Cisco IOS XMCP DoS

The vulnerability of the Extensible Messaging Client Protocol XMCP in Cisco IOS and Cisco IOS XE operating systems lies in the lack of input validation for cyclic operations. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

Cisco IOS XE SNMP DoS

The vulnerability of the Simple Network Management Protocol SNMP subsystem in Cisco IOS XE lies in the fact that resources are not released after their useful period has expired. Exploiting this vulnerability allows a remote attacker to cause service interruptions...

Cisco Catalyst SD-WAN Symbolic Link

The vulnerability of the programmatically defined Cisco Catalyst SD-WAN formerly Cisco SD-WAN is related to the improper definition of symbolic links before accessing the file. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility o...

libfreerdp tls_match_hostname RDP server replacement

The vulnerability of the tlsmatchhostname function in the libfreerdp/crypto/tls.c file of the RDP client FreeRDP is related to errors in the certificate authentication process. Exploiting this vulnerability could allow an attacker to remotely replace the RDP server...

Cisco IOS XE Resource Exhaustion DoS

The vulnerability of Cisco IOS XE operating systems is related to insufficient control over resources during their existence. Exploiting this vulnerability can allow a malicious actor to compromise the accessibility of protected information...

Cisco IOS XE Information Disclosure

The vulnerability of Cisco IOS XE operating systems is related to the implementation of incorrect control flow. Exploiting this vulnerability allows a remote attacker to compromise the accessibility of protected information...

Cisco Catalyst SD-WAN Input Validation

The vulnerability of the programmatically defined Cisco Catalyst SD-WAN formerly Cisco SD-WAN is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information...

FreeRDP websocket_read_wstream() Disclosure DoS

The vulnerability of the websocketreadwstream function in the libfreerdp/core/gateway/websocket.c file of the RDP client FreeRDP is related to improper handling of invalid length parameters. Exploiting this vulnerability could allow an attacker to disclose sensitive information or cause service...

Cisco IOS XE Privilege Escalation

The vulnerability of Cisco IOS XE operating systems is related to operations that occur outside of the buffer in memory. Exploiting this vulnerability can allow a remote attacker to compromise the accessibility of protected information...

Cisco IOS XE Information Disclosure

The vulnerability of Cisco IOS XE operating systems is related to incorrect calculations. Exploiting this vulnerability can allow a remote attacker to compromise the accessibility of protected information...

Cisco IOS XE Information Disclosure

The vulnerability of Cisco IOS XE operating systems is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to compromise the accessibility of protected information...

Cisco Integrated Management Controller Command Execution Privilege Escalation

The vulnerability of the Cisco Integrated Management Controller IMC’s web management interface is related to improper validation of request parameters. Exploiting this vulnerability allows an attacker to execute arbitrary commands and elevate their privileges to the root level...

Cisco IOS XE Data Compromise

The vulnerability of Cisco IOS XE operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information...

Electron Context Isolation Full Access

The vulnerability of the context isolation mechanism of the Electron application development platform is related to the breach of data protection mechanisms. Exploiting this vulnerability allows an attacker operating remotely to gain full access to the system...

ANGLE DoS

The vulnerability of the ANGLE component in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created HTML page...

Linux Kernel Heap Buffer Overflow DoS

The vulnerability of the nrrouteframe function in the net/netrom/nrroute.c module, which is part of the networking functions in the Linux kernel, relates to the repeated release of previously released memory. Exploiting this vulnerability could allow a remote attacker to compromise the...

Linux kernel multimedia device driver Use-After-Free

The vulnerability of the mtkmdpprobe function in the drivers/media/platform/mediatek/mdp/mtkmdpcore.c file of the Linux kernel’s multimedia device driver relates to unsynchronized access to shared data in a multi-threaded context. Exploiting this vulnerability could allow an attacker to compromis...

GFX Component DoS

The vulnerability of the GFX web browser components in Google Chrome and Microsoft Edge is related to data type conversion errors. Exploiting this vulnerability can allow an attacker to cause a service failure using a specially created video file...

USB Component DoS

The vulnerability of the USB component in Google Chrome and Microsoft Edge browsers is related to improper code generation. Exploiting this vulnerability can allow a remote attacker to cause a service failure through a specially created HTML page...

Linux PCI Buffer Overflow

The vulnerability of the pcislottrylock function in the drivers/pci/pci.c file of the Linux system’s PCI device driver module is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and...

CORS Component Confidential Data Access

The vulnerability of the CORS component in Google Chrome and Microsoft Edge relates to the use of an untrusted intermediate policy file. Exploiting this vulnerability can allow a remote attacker to access confidential data through a specially created HTML page...

Font Component DoS

The vulnerability of the Font component in Google Chrome and Microsoft Edge relates to errors in HTTP request processing. Exploiting this vulnerability can allow a malicious actor to cause service interruptions through a specially created HTML page...

GPU components Confidential Data Access

The vulnerability of the GPU components in Google Chrome and Microsoft Edge relates to reading data from buffer areas beyond their permitted limits. Exploiting this vulnerability can allow an attacker to gain access to confidential data through a specially created HTML page...

Skia Graphic Library Data Compromise

The vulnerability of the Skia graphic library in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to compromise data integrity through a specially created print file...

Mojo web DoS

The vulnerability of the Mojo web browser components in Google Chrome and Microsoft Edge is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created HTML page...

GPU components DoS

The vulnerability of the GPU components in Google Chrome and Microsoft Edge browsers is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created HTML page...

