CVE-2021-38022

CVE-2021-38022 affects Google Chrome’s WebAuthentication component in the Chromium engine, with an inappropriate implementation before 96.0.4664.45 that could allow a remote attacker to leak cross-origin data via a crafted HTML page. The issue is described in multiple security entries and advisor...

CVE-2023-4367

CVE-2023-4367 affects Google Chrome/Chromium’s Extensions API. The vulnerability arises from insufficient policy enforcement, enabling a user who installs a crafted malicious extension to bypass enterprise policy. Public advisories and vendor updates reference Chrome/Chromium fixes in the 116.0.5...

CVE-2024-26695

CVE-2024-26695 affects the Linux kernel crypto: ccp and fixes a null pointer dereference in __sev_platform_shutdown_locked when the SEV platform device is shutdown with a null psp_master (e.g., DEBUG_TEST_DRIVER_REMOVE). The issue was observed via KASAN, showing a null-deref in __sev_platform_shu...

CVE-2024-26754

CVE-2024-26754 : In the Linux kernel, a use-after-free and null pointer dereference in gtp_genl_dump_pdp() was fixed. The root cause is that the gtp_net_ops pernet operations structure for the gtp subsystem must be registered before the generic netlink family is registered. Affected code path inv...

CVE-2024-41096

CVE-2024-41096 : In the Linux kernel, KFENCE reported a use-after-free in PCI MSI handling during msi_capability_init. The root cause is an error-path path that unmasks a descriptor after it may have been freed, propagating a failure from __msi_domain_alloc_locked() back to pci_alloc_irq_vectors ...

CVE-2024-42136

CVE-2024-42136 affects the Linux kernel cdrom subsystem. The issue stems from an arithmetic path in last_media_change that could trigger a signed integer overflow under UBSAN when running syzkaller; the issue is resolved by rearranging the check to avoid any arithmetic, preventing the overflow. T...

CVE-2024-49986

CVE-2024-49986 refers to a Linux kernel issue affecting the x86/x86-android-tablets platform. The vulnerability arises during platform_device_register() error handling: x86_android_tablet_remove() frees the pdevs[] array, so the code must not use pdevs[] after its deletion. The fix, as described ...

CVE-2025-23158

The CVE-2025-23158 vulnerability affects the Linux kernel media: venus: hfi queue handling, where a firmware-modified large qsize can cause an OOB write when a new_wr_idx is not validated. The issue originates in reading/writing the shared queue (qhdr->q_size) and can lead to an out-of-bounds ...

CVE-2025-37820

CVE-2025-37820 (Linux kernel – xen-netfront) has a concrete issue: the function xdp_convert_buff_to_frame() may return NULL when failing to convert an XDP buffer to an XDP frame due to memory constraints, internal errors, or invalid data. If the caller does not check for NULL, a NULL pointer dere...

CVE-2025-37824

CVE-2025-37824 affects the Linux kernel TIPC monitor path. The issue is a NULL pointer dereference in tipc_mon_reinit_self() caused by a race between enabling and disabling the bearer, where mon->self may be NULL during reinitialization. A fix has been applied in tipc_mon_reinit_self() (net/ti...

CVE-2025-37862

CVE-2025-37862 affects the Linux kernel HID PIDFF code. The vulnerability is a NULL pointer dereference in pidff_find_fields (and pidff_find_special_field) when searching for a report not implemented on the device, potentially triggering a crash. The issue could occur for both optional and requir...

CVE-2025-37994

CVE-2025-37994 affects the Linux kernel driver path usb: typec: ucsi: displayport. The root cause is a NULL pointer access in ucsi_displayport_work handling. A patch was applied to ensure the UCSI driver waits for all pending tasks in the ucsi_displayport_work queue to finish before partner remov...

