Lucene search
+L

55 matches found

OSV
OSV
added 2022/09/06 6:15 p.m.5 views

CVE-2022-26451

In ged, there is a possible use after free due to improper locking. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07202966; Issue ID: ALPS07202966...

6.7CVSS5.9AI score0.0008EPSS
SaveExploits0References1
CVE
CVE
added 2022/09/06 5:19 p.m.57 views

CVE-2022-26451

In ged, a use-after-free due to improper locking is described, enabling local escalation to SYSTEM privileges with no user interaction required. Patch ID ALPS07202966 (Issue ALPS07202966) is noted as the remediation; exploitation status is not detailed in the provided documents.

6.7CVSS6.7AI score0.0008EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2022/09/06 5:19 p.m.24 views

CVE-2022-26451

In ged, there is a possible use after free due to improper locking. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07202966; Issue ID: ALPS07202966...

7AI score0.0008EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2022/09/06 12:0 a.m.10 views

MediaTek 芯片资源管理错误漏洞

MediaTek chips are a variety of chips from MediaTek, a Chinese company called MediaTek. A security vulnerability exists in the ged module of the MediaTek chips, which stems from improper locking and use after free. This could result in a local privilege escalation that requires system execution...

6.7CVSS6.8AI score0.0008EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2022/09/06 12:0 a.m.7 views

PT-2022-17862 · Ged · Ged

Name of the Vulnerable Software and Affected Versions: ged affected versions not specified Description: The issue is related to a possible use after free due to improper locking, which could lead to local escalation of privilege. System execution privileges are needed for exploitation, and user...

6.7CVSS6.6AI score0.0008EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2022/07/06 2:15 p.m.9 views

CVE-2022-21771

In GED driver, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06641585; Issue ID: ALPS06641585...

6.7CVSS6.7AI score0.00086EPSS
SaveExploits0References2
OSV
OSV
added 2022/07/06 2:15 p.m.6 views

CVE-2022-21771

In GED driver, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06641585; Issue ID: ALPS06641585...

6.7CVSS6.7AI score0.00086EPSS
SaveExploits0References1
NVD
NVD
added 2022/07/06 2:15 p.m.21 views

CVE-2022-21771

In GED driver, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06641585; Issue ID: ALPS06641585...

6.7CVSS0.00086EPSS
SaveExploits0References1
Prion
Prion
added 2022/07/06 2:15 p.m.20 views

Race condition

In GED driver, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06641585; Issue ID: ALPS06641585...

4.6CVSS6.7AI score0.00086EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2022/07/06 1:6 p.m.29 views

CVE-2022-21771

In GED driver, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06641585; Issue ID: ALPS06641585...

7AI score0.00086EPSS
SaveExploits0References1
CVE
CVE
added 2022/07/06 1:6 p.m.75 views

CVE-2022-21771

CVE-2022-21771 affects the GED driver and is a use-after-free caused by a race condition, enabling local privilege escalation to System with no user interaction required. The vulnerability details indicate the impact is partial to higher in integrity/availability per CVSS, with local exploit prer...

6.7CVSS6.7AI score0.00086EPSS
SaveExploits0References1Affected Software1
OSV
OSV
added 2022/04/11 8:15 p.m.4 views

CVE-2022-20076

In ged, there is a possible memory corruption due to an incorrect error handling. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05838808; Issue ID: ALPS05839556...

4.4CVSS5.9AI score0.00111EPSS
SaveExploits0References1
NVD
NVD
added 2022/04/11 8:15 p.m.15 views

CVE-2022-20076

In ged, there is a possible memory corruption due to an incorrect error handling. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05838808; Issue ID: ALPS05839556...

4.4CVSS0.00111EPSS
SaveExploits0References1
OSV
OSV
added 2022/04/11 8:15 p.m.7 views

CVE-2022-20075

In ged, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05838808; Issue ID: ALPS05838808...

6.7CVSS6.8AI score0.0012EPSS
SaveExploits0References1
NVD
NVD
added 2022/04/11 8:15 p.m.15 views

CVE-2022-20075

In ged, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05838808; Issue ID: ALPS05838808...

7.2CVSS0.0012EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2022/04/11 8:15 p.m.7 views

CVE-2022-20075

In ged, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05838808; Issue ID: ALPS05838808...

7.2CVSS6.8AI score0.0012EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2022/04/11 8:15 p.m.5 views

CVE-2022-20076

In ged, there is a possible memory corruption due to an incorrect error handling. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05838808; Issue ID: ALPS05839556...

4.4CVSS5.9AI score0.00111EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2022/04/11 7:38 p.m.23 views

CVE-2022-20075

In ged, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05838808; Issue ID: ALPS05838808...

7AI score0.0012EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2022/04/11 7:38 p.m.26 views

CVE-2022-20076

In ged, there is a possible memory corruption due to an incorrect error handling. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05838808; Issue ID: ALPS05839556...

4.8AI score0.00111EPSS
SaveExploits0References1
CVE
CVE
added 2022/04/11 7:38 p.m.82 views

CVE-2022-20075

CVE-2022-20075 refers to a vulnerability in ged caused by an integer overflow that leads to a possible out-of-bounds write, enabling local escalation of privileges with System execution privileges required. User interaction is not required. Patch ALPS05838808 (Issue ALPS05838808) is noted as reme...

7.2CVSS6.7AI score0.0012EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder