SUSE CVE-2017-2926

Adobe Flash Player versions 24.0.0.186 and earlier have an exploitable memory corruption vulnerability related to processing of atoms in MP4 files. Successful exploitation could lead to arbitrary code execution...

SUSE CVE-2018-7339

The MP4Atom class in mp4atom.cpp in MP4v2 through 2.0.0 mishandles Entry Number validation for the MP4 Table Property, which allows remote attackers to cause a denial of service overflow, insufficient memory allocation, and segmentation fault or possibly have unspecified other impact via a crafte...

SUSE CVE-2018-14326

In MP4v2 2.0.0, there is an integer overflow with resultant memory corruption when resizing MP4Array for the ftyp atom in mp4array.h...

SUSE CVE-2020-24513

Domain-bypass transient execution vulnerability in some Intel AtomR Processors may allow an authenticated user to potentially enable information disclosure via local access...

SUSE CVE-2021-33120

Out of bounds read under complex microarchitectural condition in memory subsystem for some Intel AtomR Processors may allow authenticated user to potentially enable information disclosure or cause denial of service via network access...

February 14, 2023—KB5022838 (OS Build 14393.5717) - EXPIRED

None None...

2023.1 IPU - Intel® Atom® and Intel® Xeon® Scalable Processors Advisory

Summary: A potential security vulnerability in some Intel® Atom® and Intel® Xeon® Scalable Processors may allow escalation of privilege. Intel is releasing firmware updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2022-21216 Description: Insufficient granularity...

GitHub revokes several certificates after unauthorized access

In a call to action, GitHub warned users of GitHub Desktop for Mac and Atom that it will revoke certificates which were exposed during unauthorized access to a set of repositories used in the planning and development of GitHub Desktop and Atom. Revoking these certificates will invalidate some...

GitHub Breach: Hackers Stole Code-Signing Certificates for GitHub Desktop and Atom

GitHub on Monday disclosed that unknown threat actors managed to exfiltrate encrypted code signing certificates pertaining to some versions of GitHub Desktop for Mac and Atom apps. As a result, the company is taking the step of revoking the exposed certificates out of abundance of caution. The...

GitHub Breach: Hackers Stole Code-Signing Certificates for GitHub Desktop and Atom

GitHub on Monday disclosed that unknown threat actors managed to exfiltrate encrypted code signing certificates pertaining to some versions of GitHub Desktop for Mac and Atom apps. As a result, the company is taking the step of revoking the exposed certificates out of abundance of caution. The...

November 8, 2022—KB5019964 (OS Build 14393.5501) - EXPIRED

None None...

CVE-2022-45025

Markdown Preview Enhanced v0.6.5 and v0.19.6 for VSCode and Atom was discovered to contain a command injection vulnerability via the PDF file import function...

Command injection

Markdown Preview Enhanced v0.6.5 and v0.19.6 for VSCode and Atom was discovered to contain a command injection vulnerability via the PDF file import function...

Design/Logic Flaw

An issue in Markdown Preview Enhanced v0.6.5 and v0.19.6 for VSCode and Atom allows attackers to execute arbitrary commands during the GFM export process...

CVE-2022-45025

Markdown Preview Enhanced v0.6.5 and v0.19.6 for VSCode and Atom was discovered to contain a command injection vulnerability via the PDF file import function...

CVE-2022-45025

Markdown Preview Enhanced for VSCode and Atom (versions 0.6.5–0.19.6) contains a command-injection vulnerability via the PDF file import function. The Red Hat/GH reports describe an OS command injection via spawn with shell: true in the Mume library (pdf.ts), enabling arbitrary code execution if ...

CVE-2022-45026

An issue in Markdown Preview Enhanced v0.6.5 and v0.19.6 for VSCode and Atom allows attackers to execute arbitrary commands during the GFM export process...

CVE-2022-45026

Markdown Preview Enhanced for VSCode and Atom (versions 0.6.5–0.19.6) contains a command-injection flaw during the GFM export process. The root cause is an issue in how the extension handles GFM export, allowing arbitrary commands to be executed by an attacker. A PoC exploit is indicated in the c...

CVE-2022-45026: Improper Neutralization of Special Elements used in an OS Command

An issue in Markdown Preview Enhanced v0.6.5 and v0.19.6 for VSCode and Atom allows attackers to execute arbitrary commands during the GFM export process...

CVE-2022-45025

Markdown Preview Enhanced v0.6.5 and v0.19.6 for VSCode and Atom was discovered to contain a command injection vulnerability via the PDF file import function...