Dawn Component Confidential Data Access

The vulnerability of the Dawn component in Google Chrome and Microsoft Edge relates to improper resource management throughout its lifecycle. Exploiting this vulnerability can allow an attacker to gain access to confidential data through a specially created HTML page...

Views Component Spear Phishing

The vulnerability of the Views component in Google Chrome and Microsoft Edge is related to information representation errors in the user interface. Exploiting this vulnerability can allow an attacker to perform spear-phishing attacks remotely...

WebXR Component DoS

The vulnerability of the WebXR component in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created HTML page...

Media component Google Chrome Microsoft Edge Bypass

The vulnerability of the Media component in Google Chrome and Microsoft Edge relates to a flaw in data protection mechanisms. Exploiting this vulnerability could allow an attacker to circumvent existing security restrictions remotely...

Chromoting DoS

The vulnerability of the Chromoting component in Google Chrome and Microsoft Edge is related to deficiencies in access control. Exploiting this vulnerability can allow a hacker to cause a service failure using a malicious file...

Extensions Component Code Execution

The vulnerability of the Extensions component in Google Chrome and Microsoft Edge browsers is related to the use of memory after it is freed. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

Google Chrome Microsoft Edge Buffer Overflow DoS

The vulnerability in Google Chrome and Microsoft Edge relates to reading data beyond the buffer in memory. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

Input component in Google DoS

The vulnerability of the Input component in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to cause a service failure through a specially created HTML page...

Chromecast web browsers DoS

The vulnerability of Google Chrome and Microsoft Edge web browsers relates to the execution of operations beyond the buffer in memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

WebRTC DoS

The vulnerability of the WebRTC component in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to cause a service failure through a specially created HTML page...

QUIC Component DoS

The vulnerability of the QUIC component in Google Chrome and Microsoft Edge browsers is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to cause a service failure...

GPU components DoS

The vulnerability of the GPU components in Google Chrome and Microsoft Edge relates to reading data from buffer areas beyond their acceptable limits. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created HTML page...

JFS File System Heap Buffer Overflow DoS

The vulnerability of the jfsiget function in the fs/jfs/inode.c file of the JFS file system in the Linux operating system is related to incorrect checking of the specified data type. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

Linux kernel sound subsystem Buffer Overflow

The vulnerability of the functions ac97adapterrelease, ac97addadapter, and sndac97controllerregister in the sound/ac97/bus.c module of the Linux kernel sound subsystem is related to the repeated release of previously released memory. Exploiting this vulnerability could allow an attacker to...

Linux kernel uacce_put_queue uacce_fops_unl_ioctl Data Compromise

The vulnerabilities of the functions uacceputqueue and uaccefopsunlioctl in the drivers/misc/uacce/uacce.c module of the Linux kernel are related to state management errors. Exploiting these vulnerabilities can allow attackers to compromise the confidentiality, integrity, and accessibility of...

Linux SPI Device Driver Heap Buffer Overflow DoS

The vulnerability of the sprdadiprobe function in the drivers/spi/spi-sprd-adi.c module of the Linux system’s SPI device driver relates to the re-release of previously released memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

scarlett2_usb_get_config Heap Buffer Overflow DoS

The vulnerability of the scarlett2usbgetconfig function in the sound/usb/mixerscarlett2.c module, which supports USB audio devices in Linux operating systems, is related to incorrect calculation of the buffer size. Exploiting this vulnerability could allow an attacker to compromise the...

mm/damon/sysfs.c Memory Management Data Compromise

The vulnerability of the damonsysfscontextadddirs function in the mm/damon/sysfs.c module, a memory management subsystem of the Linux operating system, is related to improper disabling or release of resources. Exploiting this vulnerability could allow an attacker to compromise the confidentiality...

Linux SPI Tegra210 Buffer Overflow

The vulnerability of the tegraqspicombinedseqxfer function in the drivers/spi/spi-tegra210-quad.c file of the Linux operating system’s SPI device driver relates to the pointer assignment. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

X86 device driver framework DoS

The vulnerabilities of the functions cmpcaccelsensitivityshowv4 and cmpcaccelsensitivitystorev4 in the driver/platform/x86/classmate-laptop.c file of the Linux operating system’s X86 kernel device driver are related to pointer manipulation. Exploiting these vulnerabilities could allow an attacker...

Linux kernel romfs_fill_super Heap Buffer Overflow DoS

The vulnerability of the romfsfillsuper function in the fs/romfs/super.c module of the Linux kernel file system is related to the lack of checking of the return value. Exploiting this vulnerability could allow an attacker to cause a service failure...

OpenSSH GSSAPI Heap Buffer Overflow DoS

The vulnerability of the sshpktdisconnect function in the GSSAPI component of the OpenSSH cryptographic security tool is related to the use of an uninitialized resource. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

Linux kernel Performance Monitoring Driver arm_cmn_discover() Buffer Overflow

The vulnerability of the armcmndiscover function in the drivers/perf/arm-cmn.c file of the Linux kernel’s performance monitoring driver relates to the copying of buffers without checking the size of the input data a classic buffer overflow attack. Exploiting this vulnerability could allow an...

netfilter TCPMSS DoS

The vulnerability of the tcpmssmt function in the net/netfilter/xttcpmss.c module of the netfilter component of the Linux operating system is related to reading beyond the buffer boundaries. Exploiting this vulnerability could allow a remote attacker to cause a service failure...