CVE-2025-3891

CVE-2025-3891 affects the Apache httpd mod_auth_openidc module. A remote, unauthenticated attacker can cause a DoS by sending an empty POST when the OIDCPreservePost directive is enabled, crashing the server and impacting availability. Evidence from multiple advisories confirms the issue and ment...

CVE-2009-2950

CVE-2009-2950 is a heap-based buffer overflow in OpenOffice.org’s GIFLZWDecompressor (decode.cxx) that can be triggered by a crafted GIF file, potentially causing an application crash or arbitrary code execution. Affected product: OpenOffice.org prior to 3.2. Connected advisories (Debian, Red Hat...

CVE-2009-3302

Summary (CVE-2009-3302) OpenOffice.org (OOo) Word import processing has a boundary error in sprmTSetBrc that can cause memory corruption. This vulnerability could allow a remote attacker to crash the application or potentially execute arbitrary code when processing crafted Word documents. The iss...

CVE-2010-2798

The CVE-2010-2798 entry concerns the Linux kernel prior to 2.6.35, where gfs2_dirent_find_space uses an incorrect size value in calculations related to sentinel directory entries. This can allow local attackers to trigger a denial of service via a NULL pointer dereference and kernel panic, with a...

CVE-2012-1093

The CVE-2012-1093 entry identifies a vulnerability in the Debian x11-common init script prior to version 1:7.6+12, where a symlink attack during package installation can lead to privilege escalation. Affected software: Debian x11-common package; vulnerable component: init script; root cause: syml...

CVE-2012-3160

CVE-2012-3160 is an unspecified vulnerability in the MySQL Server component affecting Oracle MySQL 5.1.65 and earlier, and 5.5.27 and earlier. It allows local users to affect confidentiality via unknown vectors related to Server Installation. Publicly referenced sources (OpenVAS, Debian DSA-2581-...

CVE-2012-3177

CVE-2012-3177 is associated with Oracle MySQL Server prior to 5.1.65/5.5.27 where remote authenticated users could affect availability via unknown vectors in the Server component. Connected sources corroborate multiple MySQL-related advisories/paches; MiracleLinux AXSA:2012-1036:03 lists CVE-2012...

CVE-2014-0452

CVE-2014-0452 is an Oracle Java SE vulnerability affecting Java 6u71, 7u51, 8 and Java SE Embedded 7u51, with the issue related to the JAX-WS component. The vulnerability is described as unspecified with partial confidentiality, integrity, and availability impact (C/P, I/P, A/P). Exploitation vec...

CVE-2014-1529

CVE-2014-1529 affects Mozilla Firefox and related Mozilla products (Firefox before 29.0, ESR 24.x before 24.5, Thunderbird before 24.5, SeaMonkey before 2.26). The Web Notification API vulnerability allows remote attackers to bypass source-component restrictions and run arbitrary JavaScript in a ...

CVE-2014-1738

CVE-2014-1738 is a Linux kernel vulnerability in the floppy driver (raw_cmd_copyout) where processing FDRAWCMD IOCTL calls could allow local attackers with write access to /dev/fd to read kernel heap memory. The flaw is described as an improper restriction of pointers during FDRAWCMD processing, ...

CVE-2014-3646

CVE-2014-3646 affects the Linux kernel’s KVM implementation: arch/x86/kvm/vmx.c lacks an exit handler for the INVVPID instruction, enabling a local guest-user to crash the guest OS (DoS) via a crafted application. Public remote advisories in connected Nessus plugins confirm the issue exists in ke...

CVE-2015-0418

CVE-2015-0418 is an Oracle VirtualBox local vulnerability in the Core component that could affect availability. The initial description is unspecific about vectors, but connected documents confirm this as a local, core-level issue affecting VirtualBox as shipped in older branches (e.g., 3.2.x up ...

CVE-2015-3153

Technical details for CVE-2015-3153 are not provided in the connected documents. Monitor for updates; the available material only includes the initial summary of impact without vendor/product specifics.

