Latest CVE Feed
-
5.5
MEDIUMCVE-2024-43853
In the Linux kernel, the following vulnerability has been resolved: cgroup/cpuset: Prevent UAF in proc_cpuset_show() An UAF can happen when /proc/cpuset is read as reported in [1]. This can be reproduced by the following methods: 1.add an mdelay(1000) ... Read more
Affected Products : linux_kernel- Published: Aug. 17, 2024
- Modified: Sep. 04, 2024
-
5.5
MEDIUMCVE-2024-43862
In the Linux kernel, the following vulnerability has been resolved: net: wan: fsl_qmc_hdlc: Convert carrier_lock spinlock to a mutex The carrier_lock spinlock protects the carrier detection. While it is held, framer_get_status() is called which in turn ... Read more
Affected Products : linux_kernel- Published: Aug. 21, 2024
- Modified: Sep. 03, 2024
-
5.5
MEDIUMCVE-2024-43854
In the Linux kernel, the following vulnerability has been resolved: block: initialize integrity buffer to zero before writing it to media Metadata added by bio_integrity_prep is using plain kmalloc, which leads to random kernel memory being written medi... Read more
Affected Products : linux_kernel- Published: Aug. 17, 2024
- Modified: Sep. 12, 2024
-
5.5
MEDIUMCVE-2024-43840
In the Linux kernel, the following vulnerability has been resolved: bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG When BPF_TRAMP_F_CALL_ORIG is set, the trampoline calls __bpf_tramp_enter() and __bpf_tramp_exit() functions, passing them the struc... Read more
Affected Products : linux_kernel- Published: Aug. 17, 2024
- Modified: May. 22, 2025
-
5.5
MEDIUMCVE-2022-2869
libtiff's tiffcrop tool has a uint32_t underflow which leads to out of bounds read and write in the extractContigSamples8bits routine. An attacker who supplies a crafted file to tiffcrop could trigger this flaw, most likely by tricking a user into opening... Read more
- EPSS Score: %0.01
- Published: Aug. 17, 2022
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2024-43838
In the Linux kernel, the following vulnerability has been resolved: bpf: fix overflow check in adjust_jmp_off() adjust_jmp_off() incorrectly used the insn->imm field for all overflow check, which is incorrect as that should only be done or the BPF_JMP32... Read more
Affected Products : linux_kernel- Published: Aug. 17, 2024
- Modified: Oct. 29, 2024
-
5.5
MEDIUMCVE-2022-28262
Acrobat Reader DC version 22.001.2011x (and earlier), 20.005.3033x (and earlier) and 17.012.3022x (and earlier) are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memo... Read more
- EPSS Score: %0.86
- Published: May. 11, 2022
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2024-43837
In the Linux kernel, the following vulnerability has been resolved: bpf: Fix null pointer dereference in resolve_prog_type() for BPF_PROG_TYPE_EXT When loading a EXT program without specifying `attr->attach_prog_fd`, the `prog->aux->dst_prog` will be nu... Read more
Affected Products : linux_kernel- Published: Aug. 17, 2024
- Modified: Aug. 22, 2024
-
5.5
MEDIUMCVE-2024-43834
In the Linux kernel, the following vulnerability has been resolved: xdp: fix invalid wait context of page_pool_destroy() If the driver uses a page pool, it creates a page pool with page_pool_create(). The reference count of page pool is 1 as default. A ... Read more
Affected Products : linux_kernel- Published: Aug. 17, 2024
- Modified: Oct. 30, 2024
-
5.5
MEDIUMCVE-2024-43850
In the Linux kernel, the following vulnerability has been resolved: soc: qcom: icc-bwmon: Fix refcount imbalance seen during bwmon_remove The following warning is seen during bwmon_remove due to refcount imbalance, fix this by releasing the OPPs after u... Read more
Affected Products : linux_kernel- Published: Aug. 17, 2024
- Modified: Sep. 30, 2024
-
5.5
MEDIUMCVE-2022-28263
Acrobat Reader DC version 22.001.2011x (and earlier), 20.005.3033x (and earlier) and 17.012.3022x (and earlier) are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memo... Read more
- EPSS Score: %0.86
- Published: May. 11, 2022
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2024-43835
In the Linux kernel, the following vulnerability has been resolved: virtio_net: Fix napi_skb_cache_put warning After the commit bdacf3e34945 ("net: Use nested-BH locking for napi_alloc_cache.") was merged, the following warning began to appear: WARNI... Read more
Affected Products : linux_kernel- Published: Aug. 17, 2024
- Modified: Jun. 19, 2025
-
5.5
MEDIUMCVE-2024-43833
In the Linux kernel, the following vulnerability has been resolved: media: v4l: async: Fix NULL pointer dereference in adding ancillary links In v4l2_async_create_ancillary_links(), ancillary links are created for lens and flash sub-devices. These are s... Read more
Affected Products : linux_kernel- Published: Aug. 17, 2024
- Modified: Aug. 22, 2024
-
5.5
MEDIUMCVE-2024-43829
In the Linux kernel, the following vulnerability has been resolved: drm/qxl: Add check for drm_cvt_mode Add check for the return value of drm_cvt_mode() and return the error if it fails in order to avoid NULL pointer dereference.... Read more
Affected Products : linux_kernel- Published: Aug. 17, 2024
- Modified: Sep. 30, 2024
-
5.5
MEDIUMCVE-2024-44254
This issue was addressed with improved redaction of sensitive information. This issue is fixed in watchOS 11.1, macOS Ventura 13.7.1, macOS Sonoma 14.7.1, iOS 18.1 and iPadOS 18.1. An app may be able to access sensitive user data.... Read more
- Published: Oct. 28, 2024
- Modified: Oct. 30, 2024
-
5.5
MEDIUMCVE-2024-43824
In the Linux kernel, the following vulnerability has been resolved: PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init() Instead of getting the epc_features from pci_epc_get_features() API, use the cached pci_epf_te... Read more
Affected Products : linux_kernel- Published: Aug. 17, 2024
- Modified: Sep. 03, 2024
-
5.5
MEDIUMCVE-2022-26933
Windows NTFS Information Disclosure Vulnerability... Read more
Affected Products : windows_10 windows_8.1 windows_rt_8.1 windows_server_2012 windows_server_2016 windows_server_2019 windows_server windows_10_1607 windows_10_1809 windows_10_20h2 +10 more products- EPSS Score: %0.68
- Published: May. 10, 2022
- Modified: Jan. 02, 2025
-
5.5
MEDIUMCVE-2024-43827
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Add null check before access structs In enable_phantom_plane, we should better check null pointer before accessing various structs.... Read more
Affected Products : linux_kernel- Published: Aug. 17, 2024
- Modified: Sep. 30, 2024
-
5.5
MEDIUMCVE-2024-43828
In the Linux kernel, the following vulnerability has been resolved: ext4: fix infinite loop when replaying fast_commit When doing fast_commit replay an infinite loop may occur due to an uninitialized extent_status struct. ext4_ext_determine_insert_hole... Read more
Affected Products : linux_kernel- Published: Aug. 17, 2024
- Modified: Aug. 22, 2024
-
5.5
MEDIUMCVE-2024-43817
In the Linux kernel, the following vulnerability has been resolved: net: missing check virtio Two missing check in virtio_net_hdr_to_skb() allowed syzbot to crash kernels again 1. After the skb_segment function the buffer may become non-linear (nr_frag... Read more
Affected Products : linux_kernel- Published: Aug. 17, 2024
- Modified: Sep. 03, 2024