CVE-2018-5155

CVE-2018-5155 is a use-after-free in the layout code when processing SVG text-paths during animations, causing a potentially exploitable crash. Affected products include Thunderbird and Firefox: Thunderbird < 52.8 (including ESR), and Firefox

CVE-2020-14400

CVE-2020-14400 affects LibVNCServer up to version 0.9.12, where Byte-aligned data is accessed through uint16_t pointers in libvncserver/translate.c. Multiple security advisories (e.g., SUSE EulerOS/OpenVAS sources) list this CVE among a set of LibVNCServer issues and indicate fixes in newer relea...

CVE-2020-28049

CVE-2020-28049 affects SDDM prior to 0.19.0. A race during Xauthority file creation allows a local unprivileged user to connect to the X server for a brief window, exposing X display contents and potentially keystrokes or clipboard data. Root cause: race condition in Xauthority handling when star...

CVE-2020-28241

CVE-2020-28241 affects libmaxminddb prior to 1.4.3. A heap-based buffer over-read in dump_entry_data_list (maxminddb.c) is the root cause. Public advisories confirm the library as the vulnerable component; multiple sources (ALMA, Fedora, Debian) indicate fixes in libmaxminddb 1.4.3 and related se...

CVE-2020-29480

Xen CVE-2020-29480 affects Xen up to 4.14.x. Xenstore watches lack permission checks, enabling a guest administrator to observe root xenstore notifications for all created, modified, and deleted keys and domain lifecycle events. The watch data may reveal counts/identities of other VMs, domains, d...

CVE-2020-4031

CVE-2020-4031 affects FreeRDP prior to 2.1.2, with a use-after-free in the gdi_SelectObject path. All FreeRDP clients operating in compatibility mode using /relax-order-checks are exposed. The issue is mitigated by upgrading to FreeRDP 2.1.2 or later, which contains the fix. The available documen...

CVE-2020-6442

CVE-2020-6442 affects Chromium/Google Chrome prior to 81.0.4044.92. The issue is an implementation error in the page cache that could allow a remote attacker to leak cross-origin data via a crafted HTML page. Impact: potential cross-origin data exposure without user interaction beyond visiting a ...

CVE-2020-6571

CVE-2020-6571 affects Google Chrome Omnibox. Insufficient data validation enables a remote attacker to spoof a domain using IDN homographs in a crafted domain name. The issue is fixed in Chrome 85.0.4183.83 (and later); upgrading Chrome mitigates the vulnerability.

CVE-2020-6573

CVE-2020-6573 affects Chromium before 85.0.4183.102. A use-after-free in the video component could allow a remote attacker, with renderer access, to escape the sandbox via a crafted HTML page, potentially leading to arbitrary code execution. Remediation: upgrade to 85.0.4183.102 or newer as indic...

CVE-2021-21226

CVE-2021-21226: Use-after-free in navigation in Google Chrome prior to 90.0.4430.85 allows a remote attacker who has compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Affected software: Google Chrome (renderer/navigation path). Root cause: use-after...

CVE-2021-37962

CVE-2021-37962 is a use-after-free in Chrome’s Performance Manager before version 94.0.4606.54, enabling a remote attacker who has compromised the renderer to potentially trigger heap corruption via a crafted HTML page. The vulnerability affects Google Chrome (renderer/Performance Manager compone...

CVE-2021-42762

CVE-2021-42762 affects WebKitGTK and WPE WebKit up to version 2.34.0 (fixed in 2.34.1). BubblewrapLauncher.cpp can enable a limited sandbox bypass, allowing a sandboxed process to trick host processes into thinking it is not confined by the sandbox by abusing VFS syscalls that manipulate the file...

CVE-2021-43300

CVE-2021-43300 describes a stack-buffer overflow in the PJSUA API’s pjsua_recorder_create due to an attacker-controlled filename being copied into a fixed-size stack buffer without size validation. The vulnerability is present in the embedded pjproject used by Ring. Public advisories (Debian/Ubun...

