Latest CVE Feed
-
5.5
MEDIUMCVE-2023-52780
In the Linux kernel, the following vulnerability has been resolved: net: mvneta: fix calls to page_pool_get_stats Calling page_pool_get_stats in the mvneta driver without checks leads to kernel crashes. First the page pool is only available if the bm is... Read more
Affected Products : linux_kernel- Published: May. 21, 2024
- Modified: Feb. 03, 2025
-
5.5
MEDIUMCVE-2023-52737
In the Linux kernel, the following vulnerability has been resolved: btrfs: lock the inode in shared mode before starting fiemap Currently fiemap does not take the inode's lock (VFS lock), it only locks a file range in the inode's io tree. This however c... Read more
Affected Products : linux_kernel- Published: May. 21, 2024
- Modified: Jan. 10, 2025
-
5.5
MEDIUMCVE-2023-52700
In the Linux kernel, the following vulnerability has been resolved: tipc: fix kernel warning when sending SYN message When sending a SYN message, this kernel stack trace is observed: ... [ 13.396352] RIP: 0010:_copy_from_iter+0xb4/0x550 ... [ 13.39... Read more
Affected Products : linux_kernel- Published: May. 21, 2024
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2023-52635
In the Linux kernel, the following vulnerability has been resolved: PM / devfreq: Synchronize devfreq_monitor_[start/stop] There is a chance if a frequent switch of the governor done in a loop result in timer list corruption where timer cancel being don... Read more
- Published: Apr. 02, 2024
- Modified: Mar. 17, 2025
-
5.5
MEDIUMCVE-2023-52634
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix disable_otg_wa logic [Why] When switching to another HDMI mode, we are unnecesarilly disabling/enabling FIFO causing both HPO and DIG registers to be set at the sam... Read more
Affected Products : linux_kernel- Published: Apr. 02, 2024
- Modified: Mar. 17, 2025
-
5.5
MEDIUMCVE-2023-52567
In the Linux kernel, the following vulnerability has been resolved: serial: 8250_port: Check IRQ data before use In case the leaf driver wants to use IRQ polling (irq = 0) and IIR register shows that an interrupt happened in the 8250 hardware the IRQ da... Read more
Affected Products : linux_kernel- Published: Mar. 02, 2024
- Modified: Dec. 11, 2024
-
5.5
MEDIUMCVE-2023-52563
In the Linux kernel, the following vulnerability has been resolved: drm/meson: fix memory leak on ->hpd_notify callback The EDID returned by drm_bridge_get_edid() needs to be freed.... Read more
Affected Products : linux_kernel- Published: Mar. 02, 2024
- Modified: Dec. 11, 2024
-
5.5
MEDIUMCVE-2023-52448
In the Linux kernel, the following vulnerability has been resolved: gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump Syzkaller has reported a NULL pointer dereference when accessing rgd->rd_rgl in gfs2_rgrp_dump(). This can happen when creat... Read more
Affected Products : linux_kernel- Published: Feb. 22, 2024
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2023-49558
An issue in YASM 1.3.0.86.g9def allows a remote attacker to cause a denial of service via the expand_mmac_params function in the modules/preprocs/nasm/nasm-pp.c component.... Read more
Affected Products : yasm- EPSS Score: %0.33
- Published: Jan. 03, 2024
- Modified: Jun. 03, 2025
-
5.5
MEDIUMCVE-2023-4755
Use After Free in GitHub repository gpac/gpac prior to 2.3-DEV.... Read more
Affected Products : gpac- EPSS Score: %0.03
- Published: Sep. 04, 2023
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2023-47071
Adobe After Effects version 24.0.2 (and earlier) and 23.6 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR... Read more
- EPSS Score: %0.04
- Published: Nov. 17, 2023
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2023-46343
In the Linux kernel before 6.5.9, there is a NULL pointer dereference in send_acknowledge in net/nfc/nci/spi.c.... Read more
Affected Products : linux_kernel- EPSS Score: %0.01
- Published: Jan. 23, 2024
- Modified: Jun. 17, 2025
-
5.5
MEDIUMCVE-2023-45680
stb_vorbis is a single file MIT licensed library for processing ogg vorbis files. A crafted file may trigger memory allocation failure in `start_decoder`. In that case the function returns early, the `f->comment_list` is set to `NULL`, but `f->comment_lis... Read more
Affected Products : stb_vorbis.c- EPSS Score: %0.02
- Published: Oct. 21, 2023
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2023-44821
Gifsicle through 1.94, if deployed in a way that allows untrusted input to affect Gif_Realloc calls, might allow a denial of service (memory consumption). NOTE: this has been disputed by multiple parties because the Gifsicle code is not commonly used for ... Read more
Affected Products : gifsicle- EPSS Score: %0.04
- Published: Oct. 09, 2023
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2023-44201
An Incorrect Permission Assignment for Critical Resource vulnerability in a specific file of Juniper Networks Junos OS and Junos OS Evolved allows a local authenticated attacker to read configuration changes without having the permissions. When a user w... Read more
- EPSS Score: %0.04
- Published: Oct. 13, 2023
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2023-43090
A vulnerability was found in GNOME Shell. GNOME Shell's lock screen allows an unauthenticated local user to view windows of the locked desktop session by using keyboard shortcuts to unlock the restricted functionality of the screenshot tool.... Read more
- EPSS Score: %0.05
- Published: Sep. 22, 2023
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2023-42883
The issue was addressed with improved memory handling. This issue is fixed in Safari 17.2, macOS Sonoma 14.2, iOS 17.2 and iPadOS 17.2, watchOS 10.2, tvOS 17.2, iOS 16.7.3 and iPadOS 16.7.3. Processing an image may lead to a denial-of-service.... Read more
- EPSS Score: %0.03
- Published: Dec. 12, 2023
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2023-42853
A logic issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14.1, macOS Monterey 12.7.1, macOS Ventura 13.6.1. An app may be able to access user-sensitive data.... Read more
Affected Products : macos- Published: Feb. 21, 2024
- Modified: Mar. 27, 2025
-
5.5
MEDIUMCVE-2023-42363
A use-after-free vulnerability was discovered in xasprintf function in xfuncs_printf.c:344 in BusyBox v.1.36.1.... Read more
Affected Products : busybox- EPSS Score: %0.03
- Published: Nov. 27, 2023
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2023-40399
The issue was addressed with improved memory handling. This issue is fixed in tvOS 17, iOS 17 and iPadOS 17, watchOS 10, macOS Sonoma 14. An app may be able to disclose kernel memory.... Read more
- EPSS Score: %0.02
- Published: Sep. 27, 2023
- Modified: Nov. 21, 2024