DCH-compatible Thunderbolt driver Heap Buffer Overflow DoS

The vulnerability of the DCH-compatible Thunderbolt driver is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...

ChakraCore JavaScript Buffer Overflow Information Disclosure

The vulnerability of the JavaScript script handler ChakraCore in the Microsoft Edge browser is caused by an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information...

Intel Converged Security and Manageability Engine Privilege Escalation

The vulnerability of the DAL subsystem of the Intel Converged Security and Manageability Engine CSME and the Intel Trusted Execution Engine TXE is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to enhance their privileges...

Intel Trusted Execution Engine Use-After-Free Privilege Escalation

The vulnerability of Intel Trusted Execution Engine TXE microprogramming software is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to enhance their privileges...

Adobe InDesign Computer Layout Automation Heap Buffer Overflow

The vulnerability of Adobe InDesign computer layout automation tools and the Adobe InDesign Server automation server is related to the execution of operations beyond the buffer limits in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code on the target system...

Adobe Illustrator Buffer Overflow

The vulnerability of Adobe Illustrator’s graphic editor is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user...

Adobe Illustrator Buffer Overflow

The vulnerability of Adobe Illustrator’s graphic editor is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user...

Adobe Illustrator Heap Buffer Overflow Code Execution

The vulnerability of Adobe Illustrator’s graphic editor is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user...

Design/Logic Flaw

Garmin Forerunner 235 before 8.20 is affected by: Array index error. The component is: ConnectIQ TVM. The attack vector is: To exploit the vulnerability, the attacker must upload a malicious ConnectIQ application to the ConnectIQ store. The ConnectIQ program interpreter trusts the offset provided...

tcpdump Heap Buffer Overflow DoS

The vulnerability of the vrrpprint function in the print-vrrp.c utility for capturing and analyzing network traffic using tcpdump is related to reading beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

Click-to-Run Component Buffer Overflow Privilege Escalation

The vulnerability of the Click-to-Run component of Microsoft Office applications is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to enhance their privileges through a specially created file...

Adobe Photoshop Buffer Overflow Info Disclosure

The vulnerability of the Adobe Photoshop graphic editor is related to reading data beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

KLA11983 Multiple vulnerabilities in Mozilla Firefox ESR

Multiple vulnerabilities were found in Mozilla Firefox ESR. Malicious users can exploit these vulnerabilities to cause denial of service, bypass security restrictions, execute arbitrary code. Below is a complete list of vulnerabilities: 1. Use after free vulnerability in WebRTC can be exploited t...

Information disclosure

An information disclosure vulnerability exists in the way that the Windows Graphics Device Interface Plus GDI+ handles objects in memory, allowing an attacker to retrieve information from a targeted system. By itself, the information disclosure does not allow arbitrary code execution; however, it...

October 13, 2020-KB4579976 Cumulative Update for .NET Framework 3.5, 4.7.2 and 4.8 for Windows 10, version 1809 and Windows Server, version 2019

None None...

Adobe Photoshop Buffer Overflow Info Disclosure

The vulnerability of the Adobe Photoshop graphic editor is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information...

Adobe Photoshop Buffer Overflow Code Execution

The vulnerability of the Adobe Photoshop graphic editor is related to reading beyond the buffer limit in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code in the context of the current user...

CVE-2020-14375

A flaw was found in dpdk in versions before 18.11.10 and before 19.11.5. Virtio ring descriptors, and the data they describe are in a region of memory accessible by from both the virtual machine and the host. An attacker in a VM can change the contents of the memory after vhostcrypto has validate...

kernel: use-after-free in sound/core/timer.c

A memory flaw was found in the ALSA subsystem of the Linux kernel. The struct sndtimerinstance function fails the timer-maxinstances check leading to an invalid address. This could lead to a use-after-free vulnerability...

CVE-2020-14377

A flaw was found in dpdk in versions before 18.11.10 and before 19.11.5. A complete lack of validation of attacker-controlled parameters can lead to a buffer over read. The results of the over read are then written back to the guest virtual machine memory. This vulnerability can be used by an...