CVE-2021-45078

CVE-2021-45078 affects GNU Binutils (binutils) with a heap-based buffer overflow in the stab handling path (stab_xcoff_builtin_type / finish_stab in stabs.c). The issue is present in Binutils up to version 2.37; exploitation can cause a denial of service and potentially other impact as demonstrat...

CVE-2022-27386

CVE-2022-27386 is a MariaDB Server vulnerability affecting v10.7 and below, caused by a segmentation fault in sql_class.cc that can crash the server. Public advisories (Astra Linux, AlmaLinux, Debian DLA, Amazon Linux) confirm the issue and list affected packages and suggested updates. Remediatio...

CVE-2022-32083

MariaDB CVE-2022-32083 affects MariaDB 10.2–10.6.1 with a segmentation fault in Item_subselect::init_expr_cache_tracker. The Connected documents confirm the same issue across multiple advisories, but none specify an official fixed version in the provided text. Impact is a crash (DoS-like concern)...

CVE-2023-3111

CVE-2023-3111 is a use-after-free in the Btrfs filesystem driver (fs/btrfs/relocation.c, function prepare_to_relocate). The flaw can be triggered by calling btrfs_ioctl_balance() before btrfs_ioctl_defrag(), leading to potential kernel memory corruption. Public documentation in connected advisori...

CVE-2023-5732

CVE-2023-5732 affects Firefox (pre-117 and ESR pre-115.4) and Thunderbird (pre-115.4.1). An attacker could craft a link using bidirectional characters to spoof the displayed address in the address bar. Public details in connected advisories confirm this vulnerability and list affected products; r...

CVE-2024-26773

CVE-2024-26773: The Linux kernel ext4 block allocator vulnerability is resolved. The fix prevents allocating blocks from a group whose block bitmap is corrupted during concurrent operations by verifying the group bitmap integrity before using ac_b_ex in ext4_mb_try_best_found(), and by guarding t...

CVE-2024-42159

The CVE-2024-42159 entry corresponds to a Linux kernel vulnerability in the SCSI mpi3mr driver where values stored in mr_sas_port->phy_mask could exceed the field size, risking improper handling and potential memory corruption. Public advisories (ALAS/Red Hat/Debian) list the fixed kernel upda...

CVE-2025-38350

CVE-2025-38350 affects the Linux kernel net/sched HFSC and other classful qdiscs. The issue arises when a child qdisc becomes empty during enqueue/dequeue interactions, potentially leading to a use-after-free on stale class pointers after backlog/backlog accounting. The known fix changes the back...

CVE-2014-1510

The Web IDL implementation in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25 is vulnerable to remote code execution. An attacker can execute arbitrary JavaScript code with chrome privileges by utilizing an IDL fragment to trigger a wi...

CVE-2016-9900

CVE-2016-9900 describes that data: URLs used by SVG images can bypass security restrictions, enabling cross-domain data leakage. Affected products include Mozilla Firefox (non-ESR) prior to 50.1, Firefox ESR prior to 45.6, and Thunderbird prior to 45.6. Root cause is the handling of external reso...

CVE-2016-9921

According to connected sources, CVE-2016-9921 affects QEMU with Cirrus CLGD 54xx VGA Emulator. The root cause is a divide-by-zero in cirrus_do_copy when Cirrus VGA graphics mode is VGA, which can be triggered during VGA data copying. Impact is guest-privileged code causing a host DoS by crashing ...

CVE-2018-11781

CVE-2018-11781 is an Apache SpamAssassin vulnerability describing a local user code injection in the meta rule syntax. Affected software is SpamAssassin 3.4.2 (upstream) with fixes implemented to address the issue. Deb/kern sources indicate this is a local-execution flaw rather than remote, tied ...

