5374 matches found
Important: Red Hat Security Advisory: firefox security update
An update for firefox is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...
Design/Logic Flaw
Adobe Acrobat Reader versions 22.002.20212 and earlier and 20.005.30381 and earlier are affected by a Use After Free vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requir...
CVE-2022-38448
Adobe Dimension 3.4.5 is affected by a Use After Free vulnerability in SKP file parsing that could lead to arbitrary code execution in the context of the current user. Exploitation requires the user to open a malicious file. Mitigation: update to 3.4.6 or later (per APSB22-57) or apply vendor-rel...
CVE-2022-41303
A user may be tricked into opening a malicious FBX file which may exploit a use-after-free vulnerability in Autodesk FBX SDK 2020 version causing the application to reference a memory location controlled by an unauthorized third party, thereby running arbitrary code on the system...
Double free
A user may be tricked into opening a malicious FBX file which may exploit a use-after-free vulnerability in Autodesk FBX SDK 2020 version causing the application to reference a memory location controlled by an unauthorized third party, thereby running arbitrary code on the system...
SUSE-SU-2022:3587-1 Security update for the Linux Kernel
The SUSE Linux Enterprise 12 SP5 kernel was updated. The following security bugs were fixed: - CVE-2022-3303: Fixed a race condition in the sound subsystem due to improper locking bnc1203769. - CVE-2022-41218: Fixed an use-after-free caused by refcount races in drivers/media/dvb-core/dmxdev.c...
CVE-2022-41303
A user may be tricked into opening a malicious FBX file which may exploit a use-after-free vulnerability in Autodesk FBX SDK 2020 version causing the application to reference a memory location controlled by an unauthorized third party, thereby running arbitrary code on the system...
CVE-2022-41303
The CVE-2022-41303 entry concerns Autodesk FBX SDK 2020 or prior, where a use-after-free vulnerability could let a malicious FBX file cause the application to reference a memory location controlled by an attacker and run arbitrary code. Public sources in connected documents confirm the affected c...
PT-2025-18492
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.0.0 Description A double-free vulnerability has been identified in the Linux kernel, specifically in the tcp cdg release function. This issue can be triggered when mptcp calls tcp disconnect on an already...
RHEL 9 : gnutls and nettle (RHSA-2022:6854)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2022:6854 advisory. The gnutls packages provide the GNU Transport Layer Security GnuTLS library, which implements cryptographic algorithms and protocols such as SSL, TLS...
RHEL 8 : expat (RHSA-2022:6878)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2022:6878 advisory. Expat is a C library for parsing XML documents. Security Fixes: expat: a use-after-free in the doContent function in xmlparse.c CVE-2022-40674 For mo...
Important: expat security update
Expat is a C library for parsing XML documents. Security Fixes: expat: a use-after-free in the doContent function in xmlparse.c CVE-2022-40674 For more details about the security issues, including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE pages...
Huawei EulerOS: Security Advisory for systemd (EulerOS-SA-2022-2450)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
EulerOS Virtualization 3.0.6.6 : iproute (EulerOS-SA-2022-2507)
According to the versions of the iproute package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - iproute2 before 5.1.0 has a use-after-free in getnetnsidfromname in ip/ipnetns.c. NOTE: security relevance may be limited to...
CVE-2022-39853
CVE-2022-39853 describes a use-after-free vulnerability in the Samsung perf-mgr driver, affecting versions prior to the SMR Oct-2022 Release 1. The underlying issue allows an attacker to cause a memory access fault (memory corruption) and is classified with a high impact in NVD, with local attack...
RHEL 8 : expat (RHSA-2022:6833)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2022:6833 advisory. Expat is a C library for parsing XML documents. Security Fixes: expat: a use-after-free in the doContent function in xmlparse.c CVE-2022-40674 For mo...
Important: expat security update
Expat is a C library for parsing XML documents. Security Fixes: expat: a use-after-free in the doContent function in xmlparse.c CVE-2022-40674 For more details about the security issues, including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE pages...
USN-5654-1: Linux kernel (GKE) vulnerabilities
It was discovered that the framebuffer driver on the Linux kernel did not verify size limits when changing font or screen size, leading to an out-of- bounds write. A local attacker could use this to cause a denial of service system crash or possibly execute arbitrary code. CVE-2021-33655 Moshe Ko...
PT-2022-34665 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v4.8 through v5.10.142 Description: A use-after-free issue was discovered. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions v4.8 through v5.10.142, update to...
