CVE-2019-19813

CVE-2019-19813 is a Linux kernel use-after-free in __mutex_lock on Linux kernel 5.0.21 when mounting a crafted btrfs image, performing operations, and calling syncfs, related to mutex_can_spin_on_owner, __btrfs_qgroup_free_meta, and btrfs_insert_delayed_items. It is a local, user-interaction-requ...

CVE-2019-6250

CVE-2019-6250 : ZeroMQ libzmq (v4.2.x and 4.3.x before 4.3.1) contains a pointer/integer overflow in v2_decoder_t::size_ready that can overflow the buffer and, from an authenticated state, allow arbitrary code execution. The vulnerability arises from an incorrect bounds check and can enable injec...

CVE-2020-15960

CVE-2020-15960 refers to an information-disclosure vulnerability in Chromium/Google Chrome prior to 85.0.4183.121. The 15960 issue is an out-of-bounds read in the storage component, exploitable via a crafted HTML page. The Debian/Arch/Gentoo entries corroborate the fix was to upgrade to 85.0.4183...

CVE-2020-15966

CVE-2020-15966 refers to Google Chrome where insufficient policy enforcement in extensions prior to 85.0.4183.121 could allow a user-driven attacker to obtain potentially sensitive information by convincing a user to install a malicious extension. Public disclosures in Debian/Arch/Fedora security...

CVE-2020-16287

Ghostscript v9.50 is affected by a buffer overflow in lprn_is_black() (contrib/lips4/gdevlprn.c) that could allow a remote attacker to cause a denial of service via a crafted PDF. The issue is fixed in Ghostscript v9.51. Suggested action: upgrade to 9.51 or later. CVSS data present in the provide...

CVE-2020-27758

CVE-2020-27758 : A flaw in ImageMagick (coders/txt.c) allows an attacker to submit a crafted file that ImageMagick processes, triggering undefined behavior outside the range of unsigned long long and likely impacting availability. Affected: ImageMagick versions prior to 7.0.8-68. This vulnerabili...

CVE-2020-28926

CVE-2020-28926 affects ReadyMedia (MiniDLNA) prior to 1.3.0 and enables remote code execution via a malicious UPnP HTTP request using HTTP chunked encoding, triggering a signedness bug that leads to a buffer overflow in memcpy/memmove. Multiple connected advisories confirm the issue and provide f...

CVE-2020-29480

Xen CVE-2020-29480 affects Xen up to 4.14.x. Xenstore watches lack permission checks, enabling a guest administrator to observe root xenstore notifications for all created, modified, and deleted keys and domain lifecycle events. The watch data may reveal counts/identities of other VMs, domains, d...

CVE-2020-35965

CVE-2020-35965 affects FFmpeg 4.3.1’s libavcodec/exr.c, where decode_frame can write out of bounds due to faulty calculations of when to perform memset zero operations. This is a memory corruption risk described across multiple advisories tied to FFmpeg vulnerabilities. From the connected documen...

CVE-2020-6541

The CVE-2020-6541 entry concerns a Use-after-free in WebUSB in Google Chrome prior to version 84.0.4147.105 . The underlying issue could allow a remote attacker to potentially exploit a heap corruption via a crafted HTML page. Affected software is Chrome’s WebUSB component; exploitability is desc...

CVE-2020-6571

CVE-2020-6571 affects Google Chrome Omnibox. Insufficient data validation enables a remote attacker to spoof a domain using IDN homographs in a crafted domain name. The issue is fixed in Chrome 85.0.4183.83 (and later); upgrading Chrome mitigates the vulnerability.

CVE-2021-35266

NTFS-3G vulnerability CVE-2021-35266 affects versions

CVE-2022-1968

CVE-2022-1968 affects the Vim editor (vim/vim) prior to 8.2. The public bulletins in connected docs describe a memory-safety issue: a Use-After-Free in Vim (notably involving utf_ptr2char) that can crash Vim and, in some variants, may enable memory corruption or worse. The Debian/CloudFoundry/Ama...

