vector (IV) used by the secure engine (SE) for encrypting data stored in the SE flash memory is uninitialized. Gecko Software Development Kit 2.2.1+ Fix from $1,6002023-06-15 HIGH 8.8 CVE-2023-21127 In readSampleData of NuMediaExtractor.cpp, there is a possible out of bounds write due to uninitialized data. This could lead to remote code executio… Android Patch available Fix from $1,9502023-06-15 MEDIUM 5.5 CVE-2023-32016 Windows Installer Information Disclosure Vulnerability Windows 10 1507 10.0.10240.19983 / 10.0.14393.5989+ Fix from $1,6002023-06-14 HIGH 7.8 CVE-2023-29367 iSCSI Target WMI Provider Remote Code Execution Vulnerability Windows Server 2012 Patch available Fix from $1,9502023-06-14 HIGH 8.8 CVE-2023-32213 When reading a file, an uninitialized value could have been used as read limit. This vulnerability affects Firefox < 113, Firefox ESR < 102.11, and T… Firefox 102.11 / 113.0+ Fix from $1,9502023-06-02 CRITICAL 9.8 CVE-2023-24941EPSS 95% Windows Network File System Remote Code Execution Vulnerability Windows Server 2012 Patch available Fix from $2,3002023-05-09 HIGH 7.5 CVE-2023-28967 A Use of Uninitialized Resource vulnerability in the Border Gateway Protocol (BGP) software of Juniper Networks Junos OS and Junos OS Evolved allows … Junos Os Evolved Mitigation only Fix from $1,9502023-04-17 HIGH 7.5 CVE-2022-25737 Information disclosure in modem due to missing NULL check while reading packets received from local network Mdm8207 Firmware Mitigation only Fix from $1,9502023-04-13