CVE-2019-8598

CVE-2019-8598 is an input-validation issue identified in Apple platforms. The supplied documents show the vulnerability affecting Apple iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, watchOS 5.2.1, iTunes for Windows 12.9.5, and iCloud for Windows 7.12, with the impact described as a malicious applic...

The vulnerability of the Coalesced_MMIO function in the Linux operating system allows a hacker to gain unauthorized access to information and compromise its integrity and accessibility.

The vulnerability of the CoalescedMMIO function in Linux operating systems is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to information and compromise its integrity and accessibility...

The vulnerability of TeamViewer’s software for remote control of computers lies in the fact that the operation data can escape beyond the buffer in memory, allowing a hacker to cause a service failure.

The vulnerability of TeamViewer’s software for remote control is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

Memory out-of-bounds read vulnerability in Adobe Acrobat and Reader (CNVD-2020-04321)

Adobe Acrobat and Reader are the United States of America Audobee Adobe company's products. The former is a set of PDF file editing and conversion tools, the latter is a set of PDF document reading software. Adobe Acrobat and Reader memory out-of-bounds read vulnerability, attackers can use the...

Memory out-of-bounds read vulnerability in Adobe Acrobat and Reader (CNVD-2020-04332)

Adobe Acrobat and Reader are the United States of America Audobee Adobe company's products. The former is a set of PDF file editing and conversion tools, the latter is a set of PDF document reading software. Adobe Acrobat and Reader memory out-of-bounds read vulnerability, attackers can use the...

Memory out-of-bounds read vulnerability in Adobe Acrobat and Reader (CNVD-2020-04329)

Adobe Acrobat and Reader are the United States of America Audobee Adobe company's products. The former is a set of PDF file editing and conversion tools, the latter is a set of PDF document reading software. Adobe Acrobat and Reader memory out-of-bounds read vulnerability, attackers can use the...

Adobe Acrobat and Reader suffer from a memory out-of-bounds read vulnerability (CNVD-2020-04324)

Adobe Acrobat and Reader are the United States of America Audobee Adobe company's products. The former is a set of PDF file editing and conversion tools, the latter is a set of PDF document reading software. Adobe Acrobat and Reader memory out-of-bounds read vulnerability, remote attackers can us...

Memory out-of-bounds read vulnerability in Adobe Acrobat and Reader (CNVD-2020-04330)

Adobe Acrobat and Reader are the United States of America Audobee Adobe company's products. The former is a set of PDF file editing and conversion tools, the latter is a set of PDF document reading software. Adobe Acrobat and Reader memory out-of-bounds read vulnerability, attackers can use the...

CVE-2019-1461

A denial of service vulnerability exists in Microsoft Word software when the software fails to properly handle objects in memory, aka 'Microsoft Word Denial of Service Vulnerability'...

Information disclosure

An information disclosure vulnerability exists in Microsoft Access software when the software fails to properly handle objects in memory, aka 'Microsoft Access Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-1400...

Remote code execution

A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'VBScript Remote Code Execution Vulnerability'...

CVE-2019-14861

All Samba versions 4.x.x before 4.9.17, 4.10.x before 4.10.11 and 4.11.x before 4.11.3 have an issue, where the poorly named dnsserver RPC pipe provides administrative facilities to modify DNS records and zones. Samba, when acting as an AD DC, stores DNS records in LDAP. In AD, the default...

The vulnerability of the WebBluetooth component in Google Chrome allows a malicious actor to initiate the installation of a malicious Chrome extension and gain unauthorized access to protected information.

The vulnerability of the WebBluetooth component in Google Chrome browser relates to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to initiate the installation of malicious Chrome extensions and gain unauthorized access to protected information...

The vulnerability of the HTMLImportsController function in the Blink web page rendering mechanism of Google Chrome allows a hacker to execute arbitrary code.

The vulnerability of the HTMLImportsController function in the Blink web page rendering mechanism of Google Chrome relates to the use of memory after it is released. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code using a specially created HTML page...

The vulnerability of the ReadSUNImage function (coders/sun.c) in the cross-platform library for working with graphics, GraphicsMagick, allows a hacker to trigger a service failure.

The vulnerability of the ReadSUNImage function coders/sun.c in the cross-platform library for working with graphics, GraphicsMagick, arises due to an operation going beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to cause a system failure...

Apache MINA Memory Corruption Vulnerability

Apache MINA is the United States Apache Apache Software Foundation of a web application framework. The product is mainly used to develop high-performance and highly scalable web applications. A security vulnerability exists in Apache MINA versions 2.0.20 and 2.1.0. The vulnerability stems from th...

Microsoft Windows Multiple Vulnerabilities (KB4525237)

This host is missing a critical security update according to Microsoft KB4525237 Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This progra...

CVE-2019-1438

An elevation of privilege vulnerability exists when the Windows Graphics Component improperly handles objects in memory, aka 'Windows Graphics Component Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-1407, CVE-2019-1433, CVE-2019-1435, CVE-2019-1437...

Information disclosure

An information disclosure vulnerability exists when the Windows Remote Procedure Call RPC runtime improperly initializes objects in memory, aka 'Windows Remote Procedure Call Information Disclosure Vulnerability'...

The vulnerability of the RTP protocol implementation in the VideoLAN VLC media player software allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the RTP protocol implementation in the VideoLAN VLC media player lies in buffer overflows in the dynamic memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause a service failure by using a specially created ogg file...