CVE-2023-22245

CVE-2023-22245 is linked to Adobe Substance 3D Stager. The connected CNNVD entry reports a vulnerability in versions prior to 2.0.0 arising from an out-of-bounds write that can cause a memory leak. remediation noted by Adobe APSB23-16 involves a security update; updating to 2.0.0 or later is the ...

U.S. Dept Of Defense: Reflected XSS in ██████

A reflected XSS vulnerability was found on one of the subdomains of a system. The vulnerability was located in the emailbody parameter of the PreviewLetterhead.aspx page. An attacker could exploit this vulnerability to execute malicious scripts and steal user's cookies, launch phishing attacks, a...

SUSE SLED15 / SLES15 / openSUSE 15 Security Update : grafana (SUSE-SU-2023:0362-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:0362-1 advisory. - Version update from 8.5.13 to 8.5.15 jscPED-2617: CVE-2022-39306: Security fix for privilege...

CVE-2022-20363

CVE-2022-20363 appears in the Chromecast July 2022 bulletin under AMLogic with component U-Boot, classified as Elevation of Privilege (EoP) and rated High severity. The bulletin notes this family of issues is addressed by updating Chromecast devices to the 2022-02-05 patch level or newer. The vul...

CVE-2019-10521

CVE-2019-10521 is listed in the Pixel September 2020 bulletin under Qualcomm components, classified as N/A type with Kernel as the affected subcomponent and a Moderate severity. The entry references QC-CR#2419292 (Android bug/QC reference). The provided Connected document does not include a vulne...

CVE-2019-10519

CVE-2019-10519 is listed under Qualcomm components in Google's Pixel September 2020 security bulletin as a Moderate-severity, N/A-type issue affecting the Display/graphics component. The bulletin does not provide a detailed root cause or exploit information. There is no explicit patch description...

CVE-2021-0950

Android 12 security release notes list CVE-2021-0950 under System as a Elevation of Privilege (EoP) with Moderate impact. The entry confirms this CVE affects Android 12 components addressed in the Android 12 release, and notes that patches will be released to the Android Open Source Project (AOSP...

CVE-2021-0949

Android 12 release notes include CVE-2021-0949 in the System category. Details show: CVE-2021-0949, Android bug ID A-184658476, Type: Information Disclosure (ID), Severity: Moderate. The document lists it among the Android 12 vulnerability entries with no specific exploit details or remediation v...

CVE-2021-0886

CVE-2021-0886 is listed in the Android 12 security release notes under the System component as a DoS vulnerability (Severity: Moderate). The Android bulletin does not provide exploit details or specific mitigations for this CVE. It notes that issues addressed in Android 12 are protected if device...

CVE-2021-0866

CVE-2021-0866 is listed under Android 12 Framework with type Information Disclosure (ID) and Moderate severity, referenced by Android bug ID A-184658476. The provided connected document does not include details on the root cause, affected subcomponent, impact scope, exploitability, or a fix. No r...

CVE-2021-0863

CVE-2021-0863 is listed in the Android 12 security release notes under Framework as an Information Disclosure (ID) vulnerability with Android bug ID A-118188362, Severity Moderate. It is addressed as part of the Android 12 release; no exploitation details are provided in the document.

CVE-2021-0862

CVE-2021-0862 is listed under Android 12 Framework issues with the type Elevation of Privilege (EoP) and High severity. The connected Android 12 vulnerability details document confirms the CVE entry exists and is part of the Android 12 release notes, but there are no provided specifics on the aff...

CVE-2021-0861

CVE-2021-0861 appears in the Android 12 security bulletin as part of the System vulnerabilities, bug ID A-131355925, classified as Information Disclosure (ID) with High severity. The Android 12 release notes indicate these issues are addressed in Android 12 patches, with devices protected at a se...

CVE-2021-0858

CVE-2021-0858 is listed in the Android 12 security release notes, under Framework with Type ID and High severity. The document does not provide concrete details on root cause, affected subcomponents, exploits, or specific fixes for this CVE. It notes that issues fixed in Android 12 are addressed ...

CVE-2021-25279

CVE-2021-25279 is listed in Google's Pixel security bulletin under Pixel modem vulnerabilities as an Elevation of Privilege (EoP) affecting the Modem component. The entry is marked as Critical. The bulletin indicates the issue is addressed by updates at or after the 2022-03-05 security patch leve...

CVE-2021-0857

Android 12 Security Release Notes enumerate CVE-2021-0857 in the System category with Type: RCE and Severity: High? No, Moderate as per the note list. The documents do not specify the vulnerable component, root cause, or exploit details. The notes state patches for issues in Android 12 were relea...

CVE-2021-0856

CVE-2021-0856 is listed under Android 12 Framework vulnerabilities with type Elevation of Privilege (EoP) and High severity. The Android 12 security release notes include CVE-2021-0856 in the Framework section (reference A-146211400). No exploit details or root-cause description are provided in t...

CVE-2021-0855

CVE-2021-0855 is listed in the Android 12 Media Framework section with an Elevation of Privilege (EoP) impact and a Moderate severity. The connected document provides only the vulnerability listing and does not include technical details such as affected subcomponents, versions, root cause, exploi...

CVE-2021-0854

Android 12 security release notes include CVE-2021-0854 in the System group, listed as A-154501976 with type ID and severity Moderate. No further technical details, affected products, exploit info, or fixes are provided in the referenced document.

CVE-2022-20139

Initial CVE-2022-20139 is reserved and no public technical details are provided in the connected documents. Technical specifics (affected products, root cause, impact, or fix) are not available here; monitor for updates as information becomes public.