CVE-2020-15967

CVE-2020-15967 affects Chromium/Google Chrome prior to 86.0.4240.75, with a use-after-free in the payments component that could potentially lead to remote code execution and sandbox escape. Debian/FreeBSD/Arch Fedora advisories confirm the issue and provide a fixed version: 86.0.4240.75 (or newer...

CVE-2020-21041

CVE-2020-21041 is a FFmpeg 4.1 buffer overflow in libavcodec/pngenc.c (apng_do_inverse_blend) that enables a remote attacker to cause a Denial of Service. The connected documents confirm this exact issue across multiple sources (Astra Linux bulletin, Debian advisories) and reference mitigations v...

CVE-2020-3481

The CVE-2020-3481 issue affects ClamAV (EGG archive module) in versions 0.102.0–0.102.3. The vulnerability arises from a NULL pointer dereference in EGG handling, allowing an unauthenticated remote attacker to crash the ClamAV scanning process and cause a denial of service. Debian/ Fedora/ ALT Li...

CVE-2020-4067

In coturn, version 4.5.1.3 and earlier contains a vulnerability where the STUN/TURN response buffer is not initialized properly, allowing an attacker to leak information between distinct client connections by querying padding bytes. This is a consequence of an uninitialized memory region in the r...

CVE-2020-6442

CVE-2020-6442 affects Chromium/Google Chrome prior to 81.0.4044.92. The issue is an implementation error in the page cache that could allow a remote attacker to leak cross-origin data via a crafted HTML page. Impact: potential cross-origin data exposure without user interaction beyond visiting a ...

CVE-2020-6494

CVE-2020-6494 : Google Chrome on Android prior to 83.0.4103.97 is affected by an incorrect security UI in the payments component that allows a remote attacker to spoof the Omnibox (URL bar) via a crafted HTML page. Connected sources (Arch Linux ASA-202006-3, Debian DSA-4714, FreeBSD vuln note, CN...

CVE-2020-6571

CVE-2020-6571 affects Google Chrome Omnibox. Insufficient data validation enables a remote attacker to spoof a domain using IDN homographs in a crafted domain name. The issue is fixed in Chrome 85.0.4183.83 (and later); upgrading Chrome mitigates the vulnerability.

CVE-2021-21162

CVE-2021-21162: Use-after-free in Chromium’s WebRTC before 89.0.4389.72. Affects the WebRTC component; root cause is a use-after-free leading to potential heap corruption exploitable by a crafted HTML page. Exploitation status not detailed in the provided docs beyond the CVE entry. Remediation: u...

CVE-2021-21164

CVE-2021-21164 (Chrome on iOS) affects Google Chrome on iOS prior to version 89.0.4389.72, due to insufficient data validation that allows a remote attacker to leak cross-origin data via a crafted HTML page. The vulnerability is tied to Chrome’s handling on iOS, with the impact described as cross...

CVE-2021-21168

CVE-2021-21168 describes a policy-enforcement vulnerability in Chrome’s appcache: a remote attacker could exfiltrate potentially sensitive memory from a crafted HTML page. Affected: Chrome before 89.0.4389.72. Remediation: update to a version containing the fix (Debian notes 89.0.4389.114-1 for t...

CVE-2021-21226

CVE-2021-21226: Use-after-free in navigation in Google Chrome prior to 90.0.4430.85 allows a remote attacker who has compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Affected software: Google Chrome (renderer/navigation path). Root cause: use-after...

CVE-2022-23039

Linux PV device frontends (blkfront, netfront, scsifront, gntalloc, xenbus) are vulnerable to race conditions in grant-reference handling that can allow a backend to retain access to guest memory after grant removal or reuse, potentially causing data leakage, data corruption, or DoS. The issue sp...

