Arbitrary Command Execution

ts-process-promises is vulnerable to arbitrary command execution. The usage of exec function allows an attacker to execute arbitrary commands on the host OS...

Arbitrary Code Execution

chromium is vulnerable to arbitrary code execution. A use-after-free vulnerability in clipboard allows an attacker to execute arbitrary code on the host OS...

Arbitrary Code Execution

chromium is vulnerable to arbitrary code execution. Incorrect handling of Reflect.construct in V8 allows a remote attacker to perform an out of bounds memory read via a malicious HTML page, or execute arbitrary code on the host OS...

Arbitrary Code Execution

milkytracker is vulnerable to arbitrary code execution. A stack-based buffer overflow in the LoaderXM::load function in LoaderXM.cpp allows an attacker to execute arbitrary code on the host OS...

Arbitrary Code Execution

binutils is vulnerable to arbitrary code execution. A stack-based buffer overflow in the ihexscan function in bfd/ihex.c allows remote attackers to crash the application and potentially allow for arbitrary code execution on the host OS via a malicious ihex file...

Arbitrary Code Execution

lighttpd is vulnerable to arbitrary code execution. A signed integer overflow allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code on the host OS malicious HTTP GET request due to mishandling of /%2F? in burlnormalize2Ftoslashfix in burl.c...

Arbitrary Code Execution

thunderbird is vulnerable to arbitrary code execution. An integer overflow in the Skia library when allocating memory for edge builders on some systems with at least 16 GB of RAM allows an attacker to exploit the vulnerability to crash the application or potentially execute arbitrary code on the...

Arbitrary Code Execution

openexr is vulnerable to arbitrary code execution. An invalid write of size 2 in the = operator function in half.h could allow an attacker to crash the application or execute arbitrary code on the host OS...

Arbitrary Code Execution

chromium is vulnerable to arbitrary code execution. Insufficient checks of pointer validity in WebRTC allows a remote attacker to exploit a heap corruption and execute arbitrary code on the host OS via a malicious HTML page...

CVE-2020-14339

A flaw was found in libvirt, where it leaked a file descriptor for /dev/mapper/control into the QEMU process. This file descriptor allows for privileged operations to happen against the device-mapper on the host. This flaw allows a malicious guest user or process to perform operations outside of...

Arbitrary Code Execution

chakracore is vulnerable to arbitrary code execution. A memory corruption vulnerability allows an attacker to execute arbitrary code on the host OS. This CVE ID is different from CVE-2020-17048...

CVE-2020-27673

An issue was discovered in the Linux kernel through 5.9.1, as used with Xen through 4.14.x. Guest OS users can cause a denial of service host OS hang via a high rate of events to dom0, aka CID-e99502f76271...

CVE-2020-27673

An issue was discovered in the Linux kernel through 5.9.1, as used with Xen through 4.14.x. Guest OS users can cause a denial of service host OS hang via a high rate of events to dom0, aka CID-e99502f76271...

CVE-2020-27672

An issue was discovered in Xen through 4.14.x allowing x86 guest OS users to cause a host OS denial of service, achieve data corruption, or possibly gain privileges by exploiting a race condition that leads to a use-after-free involving 2MiB and 1GiB superpages...

CVE-2020-27673

An issue was discovered in the Linux kernel through 5.9.1, as used with Xen through 4.14.x. Guest OS users can cause a denial of service host OS hang via a high rate of events to dom0, aka CID-e99502f76271...

CVE-2020-27672

An issue was discovered in Xen through 4.14.x allowing x86 guest OS users to cause a host OS denial of service, achieve data corruption, or possibly gain privileges by exploiting a race condition that leads to a use-after-free involving 2MiB and 1GiB superpages...

Race condition

An issue was discovered in Xen through 4.14.x allowing x86 guest OS users to cause a host OS denial of service, achieve data corruption, or possibly gain privileges by exploiting a race condition that leads to a use-after-free involving 2MiB and 1GiB superpages...

CVE-2020-27672

CVE-2020-27672 is a race-condition use-after-free in Xen 4.14.x and earlier that can be triggered by x86 guest OS users, potentially causing host DoS, data corruption, or privilege escalation via a race in the mapping of 2MiB/1GiB superpages. Affected products are Xen hypervisor deployments using...

CVE-2020-27672

An issue was discovered in Xen through 4.14.x allowing x86 guest OS users to cause a host OS denial of service, achieve data corruption, or possibly gain privileges by exploiting a race condition that leads to a use-after-free involving 2MiB and 1GiB superpages...

CVE-2020-27673

An issue was discovered in the Linux kernel through 5.9.1, as used with Xen through 4.14.x. Guest OS users can cause a denial of service host OS hang via a high rate of events to dom0, aka CID-e99502f76271...