CVE-2018-12600

ImageMagick 7.0.8-3 Q16 contains ReadDIBImage/WriteDIBImage in coders/dib.c that allow an out-of-bounds write via a crafted image file, leading to memory corruption/DoS. Affected releases and advisories reference CVE-2018-12600. Remediation: update ImageMagick to a patched version as advised by A...

CVE-2018-14342

CVE-2018-14342 affects Wireshark/BGP dissector: in Wireshark versions 2.6.0–2.6.1, 2.4.0–2.4.7, and 2.2.0–2.2.15, the BGP protocol dissector could loop excessively due to insufficient validation of Path Attribute lengths. The issue was addressed in epan/dissectors/packet-bgp.c by validating Path ...

CVE-2018-5098

CVE-2018-5098 is a use-after-free in Thunderbird/Firefox related to manipulating form input elements, focus, and selections via script content, causing potential crashes. Affected: Thunderbird < 52.6, Firefox ESR < 52.6, Firefox

CVE-2019-13147

CVE-2019-13147 affects Audio File Library (audiofile) 0.3.6, via a NULL pointer dereference in ulaw2linear_buf (G711.cpp in libmodules.a) that could cause a denial of service with a crafted file. Connected advisories confirm fixes across distros: Debian 0.3.6-5+deb11u1; openSUSE/SUSE updates (e.g...

CVE-2019-18391

CVE-2019-18391 is a heap-based buffer overflow in virglrenderer’s vrend_renderer_transfer_write_iov (virglrenderer up to 0.8.0) that allows a local attacker (guest OS) to cause a denial of service via VIRGL_CCMD_RESOURCE_INLINE_WRITE commands. Several connected advisories reference this flaw and ...

CVE-2019-19536

CVE-2019-19536 is an info-leak vulnerability in the Linux kernel (<5.2.9) caused by a faulty handling of a malicious USB device in drivers/net/can/usb/peak_usb/pcan_usb_pro.c (CID-ead16e53c2f0). Some public advisories (Unity Linux UTSA-2026-*) reference this CVE and note the issue affects kern...

CVE-2019-8308

CVE-2019-8308 affects Flatpak before 1.0.7 and 1.1.x and 1.2.x before 1.2.3, where the /proc is exposed in the apply_extra sandbox, enabling a local attacker to modify a host-side executable. CVSS v3 base score 8.2 (HIGH) with LOCAL attack vector, LOW privileges required, UI required, and impact ...

CVE-2020-14405

CVE-2020-14405 is reported in LibVNCServer prior to 0.9.13 for libvncclient/rfbproto.c not limiting TextChat size. The connected Nessus advisories confirm the presence of this vulnerability across several distributions and list the CVE as affecting libvncserver, but do not provide exploit details...

CVE-2020-15227

The CVE-2020-15227 issue affects Nette PHP framework versions prior to 2.0.19, 2.1.13, 2.2.10, 2.3.14, 2.4.16 and 3.0.6. A code injection flaw can be triggered by specially crafted URL parameters, potentially enabling remote code execution. Modes of impact include remote compromise and arbitrary ...

CVE-2020-15979

CVE-2020-15979 affects Chromium/Google Chrome’s V8 engine prior to 86.0.4240.75. The Arch Linux ASA-202010-1 describes it as an appropriate implementation security issue in V8, labeled as an access restriction bypass. The Debian/DSA and Debian tracker entries also reference the CVE in the Chromi...

CVE-2020-15987

CVE-2020-15987 is a use-after-free in the WebRTC component of Chromium/Google Chrome prior to 86.0.4240.75. This vulnerability could allow a remote attacker to potentially cause heap corruption via a crafted WebRTC stream, leading to arbitrary code execution as described in connected advisories. ...

CVE-2020-25666

CVE-2020-25666 is a vulnerability in ImageMagick where four instances in HistogramCompare() (MagickCore/histogram.c) allow integer overflow during simple math calculations on RGB values and the color count. The patch switches calculations from int to ssize_t, addressing the overflow. Affected pro...