CVE-2022-23040

The CVE entry relates to Linux PV device frontends (blkfront, netfront, scsifront, gntalloc, xenbus, etc.) and the grant-table race conditions CVEs 2022-23036 to 2022-23042. The root cause is improper synchronization when removing granted access or freeing grant references, allowing a backend to ...

CVE-2022-2598

CVE-2022-2598 affects Vim where an out-of-bounds write to the API in vim/vim occurs in versions before 9.0.0100. Public advisories in the connected docs (e.g., Alpine and CBL-Mariner) indicate an upgrade to a newer Vim version to resolve this issue (CLI-safe wording: upgrade to 9.0.0100 or later)...

CVE-2022-2953

CVE-2022-2953 affects LibTIFF 4.4.0 with an out-of-bounds read in extractImageSection (tools/tiffcrop.c:6905), enabling DoS via crafted TIFF files. A fix is available via commit 48d6ece8389b01129e7d357f0985c8f938ce3da3. Connected advisories show mitigations for various platforms (e.g., Amazon Lin...

CVE-2022-3627

LibTIFF 4.4.0 is affected by CVE-2022-3627 due to an out-of-bounds write in _TIFFmemcpy (libtiff/tif_unix.c:346) when invoked from extractImageSection in tools/tiffcrop.c. This can lead to denial-of-service via a crafted TIFF file. The issue is addressed in the upstream fix committed as 236b7191,...

CVE-2023-3214

CVE-2023-3214 covers a use-after-free in Chrome/Chromium’s Autofill payments path prior to 114.0.5735.133. The vulnerability could enable heap corruption via a crafted HTML page, with high/critical impact (remote code execution possible, per the public advisories). Affected products include Googl...

CVE-2023-5997

The CVE-2023-5997 entry corresponds to a Use-After-Free in the Garbage Collection of Google Chrome/Chromium prior to 119.0.6045.159, enabling a remote attacker to potentially corrupt the heap through a crafted HTML page. Affected software includes Chromium-based browsers (Chrome) with fixes shipp...

CVE-2024-35805

CVE-2024-35805 affects the Linux kernel in the dm snapshot code path. The issue was a lockup when exiting a snapshot with many exceptions, resolved by adding a cond_resched in the loop that frees the exceptions in dm_exception_table_exit. The root cause is a lockup during exit of large dm-snapsho...

CVE-2024-35905

CVE-2024-35905 is a Linux kernel issue where a patch re-introduced protection against negative stack-access sizes in BPF code. The fix guards against out-of-bounds accesses in check_stack_range_initialized() when an access size can overflow its signed int representation. The vulnerability was mit...

CVE-2024-37383

CVE-2024-37383 affects Roundcube Webmail: an XSS caused by improper handling of SVG animate attributes in messages. Affected versions are Roundcube Webmail before 1.5.7 and 1.6.x before 1.6.7. Public details include a stored XSS instance reported for Roundcube 1.6.6 (Exploit-DB). Debian advisorie...

CVE-2024-47742

CVE-2024-47742 : Linux kernel firmware_loader path traversal vulnerability. Several code paths construct firmware filenames from device or userspace data (e.g., lpfc_sli4_request_firmware_update, nfp_net_fw_find, module_flash_fw_schedule). The issue arises when dynamic firmware names can include ...

CVE-2015-0411

CVE-2015-0411 concerns an unspecified remote vulnerability in Oracle MySQL Server versions 5.5.40 and earlier and 5.6.21 and earlier, related to Server: Security: Encryption. The impact is partial confidentiality, integrity, and availability loss via remote access. Connected advisories indicate r...

CVE-2015-3331

CVE-2015-3331 affects the Linux kernel up to 3.19.2, where __driver_rfc4106_decrypt in arch/x86/crypto/aesni-intel_glue.c mishandles memory locations for encrypted data, enabling a context-dependent attacker to trigger a buffer overflow via a crypto API call (e.g., with a libkcapi test program us...