CVE-2016-0646

CVE-2016-0646 is an unspecified vulnerability in Oracle MySQL Server (DML-related) that can affect availability via local access. Connected advisories confirm multiple MariaDB/MySQL fixes and provide concrete remediations: upgrade to fixed upstream versions (e.g., MariaDB 10.0.25+ per Debian DSA-...

CVE-2016-0649

CVE-2016-0649 is cited in IBM Security Bulletins as an unspecified vulnerability in Oracle MySQL Server related to the Server: PS component that could cause a partial availability DoS. Affected product in this IBM bulletin is PowerKVM (versions 2.1 and 3.1); remediation is to apply updates via yu...

CVE-2017-11334

CVE-2017-11334 affects QEMU and is described as an OOB read/write bug in the address_space_write_continue path (exec.c) that allows a privileged guest‑OS user, via qemu_map_ram_ptr accessing guest RAM, to cause a denial of service and guest crash. The impact is local and involves an out‑of‑bounds...

CVE-2017-13721

CVE-2017-13721 affects X.Org Server (xserver/xorg-server) prior to 1.19.4. The issue arises in ProcShmCreateSegment: a shmseg resource id can belong to a non-existing client, causing X server aborts with FatalError or overwriting another client’s segment. This can enable a local attacker to crash...

CVE-2017-15191

CVE-2017-15191 affects Wireshark 2.0.0–2.4.1 (including 2.2.0–2.2.9 and 2.4.0–2.4.1). The DMP dissector contains a length-check flaw in 7‑bit string handling that can cause an application crash when processing malformed packets, potentially enabling a denial of service. The issue has been fixed u...

CVE-2017-15930

GraphicsMagick 1.3.26 contains a vulnerability in ReadOneJNGImage (coders/png.c) where a Null Pointer Dereference can occur while transferring JPEG scanlines (PixelPacket pointer). The issue is documented as CVE-2017-15930. The CVSS metrics from NVD indicate a high-severity impact (CVSS3 base sco...

CVE-2017-16845

CVE-2017-16845 : In QEMU, hw/input/ps2.c does not validate the guest migration values ‘rptr’ and ‘count’, causing an out-of-bounds access. This is documented in multiple sources associated with QEMU virtualization concerns (no fixed version or remediation details are provided in the supplied docu...

CVE-2017-3305

CVE-2017-3305 is a MySQL Server (Server: C API) vulnerability referenced in multiple advisories and Nessus plugins as enabling a man-in-the-middle attack via incorrect ordering of security parameter verification in a client (the Riddle). Affected versions in the initial description are 5.5.55 and...

CVE-2017-9525

CVE-2017-9525 affects the cron package (Debian: 3.0pl1-128; Ubuntu: 3.0pl1-128ubuntu2) where the postinst maintainer script allows group-crontab-to-root privilege escalation through unsafe usage of chown/chmod and symlink attacks. Multiple connected advisories reference Cron regressions and incom...

CVE-2018-1056

The CVE-2018-1056 entry concerns advancecomp prior to 2.1-2018/02, where an out-of-bounds heap buffer read in advzip’s ZIP processing could crash the advzip utility via crafted ZIP files. Affected software includes advancecomp and its components (e.g., advzip, advpng) across multiple distribution...

CVE-2018-18347

CVE-2018-18347 affects Chromium/WebKit’s Navigation component. A flaw in handling failed navigations with invalid URLs allowed a remote attacker to craft an HTML page that tricks a user into running JavaScript in an arbitrary origin. The Arch Linux advisory (ASA-201812-2) and Debian advisories no...

CVE-2018-18352

CVE-2018-18352 affects Chromium/Google Chrome Media handling, where cross-origin audio could be accessed due to an inappropriate implementation that bypassed the same-origin policy for audio content via crafted HTML. The issue is fixed in Chromium up to version 71.0.3578.80; upstream patches exis...