CVE-2022-23040

The CVE entry relates to Linux PV device frontends (blkfront, netfront, scsifront, gntalloc, xenbus, etc.) and the grant-table race conditions CVEs 2022-23036 to 2022-23042. The root cause is improper synchronization when removing granted access or freeing grant references, allowing a backend to ...

CVE-2022-27337

CVE-2022-27337 describes a logic error in Poppler (v22.03.0) within the Hints::Hints function that can cause a Denial of Service when parsing a crafted PDF. The issue is a vulnerability in the PDF rendering library’s handling, not a user-triggered component, with the DoS impact noted in the publi...

CVE-2022-3234

CVE-2022-3234 : The Vim/vim project contains a heap-based buffer overflow in the code paths handling inputs for certain files, affected in Vim versions prior to 9.0.0483. The connected sources confirm this as a Vim vulnerability with the described heap overflow, but they do not provide specific e...

CVE-2022-3885

CVE-2022-3885 is a Use-after-free in V8 affecting Google Chrome prior to 107.0.5304.106 that could allow remote heap corruption via a crafted HTML page. The issue is confirmed in multiple trusted sources (Chromium/Chrome advisories and Astra Linux bulletin) and is tracked in Debian as fixed in Ch...

CVE-2023-2725

CVE-2023-2725 is a use-after-free in Chrome/Chromium's Guest View leading to potential heap corruption when a user is tricked into installing a malicious extension. Affected software: Google Chrome (Guest View) and Chromium components prior to version 113.0.5672.126. Root cause: use-after-free in...

CVE-2023-4015

CVE-2023-4015 describes a use-after-free in the Linux kernel nf_tables component of netfilter, enabling local privilege escalation. The issue arises when building a nftables rule: deactivating immediate expressions in nft_immediate_deactivate() can unbind a chain and deactivate objects that are l...

CVE-2023-6174

Wireshark SSH dissector (CVE-2023-6174) crashes in versions 4.0.0–4.0.10, allowing denial of service via crafted captures or packet injection. Debian security advisory DSA-5559-1 notes a fix in version 4.0.11-1~deb12u1; other advisories reference 4.0.12+ releases. No exploitation details are prov...

CVE-2024-26663

CVE-2024-26663 — Linux kernel (TIPC) bearer handling : The issue occurs in tipc_nl_bearer_add() when the UDP options attribute is used; it can call tipc_udp_nl_bearer_add() for non-UDP bearers, causing tipc_udp_is_known_peer() to dereference a non-UDP bearer and trigger a general protection fault...

CVE-2015-2730

CVE-2015-2730 affects Mozilla NSS (and NSS-used components such as Firefox/NSS bundles) with improper ECC multiplication handling that can enable remote signature forgery of ECDSA signatures. Connected advisories confirm the vulnerability in NSS prior to 3.19.1 and document mitigation through upg...

CVE-2015-8540

CVE-2015-8540: libpng contains an integer underflow in png_check_keyword (pngwutil.c) that allows remote attackers to trigger an out-of-bounds read via a space character used as a PNG keyword. Affected families include libpng 0.90–0.99, 1.0.x before 1.0.66, 1.1.x and 1.2.x before 1.2.56, 1.3.x an...

CVE-2016-2510

CVE-2016-2510 is BeanShell deserialization vulnerability: when BeanShell is on the classpath with Java serialization or XStream, crafted serialized data can lead to remote code execution via XThis.Handler. Public docs confirm impact across IBM Emptoris/Contract Management/Program Management suite...

CVE-2016-6794

CVE-2016-6794 affects Apache Tomcat across multiple branches (7.x, 8.x, 9.x) and versions, where the system property replacement feature for configuration files can bypass a configured SecurityManager to read restricted system properties. Connected advisories show concrete impact and suggested fi...

CVE-2017-18273

Technical details beyond the initial description are not provided in the supplied documents. No confirmed affected versions, impact specifics, or remediation are available here. Monitor for updates.