CVE-2017-18078

The CVE-2017-18078 issue affects systemd-tmpfiles in systemd prior to 237. The root cause is that tmpfiles may attempt ownership/permission changes on hardlinked files even when fs.protected_hardlinks is off, enabling a local attacker to bypass access restrictions by using a hard link to a file t...

CVE-2017-2616

CVE-2017-2616 describes a race condition in util-linux before 2.32.1 where the su command’s handling of child processes could allow a local authenticated attacker to kill other processes with root privileges under certain conditions. Public advisories (Red Hat RHSA-2017:0907, CentOS/CESA entries,...

CVE-2017-3464

CVE-2017-3464 affects the Oracle MySQL Server component (Server: DDL). Affected are MySQL server versions 5.5.54 and earlier, 5.6.35 and earlier, and 5.7.17 and earlier. The vulnerability allows a low-privilege attacker with network access via multiple protocols to execute unauthorized updates/in...

CVE-2018-1000168

CVE-2018-1000168 affects nghttp2 versions 1.10.0 through 1.31.0, where an improper input validation in ALTSVC frame handling can cause a segmentation fault and denial of service. The vulnerability is exploitable via network clients. Public advisories confirm the issue is fixed in nghttp2 >= 1....

CVE-2018-5099

CVE-2018-5099 is a use-after-free vulnerability in the widget listener that can crash or potentially allow code execution when references to freed browser objects are used. Affected products/versions include Thunderbird < 52.6, Firefox ESR < 52.6, and Firefox

CVE-2018-5155

CVE-2018-5155 is a use-after-free in the layout code when processing SVG text-paths during animations, causing a potentially exploitable crash. Affected products include Thunderbird and Firefox: Thunderbird < 52.8 (including ESR), and Firefox

CVE-2019-9704

CVE-2019-9704 affects Vixie Cron in Debian, where the daemon can crash via a large crontab file due to calloc return value not being checked. Affects Debian package 3.0pl1-133 and earlier; remediation is to upgrade to 3.0pl1-133 or later. The connected Broadcom advisory also references CVE-2019-9...

CVE-2020-15970

CVE-2020-15970 is a Use-after-free in the NFC component of the Chromium/Google Chrome browser before 86.0.4240.75. Public sources in Debian/Arch/Fedora/FreeBSD describe it as a remote issue where an attacker who can cause renderer compromise could potentially escape the sandbox via a crafted HTML...

CVE-2020-15977

The CVE entry CVE-2020-15977 describes an insufficient data validation issue in the dialogs component of the Chromium browser prior to 86.0.4240.75, enabling a remote attacker to potentially disclose data from disk via a crafted HTML page. Connected advisories (e.g., Arch Linux ASA-202010-1) enum...

CVE-2020-15991

CVE-2020-15991: Use-after-free in the password manager of Chromium/Google Chrome before 86.0.4240.75 allows a remote attacker who can render HTML in the renderer to potentially escape the sandbox. The Debian/Fedora/Arch security advisories and FreeBSD/vuxml entries confirm this vulnerability and ...

CVE-2020-22019

CVE-2020-22019 : FFmpeg 4.2 contains a buffer overflow in the convolution_y_10bit path (libavfilter/vf_vmafmotion.c) that could allow a remote attacker to cause a Denial of Service. Connected documents confirm this exact trigger in FFmpeg 4.2 and note multiple advisories that fix or mitigate the ...

CVE-2020-22217

CVE-2020-22217 affects c-ares (pre-1.16.1 through 1.17.0). Root cause: buffer overflow in ares_parse_soa_reply.c. Exploitation could impact availability (CVSS shows Availability=High) with no confidentiality/integrity impact stated. Several connected advisories note patches/updates are available ...

