Adobe InCopy < 17.4.1 / 18.0 < 18.1.0 Multiple Vulnerabilities (APSB23-08)

The version of Adobe InCopy installed on the remote host is prior to 17.4.1, 18.1.0. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB23-08 advisory. - Adobe InCopy versions 18.0 and earlier, 17.4 and earlier are affected by an out-of-bounds write vulnerability that...

Adobe Reader < 20.005.30436 / 22.003.20310 Multiple Vulnerabilities (APSB23-01) (macOS)

The version of Adobe Reader installed on the remote macOS host is a version prior to 20.005.30436 or 22.003.20310. It is, therefore, affected by multiple vulnerabilities. - Adobe Acrobat Reader versions 22.003.20282 and earlier, 22.003.20281 and earlier and 20.005.30418 and earlier are affected b...

CVE-2022-4428: Improper Input Validation

supporturi parameter in the WARP client local settings file mdm.xml lacked proper validation which allowed for privilege escalation and launching an arbitrary executable on the local machine upon clicking on the "Send feedback" option. An attacker with access to the local file system could use a...

EulerOS Virtualization 2.9.1 : libtiff (EulerOS-SA-2023-1196)

According to the versions of the libtiff package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - libtiff's tiffcrop utility has a uint32t underflow that can lead to out of bounds read and write. An attacker who supplies a...

CVE-2023-21767: Improper Input Validation

Windows Overlay Filter Elevation of Privilege Vulnerability...

CVE-2021-46767: Improper Input Validation

Insufficient input validation in the ASP may allow an attacker with physical access, unauthorized write access to memory potentially leading to a loss of integrity or denial of service...

EulerOS Virtualization 2.9.0 : libtiff (EulerOS-SA-2023-1226)

According to the versions of the libtiff package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - libtiff's tiffcrop utility has a uint32t underflow that can lead to out of bounds read and write. An attacker who supplies a...

CVE-2023-20528: Improper Input Validation

Insufficient input validation in the SMU may allow a physical attacker to exfiltrate SMU memory contents over the I2C bus potentially leading to a loss of confidentiality...

CVE-2023-20527: Improper Input Validation

Improper syscall input validation in the ASP Bootloader may allow a privileged attacker to read memory out-of-bounds, potentially leading to a denial-of-service...

CVE-2023-20525: Improper Input Validation

Insufficient syscall input validation in the ASP Bootloader may allow a privileged attacker to read memory outside the bounds of a mapped register potentially leading to a denial of service...

CVE-2023-0139: Improper Input Validation

Insufficient validation of untrusted input in Downloads in Google Chrome on Windows prior to 109.0.5414.74 allowed a remote attacker to bypass download restrictions via a crafted HTML page. Chromium security severity: Low...

CVE-2023-21749: Improper Input Validation

Windows Kernel Elevation of Privilege Vulnerability...

CVE-2021-26404: Improper Input Validation

Improper input validation and bounds checking in SEV firmware may leak scratch buffer bytes leading to potential information disclosure...

CVE-2021-26316: Improper Input Validation

Failure to validate the communication buffer and communication service in the BIOS may allow an attacker to tamper with the buffer resulting in potential SMM System Management Mode arbitrary code execution...

CVE-2023-20532: Improper Input Validation

Insufficient input validation in the SMU may allow an attacker to improperly lock resources, potentially resulting in a denial of service...

CVE-2022-23814: Improper Input Validation

Failure to validate addresses provided by software to BIOS commands may result in a potential loss of integrity of guest memory in a confidential compute environment...

CVE-2022-33300

Memory corruption in Automotive Android OS due to improper input validation...

Improper Input Validation

slixmpp is vulnerable to improper input validation. The vulnerability exists in xmlstream.py, which allows an attacker to access the system and perform unauthorized actions due to improper SSL certificate hostname validation...

CVE-2022-33300 Improper input validation in Automotive Android OS

Memory corruption in Automotive Android OS due to improper input validation...

CVE-2022-33300

CVE-2022-33300 affects Automotive Android OS with memory corruption caused by improper input validation. Evidence from connected docs identifies the affected software as Automotive Android OS and notes the root cause as input validation errors leading to memory corruption. Reported impact scores ...