Lucene search
+L

5797 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/02/06 12:00 a.m.•2 views

CVE-2023-20602: Integer Overflow or Wraparound

In ged, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07494107; Issue ID: ALPS07494107...

6.7CVSS5.9AI score0.00098EPSS
SaveExploits0References3
CVE
CVE
•added 2023/02/06 12:00 a.m.•77 views

CVE-2023-20610

CVE-2023-20610 describes a memory corruption risk in the MediaTek display DRM stack caused by a race condition, enabling local escalation of privilege with System execution privileges required and no user interaction. The vulnerability affects the display DRM component; the root cause is a race c...

6.4CVSS6.7AI score0.00092EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2023/02/06 12:00 a.m.•8 views

CVE-2023-20615

In ril, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07629572; Issue ID: ALPS07629572...

7.4AI score0.001EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2023/02/06 12:00 a.m.•2 views

PT-2023-17476

Name of the Vulnerable Software and Affected Versions keyinstall affected versions not specified Description The issue is related to a possible out of bounds read in keyinstall due to a missing bounds check. This could lead to local information disclosure, with System execution privileges require...

4.4CVSS0.00097EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
•added 2023/02/06 12:00 a.m.•14 views

CVE-2023-20607

In ccu, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07512839; Issue ID: ALPS07512839...

7.5AI score0.0009EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/02/06 12:00 a.m.•4 views

CVE-2023-20610: Improper Synchronization

In display drm, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07363469; Issue ID: ALPS07363469...

6.4CVSS6AI score0.00092EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/02/06 12:00 a.m.•6 views

CVE-2022-32595: Out-of-bounds Read

In widevine, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07446236; Issue ID: ALPS07446236...

4.4CVSS5.8AI score0.00137EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2023/02/06 12:00 a.m.•45 views

CVE-2022-32595

In widevine, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07446236; Issue ID: ALPS07446236...

4.6AI score0.00137EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2023/02/06 12:00 a.m.•7 views

PT-2023-13085

Name of the Vulnerable Software and Affected Versions Widevine affected versions not specified Description The issue is related to an incorrect bounds check, leading to a possible out of bounds read. This could result in local information disclosure, requiring System execution privileges for...

4.4CVSS0.00137EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/02/06 12:00 a.m.•5 views

CVE-2023-20608: Use After Free

In display drm, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07363599; Issue ID: ALPS07363599...

6.4CVSS6.1AI score0.00092EPSS
SaveExploits0References3
CVE
CVE
•added 2023/02/06 12:00 a.m.•149 views

CVE-2023-20602

CVE-2023-20602 affects the MediaTek ged component in MediaTek devices. The issue is a vulnerability in ged caused by an integer overflow leading to an out-of-bounds write. This can enable local escalation of privilege with System execution privileges required; no user interaction is needed for ex...

6.7CVSS6.7AI score0.00098EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
•added 2023/02/06 12:00 a.m.•5 views

PT-2023-17483

Name of the Vulnerable Software and Affected Versions ril affected versions not specified Description The issue is related to a possible out of bounds write due to a missing bounds check in ril. This could lead to local escalation of privilege with System execution privileges needed. User...

6.7CVSS0.001EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/02/06 12:00 a.m.•5 views

CVE-2022-32643: Improper Synchronization

In ccd, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07341261; Issue ID: ALPS07341261...

6.4CVSS6.1AI score0.00157EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/02/06 12:00 a.m.•5 views

CVE-2023-20612: Improper Input Validation

In ril, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07629571; Issue ID: ALPS07629571...

6.7CVSS5.9AI score0.001EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2023/02/06 12:00 a.m.•9 views

CVE-2023-20613

In ril, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07628614; Issue ID: ALPS07628614...

7.4AI score0.001EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/02/06 12:00 a.m.•6 views

CVE-2022-32656: Undefined Security Weakness

In Wi-Fi driver, there is a possible undefined behavior due to incorrect error handling. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: GN20220705035; Issue ID: GN20220705035...

6.7CVSS5.8AI score0.00312EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/02/06 12:00 a.m.•4 views

CVE-2022-32654: Undefined Security Weakness

In Wi-Fi driver, there is a possible undefined behavior due to incorrect error handling. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: GN20220705011; Issue ID: GN20220705011...

6.7CVSS5.8AI score0.00312EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2023/02/06 12:00 a.m.•4 views

PT-2023-17475

Name of the Vulnerable Software and Affected Versions ged affected versions not specified Description The issue is related to a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, with System execution privileges needed. User interaction i...

6.7CVSS0.00098EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/02/06 12:00 a.m.•6 views

CVE-2022-32655: Improper Handling of Exceptional Conditions

In Wi-Fi driver, there is a possible undefined behavior due to incorrect error handling. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: GN20220705028; Issue ID: GN20220705028...

6.7CVSS5.8AI score0.00312EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2023/02/06 12:00 a.m.•45 views

CVE-2022-32654

In Wi-Fi driver, there is a possible undefined behavior due to incorrect error handling. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: GN20220705011; Issue ID: GN20220705011...

7AI score0.00312EPSS
SaveExploits0References1
Rows per page
Query Builder