CVE-2020-6442

CVE-2020-6442 affects Chromium/Google Chrome prior to 81.0.4044.92. The issue is an implementation error in the page cache that could allow a remote attacker to leak cross-origin data via a crafted HTML page. Impact: potential cross-origin data exposure without user interaction beyond visiting a ...

CVE-2020-6494

CVE-2020-6494 : Google Chrome on Android prior to 83.0.4103.97 is affected by an incorrect security UI in the payments component that allows a remote attacker to spoof the Omnibox (URL bar) via a crafted HTML page. Connected sources (Arch Linux ASA-202006-3, Debian DSA-4714, FreeBSD vuln note, CN...

CVE-2020-6542

CVE-2020-6542 affects ANGLE within Google Chrome prior to 84.0.4147.125. A use-after-free in ANGLE could allow remote attackers to trigger heap corruption via a crafted HTML page, potentially enabling arbitrary code execution. Debian/GLSA and other advisories confirm the same issue and indicate r...

CVE-2021-21162

CVE-2021-21162: Use-after-free in Chromium’s WebRTC before 89.0.4389.72. Affects the WebRTC component; root cause is a use-after-free leading to potential heap corruption exploitable by a crafted HTML page. Exploitation status not detailed in the provided docs beyond the CVE entry. Remediation: u...

CVE-2021-21176

CVE-2021-21176 is an issue in Chromium/Google Chrome’s full screen mode where an inadequate implementation allowed a remote attacker to spoof the Omnibox (URL bar) via a crafted HTML page. Affected products include Chrome/Chromium prior to version 89.0.4389.72 across multiple advisories; the root...

CVE-2021-45078

CVE-2021-45078 affects GNU Binutils (binutils) with a heap-based buffer overflow in the stab handling path (stab_xcoff_builtin_type / finish_stab in stabs.c). The issue is present in Binutils up to version 2.37; exploitation can cause a denial of service and potentially other impact as demonstrat...

CVE-2022-27386

CVE-2022-27386 is a MariaDB Server vulnerability affecting v10.7 and below, caused by a segmentation fault in sql_class.cc that can crash the server. Public advisories (Astra Linux, AlmaLinux, Debian DLA, Amazon Linux) confirm the issue and list affected packages and suggested updates. Remediatio...

CVE-2023-2007

CVE-2023-2007 affects the DPT I2O Controller driver in the Linux kernel. The issue arises from missing locking during object operations, enabling a local attacker to escalate privileges and execute arbitrary code in kernel context. Public references in Unity Linux (UTSA-2026-004778) and multiple ...

CVE-2023-2911

CVE-2023-2911 affects BIND 9 up to fixed versions in various distros. The issue occurs when the recursive-clients quota is reached with stale-answer-client-timeout 0, potentially causing named to loop and terminate due to a stack overflow. Public details list affected ranges (9.16.33–9.16.41, 9.1...

CVE-2023-52623

Technical details about CVE-2023-52623 are not publicly available in the provided documents. Monitor for updates from vendors and security bulletins.

CVE-2024-35807

CVE-2024-35807 pertains to a Linux kernel ext4 online resize corruption when resizing a filesystem larger than 16 TiB with 4k blocks. The issue occurs during on-line resize across an 8 GiB boundary, affecting the backup block group descriptor for non-meta_bg layouts and can corrupt data. The root...

CVE-2024-35854

CVE-2024-35854 : In the Linux kernel, the mlxsw: spectrum_acl_tcam component could trigger a use-after-free during rehash. The root cause is destruction of a region that still has filters when migration can fail (despite non-negative credits), leading to OOB/dereference via use-after-free. The fi...

CVE-2024-36020

The CVE-2024-36020 issue in the Linux kernel relates to the i40e driver: a VF pointer could be used uninitialized due to interchangeability of variables (v vs vf) introduced by a regression. A fix was implemented to remove redundant v, and to iterate using a single VF pointer across the affected ...