CVE-2018-2818

CVE-2018-2818 affects Oracle MySQL Server components (Server: Privileges) and is triggered by a high-privilege user over network protocols, potentially causing a hang or crash (DoS) on vulnerable MySQL Server versions 5.5.59 and earlier, 5.6.39 and earlier, or 5.7.21 and earlier. The connected ad...

CVE-2018-5144

CVE-2018-5144 describes an integer overflow during Unicode text conversion caused by an unchecked length parameter. Affected products: Firefox ESR and Thunderbird (pre-52.7). Root cause: overflow during Unicode conversion. Impact: potential remote code execution or memory issues as implied by the...

CVE-2018-6042

CVE-2018-6042 is a Chrome/Omnibox vulnerability: an incorrect security UI in the Omnibox allowed a remote attacker to spoof the URL bar via a crafted HTML page in Chrome versions prior to 64.0.3282.119. The issue enables spoofing of the OmniBox UI, potentially misleading users about the page they...

CVE-2018-6063

CVE-2018-6063 refers to an issue in Google Chrome/Chromium before 65.0.3325.146 where Mojo's shared memory permissions were mishandled via mojo::WrapSharedMemoryHandle in Mojo. This allowed a remote attacker who had already compromised a renderer process to perform an out-of-bounds memory write v...

CVE-2018-6172

CVE-2018-6172 affects Google Chrome (Omnibox/URL Formatter). The vulnerability arises from incorrect handling of confusable characters in the URL formatter, allowing a remote attacker to spoof a domain via IDN homographs in a crafted domain name. Affected product/versions: Google Chrome prior to ...

CVE-2018-7334

Wireshark vulnerability CVE-2018-7334 affects the UMTS MAC dissector in Wireshark 2.4.0–2.4.4 and 2.2.0–2.2.12. Root cause: a reserved value was not rejected in the UMTS MAC dissector (packet-umts_mac.c), allowing a crafted packet to crash the dissector. Impact: denial of service via crash; poten...

CVE-2018-8012

CVE-2018-8012 affects Apache ZooKeeper: no authentication/authorization is enforced when a server attempts to join a quorum (before 3.4.10 and 3.5.0-alpha to 3.5.3-beta). This allows an arbitrary endpoint to join the cluster and propagate counterfeit changes to the leader. IBM and related advisor...

CVE-2019-3464

CVE-2019-3464 involves insufficient sanitization of environment variables passed to rsync, enabling bypass of rssh restrictions and potential execution of arbitrary shell commands. The vulnerability affects setups using rssh as a restricted shell paired with rsync; attackers could exploit environ...

CVE-2020-8244

CVE-2020-8244 is a buffer over-read in the Node.js bl module, where input in consume() can become negative and corrupt BufferList state, potentially exposing uninitialized memory via slice(). Affected are bl versions <4.0.3, <3.0.1, <2.2.1, and

CVE-2021-21408

Smarty (PHP template engine) is affected by CVE-2021-21408. The vulnerability allows template authors to run restricted static PHP methods due to a flaw present in versions before 3.1.43 and 4.0.3. The issue arises from how templates can invoke static methods, enabling potential code execution. R...

CVE-2021-38010

CVE-2021-38010 : In Chromium (Google Chrome/Chromium) the service workers component had an inappropriate implementation flaw before version 96.0.4664.45 that allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. The practical impact i...

CVE-2021-47489

Concretely affected: the Linux kernel AMDGPU display driver code, specifically the drm/amdgpu_dm_debugfs.c path. A heap-based buffer overflow can be triggered by writing a string into the debug filesystem (dp_link_settings_write path), due to missing size checks when copying from userspace into a...

CVE-2022-23477

From the connected documents: CVE-2022-23477 affects xrdp before v0.9.21, with a buffer overflow in the audin_send_open() function. Root cause is an overflow in the input handling within audin_send_open(); no public exploit details are provided in the supplied sources. Impact is described variabl...