CVE-2017-3456

CVE-2017-3456 is a MySQL Server (Server: DML) vulnerability affecting 5.5.54 and earlier, 5.6.35 and earlier, and 5.7.17 and earlier. The issue, described as easily exploitable, allows a high-privilege attacker with network access via multiple protocols to cause a hang or a complete denial of ser...

CVE-2018-0618

The provided documents confirm CVE-2018-0618 is a cross-site scripting vulnerability in Mailman prior to or including 2.1.26, caused by unvalidated input in the host_name field, enabling a malicious listowner to inject scripts on the listinfo page. Affected product: Mailman (versions up to 2.1.26...

CVE-2018-17183

CVE-2018-17183 affects Artifex Ghostscript up to version 9.25. Affected component: error handling structures in Ghostscript’s execution path. Root cause: a user-writable error exception table could be abused by remote attackers that supply crafted PostScript, potentially overwriting or replacing ...

CVE-2018-5098

CVE-2018-5098 is a use-after-free in Thunderbird/Firefox related to manipulating form input elements, focus, and selections via script content, causing potential crashes. Affected: Thunderbird < 52.6, Firefox ESR < 52.6, Firefox

CVE-2018-5159

CVE-2018-5159 describes an integer overflow in the Skia library caused by 32-bit integer use in an array without bounds checks, leading to out-of-bounds writes. This can crash web content and is potentially exploitable. Affected products include Thunderbird < 52.8, Thunderbird ESR < 52.8, F...

CVE-2019-18391

CVE-2019-18391 is a heap-based buffer overflow in virglrenderer’s vrend_renderer_transfer_write_iov (virglrenderer up to 0.8.0) that allows a local attacker (guest OS) to cause a denial of service via VIRGL_CCMD_RESOURCE_INLINE_WRITE commands. Several connected advisories reference this flaw and ...

CVE-2019-6250

CVE-2019-6250 : ZeroMQ libzmq (v4.2.x and 4.3.x before 4.3.1) contains a pointer/integer overflow in v2_decoder_t::size_ready that can overflow the buffer and, from an authenticated state, allow arbitrary code execution. The vulnerability arises from an incorrect bounds check and can enable injec...

CVE-2020-14400

CVE-2020-14400 affects LibVNCServer up to version 0.9.12, where Byte-aligned data is accessed through uint16_t pointers in libvncserver/translate.c. Multiple security advisories (e.g., SUSE EulerOS/OpenVAS sources) list this CVE among a set of LibVNCServer issues and indicate fixes in newer relea...

CVE-2020-6564

CVE-2020-6564: In Google Chrome, an inappropriate implementation in permissions allowed a remote attacker to spoof the contents of a permission dialog via a crafted HTML page, before version 85.0.4183.83. This entry is supported by Debian/Fedora advisories and CVE listings stating that Chromium/C...

CVE-2021-21174

CVE-2021-21174 is an implementation error in the Referrer policy handling in Chromium/Google Chrome before 89.0.4389.72, allowing a remote attacker to bypass navigation restrictions via a crafted HTML page. Affected product: Chromium/Chrome (referrer policy component). Root cause: inappropriate/r...

CVE-2021-21177

CVE-2021-21177 is a policy enforcement error in Chrome/Chromium Autofill (prior to 89.0.4389.72). Insufficient policy enforcement could allow a remote attacker to exfiltrate potentially sensitive memory contents via a crafted HTML page. Affected component: Autofill in the Chromium browser; root c...

CVE-2021-3975

CVE-2021-3975 is a use-after-free in libvirt affecting the qemuMonitorUnregister path inside qemuProcessHandleMonitorEOF. It can be triggered by the virConnectGetAllDomainStats API during guest shutdown, allowing an unprivileged read-only client to crash the libvirt daemon and cause a denial of s...

CVE-2021-43860

CVE-2021-43860 (Flatpak) affects Flatpak prior to 1.12.3 and 1.10.6, where permissions shown to users at install time may not match runtime permissions due to a null byte in app metadata. Malicious apps can grant themselves hidden permissions because xa.metadata is read from commit metadata as a ...