CVE-2020-27843

CVE-2020-27843 affects OpenJPEG versions before 2.4.0. A specially crafted input to the conversion or encoding path can trigger an out-of-bounds read, with the highest impact on system availability. The connected advisories consistently cite OpenJPEG2 as the vulnerable component and indicate reme...

CVE-2020-35573

The CVE-2020-35573 issue is in PostSRSd: srs2.c before 1.10 allows remote attackers to trigger a denial of service (CPU consumption) via a long timestamp tag in an SRS address. Public advisories show multiple vendors releasing patches/upgrades (PostSRSd 1.11+ with fixes such as dropping privilege...

CVE-2020-6428

CVE-2020-6428 involves a use-after-free in the audio component of Google Chrome prior to 80.0.3987.149, potentially enabling a remote attacker to trigger heap corruption via a crafted HTML page. Affected software includes Google Chrome and Chromium-based builds; Debian, Fedora, Gentoo, and Alpine...

CVE-2020-6570

Technical details for CVE-2020-6570 are not present in the provided connected documents. Information is limited to the initial description. Monitor for updates.

CVE-2020-8632

In cloud-init up to 19.4, CVE-2020-8632 affects rand_user_password in cloudinit/config/cc_set_passwords.py, where a small default pwlen makes password guessing easier. This is a local vulnerability (attack vector: LOCAL) with partial confidentiality impact and no integrity/availability impact per...

CVE-2021-21163

The CVE-2021-21163 issue affects Chromium/Google Chrome Reader Mode and is caused by insufficient data validation, allowing a remote attacker to leak cross-origin data via a crafted HTML page and a malicious server. Affected: Chromium/Chrome prior to version 89.0.4389.72. Impact (as stated): cros...

CVE-2021-21176

CVE-2021-21176 is an issue in Chromium/Google Chrome’s full screen mode where an inadequate implementation allowed a remote attacker to spoof the Omnibox (URL bar) via a crafted HTML page. Affected products include Chrome/Chromium prior to version 89.0.4389.72 across multiple advisories; the root...

CVE-2021-32920

Prosody (XMPP server) before version 0.11.9 is vulnerable to denial of service via an abuse of SSL/TLS renegotiation: a client can flood a connection with renegotiation requests, consuming excessive CPU on the server. Affected component is the SSL/TLS renegotiation handling within Prosody prior t...

CVE-2022-21682

CVE-2022-21682 (Flatpak-builder path traversal) Affects Flatpak and its builder prior to a fix: versions before 1.12.3 and 1.10.6. The vulnerability arises when flatpak-builder applies finish-args at finalization, allowing the build directory to inherit permissions declared in the manifest; with ...

CVE-2022-23038

CVE-2022-23038 affects Linux PV device frontends that use the grant-table interfaces (blkfront, netfront, scsifront) and the gntalloc/xenbus components. The issue is a race in removing or delaying the revocation of granted access to memory pages, which can allow a malicious backend to keep access...

CVE-2022-41704

CVE-2022-41704 concerns the Apache Batik library (Apache XML Graphics) and allows a remote attacker to run untrusted Java code from an SVG. The issue affects Batik versions prior to 1.16, with a recommended upgrade to 1.16. Connected documents corroborate the vulnerability details across multiple...

CVE-2023-52683

CVE-2023-52683: Linux kernel ACPI LPIT integer-overflow in lpit_update_residency() (tsc_khz > UINT_MAX/1000) fixed by replacing a u32 multiplication with mul_u32_u32(). The MiracleLinux advisories (AXSA entries) reference this CVE among affected Linux kernel series and note remediation via ker...

CVE-2024-26675

CVE-2024-26675 (Linux kernel) affects the ppp_async path. The issue arises from MRU (Maximum Receive Unit) limits not being enforced for PPP async messages, which can trigger a warning in __alloc_pages via a memory/page allocation path when handling large skb allocations during PPP input. The des...