Lucene search
K

983 matches found

Zero Day Initiative
Zero Day Initiative
added 2023/03/16 12:0 a.m.19 views

Adobe Dimension USD File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Dimension. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of USD...

7.8CVSS7.7AI score0.00387EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/03/16 12:0 a.m.22 views

Adobe Dimension USD File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Dimension. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of USD...

7.8CVSS7.7AI score0.00387EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/03/16 12:0 a.m.23 views

Adobe Substance 3D Stager SVG File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Substance 3D Stager. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS7.7AI score0.00379EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/03/15 12:0 a.m.18 views

Unity Technologies Unity Editor SKP File Parsing Use-After-Free Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Unity Technologies Unity Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

3.3CVSS2.3AI score
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/03/15 12:0 a.m.10 views

Unity Technologies Unity Editor SKP File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Unity Technologies Unity Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within th...

7.8CVSS4AI score
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/02/24 12:0 a.m.73 views

Microsoft Windows win32kfull UMPD Use-After-Free Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the win32kfull...

8.8CVSS8.6AI score0.00764EPSS
Exploits0References1
SUSE CVE
SUSE CVE
added 2023/02/15 3:47 a.m.2 views

SUSE CVE-2021-20226

A use-after-free flaw was found in the iouring in Linux kernel, where a local attacker with a user privilege could cause a denial of service problem on the system The issue results from the lack of validating the existence of an object prior to performing operations on the object by not...

7.8CVSS6.3AI score0.0044EPSS
Exploits0References4
SUSE CVE
SUSE CVE
added 2023/02/15 3:47 a.m.1 views

SUSE CVE-2021-20292

There is a flaw reported in the Linux kernel in versions before 5.9 in drivers/gpu/drm/nouveau/nouveausgdma.c in nouveausgdmacreatettm in Nouveau DRM subsystem. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker with ...

6.7CVSS7.5AI score0.0088EPSS
Exploits0References20
SUSE CVE
SUSE CVE
added 2023/02/15 3:27 a.m.1 views

SUSE CVE-2022-24050

MariaDB CONNECT Storage Engine Use-After-Free Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of MariaDB. Authentication is required to exploit this vulnerability. The specific flaw exists within the processing of SQL...

7.8CVSS8.3AI score0.00598EPSS
Exploits0References18
NVD
NVD
added 2023/01/26 6:59 p.m.12 views

CVE-2022-42414

This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

5.5CVSS4AI score0.00412EPSS
Exploits0References2
OSV
OSV
added 2023/01/26 6:59 p.m.2 views

CVE-2022-42408

This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

5.5CVSS5AI score0.00401EPSS
Exploits0References2
Prion
Prion
added 2023/01/26 6:59 p.m.11 views

Design/Logic Flaw

This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

1.9CVSS5.3AI score0.00412EPSS
Exploits0References2Affected Software1
Zero Day Initiative
Zero Day Initiative
added 2023/01/18 12:0 a.m.29 views

Microsoft Excel SKP File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Excel. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of SKP...

7.8CVSS4.1AI score0.00705EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/01/18 12:0 a.m.21 views

Microsoft 3D Builder PLY File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft 3D Builder. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing o...

6.6CVSS7.6AI score0.00939EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/01/18 12:0 a.m.16 views

Microsoft 3D Builder GLB File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft 3D Builder. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing o...

6.6CVSS7.5AI score0.00939EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/01/18 12:0 a.m.35 views

Microsoft Office SKP File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Office. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of SK...

7.8CVSS7.8AI score0.00915EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/01/18 12:0 a.m.24 views

Microsoft 3D Builder GLB File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft 3D Builder. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing o...

6.6CVSS7.5AI score0.00939EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/12/28 12:0 a.m.31 views

X.Org Server ScreenSaverSetAttributes Use-After-Free Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of X.Org Server. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the handling of...

7.8CVSS8.6AI score0.02367EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/12/15 12:0 a.m.26 views

Microsoft Excel SKP File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Excel. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of SKP...

7.8CVSS4.1AI score0.008EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/11/23 12:0 a.m.24 views

Foxit PDF Reader U3D File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of U3...

7.8CVSS4.3AI score0.01091EPSS
Exploits0References1
Rows per page
Query Builder