CVE-2023-1811

CVE-2023-1811 is a Chrome/Chromium use-after-free in the Frames component causing potential heap corruption when a user engages in specific UI interactions with a crafted HTML page. The issue affects Google Chrome before version 112.0.5615.49 (reported as a high-severity, network-exploitable vuln...

CVE-2023-2007

CVE-2023-2007 affects the DPT I2O Controller driver in the Linux kernel. The issue arises from missing locking during object operations, enabling a local attacker to escalate privileges and execute arbitrary code in kernel context. Public references in Unity Linux (UTSA-2026-004778) and multiple ...

CVE-2024-35910

The CVE-2024-35910 issue affects the Linux kernel TCP timer handling for kernel sockets. Root cause: inet_csk_clear_xmit_timers() could be invoked with the socket lock held and uses del_timer(), risking timers running after the netns is freed. Fix: introduced inet_csk_clear_xmit_timers_sync() usi...

CVE-2011-4516

CVE-2011-4516 affects JasPer, specifically the heap-based buffer overflow in the function jpc_cox_getcompparms (libjasper/jpc/jpc_cs.c) within JasPer 1.900.1. A crafted value in a COD (coding style default) marker segment of a JPEG2000 file can cause remote code execution or memory corruption, po...

CVE-2015-1855

CVE-2015-1855 affects Ruby’s OpenSSL hostname matching: the OpenSSL extension fails to validate hostnames, allowing server spoofing. Affected: Ruby/OpenSSL before 2.0.0 patchlevel 645; 2.1.x before 2.1.6; 2.2.x before 2.2.2. Root cause: permissive hostname matching (wildcards, IDNA, case, non‑ASC...

CVE-2017-2616

CVE-2017-2616 describes a race condition in util-linux before 2.32.1 where the su command’s handling of child processes could allow a local authenticated attacker to kill other processes with root privileges under certain conditions. Public advisories (Red Hat RHSA-2017:0907, CentOS/CESA entries,...

CVE-2017-7612

CVE-2017-7612 affects Elfutils (elflint.c) with a heap-based buffer over-read in check_sysv_hash, enabling a crafted ELF file to cause a denial of service (application crash). The connected IBM CVE list confirms the same root cause and impact framing for Elfutils; no additional product/version de...

CVE-2018-1000168

CVE-2018-1000168 affects nghttp2 versions 1.10.0 through 1.31.0, where an improper input validation in ALTSVC frame handling can cause a segmentation fault and denial of service. The vulnerability is exploitable via network clients. Public advisories confirm the issue is fixed in nghttp2 >= 1....

CVE-2018-11781

CVE-2018-11781 is an Apache SpamAssassin vulnerability describing a local user code injection in the meta rule syntax. Affected software is SpamAssassin 3.4.2 (upstream) with fixes implemented to address the issue. Deb/kern sources indicate this is a local-execution flaw rather than remote, tied ...

CVE-2018-14350

CVE-2018-14350 : In Mutt before 1.10.1 and NeoMutt before 2018-07-16, imap/message.c contains a stack-based buffer overflow when handling a FETCH response with a long INTERNALDATE. This can allow arbitrary code execution. Affected versions: Mutt < 1.10.1; NeoMutt

CVE-2018-5097

CVE-2018-5097 is a use-after-free vulnerability in XSL transformations where the source document is manipulated by script content during transformation. Affected products include Mozilla Thunderbird and Firefox variants prior to version 52.6/58, with upstream fixes targeting Thunderbird 52.6.0 (a...

CVE-2018-5148

CVE-2018-5148 is a use-after-free in Firefox/Firefox ESR’s compositor triggered during certain graphics operations due to using a raw pointer instead of a reference-counted one. Affected versions include Firefox ESR < 52.7.3 and Firefox