Browse CVEs

HIGH 7.8 CVE-2024-26739 In the Linux kernel, the following vulnerability has been resolved: net/sched: act_mirred: don't override retval if we already lost the skb If we'r… Debian Linux 5.10.238 / 5.15.182+ Fix from $1,9502024-04-03 HIGH 7.8 CVE-2023-52572 In the Linux kernel, the following vulnerability has been resolved: cifs: Fix UAF in cifs_demultiplex_thread() There is a UAF when xfstests on cifs… Debian Linux 5.4.297 / 5.10.237+ Fix from $1,9502024-03-02 HIGH 7.0 CVE-2023-6270 A flaw was found in the ATA over Ethernet (AoE) driver in the Linux kernel. The aoecmd_cfg_pkts() function improperly updates the refcnt on `struct n… Debian Linux 6.9+ Fix from $1,9502024-01-04 HIGH 7.0 CVE-2023-6932 A use-after-free vulnerability in the Linux kernel's ipv4: igmp component can be exploited to achieve local privilege escalation. A race condition c… Debian Linux 4.14.332 / 4.19.301+ Fix from $1,9502023-12-19 HIGH 8.8 CVE-2023-6509 Use after free in Side Panel Search in Google Chrome prior to 120.0.6099.62 allowed a remote attacker who convinced a user to engage in specific UI i… Debian Linux 120.0.6099.62+ Fix from $1,9502023-12-06 HIGH 8.8 CVE-2023-6510 Use after free in Media Capture in Google Chrome prior to 120.0.6099.62 allowed a remote attacker who convinced a user to engage in specific UI inter… Debian Linux 120.0.6099.62+ Fix from $1,9502023-12-06 HIGH 8.8 CVE-2023-39928 A use-after-free vulnerability exists in the MediaRecorder API of Webkit WebKitGTK 2.40.5. A specially crafted web page can abuse this vulnerability … Debian Linux Mitigation only Fix from $1,9502023-10-06 MEDIUM 6.6 CVE-2023-5197 A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation. Addition… Debian Linux 5.10.198 / 5.15.134+ Fix from $1,6002023-09-27 CRITICAL 9.8 CVE-2023-39355 FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. Versions of FreeRDP on the 3.x release bran… Debian Linux Patch available Fix from $2,3002023-08-31 HIGH 7.8 CVE-2023-21255 In multiple functions of binder.c, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege wi… Debian Linux Patch available Fix from $1,9502023-07-13 HIGH 7.8 CVE-2022-42332 x86 shadow plus log-dirty mode use-after-free In environments where host assisted address translation is necessary but Hardware Assisted Paging (HAP)… Debian Linux Mitigation only Fix from $1,9502023-03-21 HIGH 7.0 CVE-2023-0266 KEV A use after free vulnerability exists in the ALSA PCM package in the Linux Kernel. SNDRV_CTL_IOCTL_ELEM_{READ|WRITE}32 is missing locks that can be u… Debian Linux 4.14.303 / 4.19.270+ Fix from $1,9502023-01-30 HIGH 7.5 CVE-2022-43680 In libexpat through 2.4.9, there is a use-after free caused by overeager destruction of a shared DTD in XML_ExternalEntityParserCreate in out-of-memo… Debian Linux after 2.4.9 Fix from $1,9502022-10-24 HIGH 7.8 CVE-2022-20421 In binder_inc_ref_for_node of binder.c, there is a possible way to corrupt memory due to a use after free. This could lead to local escalation of pri… Debian Linux Patch available Fix from $1,9502022-10-11 HIGH 8.1 CVE-2022-40674 libexpat before 2.4.9 has a use-after-free in the doContent function in xmlparse.c. Debian Linux 2.4.9+ Fix from $1,9502022-09-14 HIGH 7.8 CVE-2022-3134 Use After Free in GitHub repository vim/vim prior to 9.0.0389. Debian Linux 9.0.0389+ Fix from $1,9502022-09-06 HIGH 8.1 CVE-2022-32293 In ConnMan through 1.41, a man-in-the-middle attack against a WISPR HTTP query could be used to trigger a use-after-free in WISPR handling, leading t… Debian Linux after 1.41 Fix from $1,9502022-08-03 HIGH 7.8 CVE-2022-1968 Use After Free in GitHub repository vim/vim prior to 8.2. Debian Linux 8.2.5050 / 13.0+ Fix from $1,9502022-06-02 MEDIUM 5.5 CVE-2022-26291 lrzip v0.641 was discovered to contain a multiple concurrency use-after-free between the functions zpaq_decompress_buf() and clear_rulist(). This vul… Debian Linux Patch available Fix from $1,6002022-03-28 HIGH 7.5 CVE-2021-3748 A use-after-free vulnerability was found in the virtio-net device of QEMU. It could occur when the descriptor's address belongs to the non direct acc… Debian Linux 6.2.0+ Fix from $1,9502022-03-23 CRITICAL 9.8 CVE-2022-23608 PJSIP is a free and open source multimedia communication library written in C language implementing standard based protocols such as SIP, SDP, RTP, S… Debian Linux 16.8.0 / 16.24.1+ Fix from $2,3002022-02-22 MEDIUM 5.5 CVE-2021-36408 An issue was discovered in libde265 v1.0.8.There is a Heap-use-after-free in intrapred.h when decoding file using dec265. Debian Linux No fix yet Fix from $1,6002022-01-10 MEDIUM 5.5 CVE-2021-45944 Ghostscript GhostPDL 9.50 through 9.53.3 has a use-after-free in sampled_data_sample (called from sampled_data_continue and interp). Debian Linux after 9.53.3 Fix from $1,6002022-01-01 HIGH 8.8 CVE-2021-21900 A code execution vulnerability exists in the dxfRW::processLType() functionality of LibreCad libdxfrw 2.2.0-rc2-19-ge02f3580. A specially-crafted .dx… Debian Linux No fix yet Fix from $1,9502021-11-19 CRITICAL 9.1 CVE-2021-43400 An issue was discovered in gatt-database.c in BlueZ 5.61. A use-after-free can occur when a client disconnects during D-Bus processing of a WriteValu… Debian Linux Patch available Fix from $2,3002021-11-04 MEDIUM 5.5 CVE-2020-21913 International Components for Unicode (ICU-20850) v66.1 was discovered to contain a use after free bug in the pkg_createWithAssemblyCode function in t… Debian Linux 66.1+ Fix from $1,6002021-09-20 HIGH 7.8 CVE-2021-36055 XMP Toolkit SDK versions 2020.1 (and earlier) are affected by a use-after-free vulnerability that could result in arbitrary code execution in the con… Debian Linux after 2020.1 Fix from $1,9502021-09-01 HIGH 8.8 CVE-2020-21688 A heap-use-after-free in the av_freep function in libavutil/mem.c of FFmpeg 4.2 allows attackers to execute arbitrary code. Debian Linux Patch available Fix from $1,9502021-08-10 MEDIUM 6.5 CVE-2020-21697 A heap-use-after-free in the mpeg_mux_write_packet function in libavformat/mpegenc.c of FFmpeg 4.2 allows to cause a denial of service (DOS) via a cr… Debian Linux Patch available Fix from $1,6002021-08-10 MEDIUM 5.5 CVE-2021-27347 Use after free in lzma_decompress_buf function in stream.c in Irzip 0.631 allows attackers to cause Denial of Service (DoS) via a crafted compressed … Debian Linux Patch available Fix from $1,6002021-06-10