Latest CVE Feed
-
5.5
MEDIUMCVE-2025-21694
In the Linux kernel, the following vulnerability has been resolved: fs/proc: fix softlockup in __read_vmcore (part 2) Since commit 5cbcb62dddf5 ("fs/proc: fix softlockup in __read_vmcore") the number of softlockups in __read_vmcore at kdump time have go... Read more
Affected Products : linux_kernel- Published: Feb. 12, 2025
- Modified: Feb. 14, 2025
- Vuln Type: Denial of Service
-
5.5
MEDIUMCVE-2024-41084
In the Linux kernel, the following vulnerability has been resolved: cxl/region: Avoid null pointer dereference in region lookup cxl_dpa_to_region() looks up a region based on a memdev and DPA. It wrongly assumes an endpoint found mapping the DPA is also... Read more
Affected Products : linux_kernel- Published: Jul. 29, 2024
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2025-21833
In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Avoid use of NULL after WARN_ON_ONCE There is a WARN_ON_ONCE to catch an unlikely situation when domain_remove_dev_pasid can't find the `pasid`. In case it nevertheless happ... Read more
Affected Products : linux_kernel- Published: Mar. 06, 2025
- Modified: Mar. 25, 2025
- Vuln Type: Memory Corruption
-
5.5
MEDIUMCVE-2025-22059
In the Linux kernel, the following vulnerability has been resolved: udp: Fix multiple wraparounds of sk->sk_rmem_alloc. __udp_enqueue_schedule_skb() has the following condition: if (atomic_read(&sk->sk_rmem_alloc) > sk->sk_rcvbuf) goto drop... Read more
Affected Products : linux_kernel- Published: Apr. 16, 2025
- Modified: May. 06, 2025
- Vuln Type: Memory Corruption
-
5.5
MEDIUMCVE-2024-0641
A denial of service vulnerability was found in tipc_crypto_key_revoke in net/tipc/crypto.c in the Linux kernel’s TIPC subsystem. This flaw allows guests with local user privileges to trigger a deadlock and potentially crash the system.... Read more
- EPSS Score: %0.01
- Published: Jan. 17, 2024
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2025-21682
In the Linux kernel, the following vulnerability has been resolved: eth: bnxt: always recalculate features after XDP clearing, fix null-deref Recalculate features when XDP is detached. Before: # ip li set dev eth0 xdp obj xdp_dummy.bpf.o sec xdp # ... Read more
Affected Products : linux_kernel- Published: Jan. 31, 2025
- Modified: Feb. 04, 2025
- Vuln Type: Memory Corruption
-
5.5
MEDIUMCVE-2022-24959
An issue was discovered in the Linux kernel before 5.16.5. There is a memory leak in yam_siocdevprivate in drivers/net/hamradio/yam.c.... Read more
- EPSS Score: %0.09
- Published: Feb. 11, 2022
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2025-23246
NVIDIA vGPU software for Windows and Linux contains a vulnerability in the Virtual GPU Manager (vGPU plugin), where it allows a guest to consume uncontrolled resources. A successful exploit of this vulnerability might lead to denial of service.... Read more
Affected Products :- Published: May. 01, 2025
- Modified: May. 02, 2025
- Vuln Type: Denial of Service
-
5.5
MEDIUMCVE-2022-43283
wasm2c v1.0.29 was discovered to contain an abort in CWriter::Write.... Read more
Affected Products : wabt- EPSS Score: %0.03
- Published: Oct. 28, 2022
- Modified: May. 08, 2025
-
5.5
MEDIUMCVE-2021-28609
Adobe After Effects version 18.2 (and earlier) is affected by an Out-of-bounds Read vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to disclose sensitive memory information in the context ... Read more
- EPSS Score: %0.87
- Published: Aug. 24, 2021
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2025-24124
The issue was addressed with improved checks. This issue is fixed in iPadOS 17.7.4, macOS Ventura 13.7.3, macOS Sonoma 14.7.3, visionOS 2.3, iOS 18.3 and iPadOS 18.3, macOS Sequoia 15.3, watchOS 11.3, tvOS 18.3. Parsing a file may lead to an unexpected ap... Read more
- Published: Jan. 27, 2025
- Modified: Mar. 19, 2025
-
5.5
MEDIUMCVE-2016-5243
The tipc_nl_compat_link_dump function in net/tipc/netlink_compat.c in the Linux kernel through 4.6.3 does not properly copy a certain string, which allows local users to obtain sensitive information from kernel stack memory by reading a Netlink message.... Read more
Affected Products : linux_kernel- EPSS Score: %0.04
- Published: Jun. 27, 2016
- Modified: Apr. 12, 2025
-
5.5
MEDIUMCVE-2023-32668
LuaTeX before 1.17.0 allows a document (compiled with the default settings) to make arbitrary network requests. This occurs because full access to the socket library is permitted by default, as stated in the documentation. This also affects TeX Live befor... Read more
- EPSS Score: %0.05
- Published: May. 11, 2023
- Modified: Jan. 27, 2025
-
5.5
MEDIUMCVE-2025-31226
A logic issue was addressed with improved checks. This issue is fixed in watchOS 11.5, tvOS 18.5, iPadOS 17.7.7, iOS 18.5 and iPadOS 18.5, macOS Sequoia 15.5, visionOS 2.5. Processing a maliciously crafted image may lead to a denial-of-service.... Read more
- Published: May. 12, 2025
- Modified: May. 27, 2025
- Vuln Type: Denial of Service
-
5.5
MEDIUMCVE-2021-28971
In intel_pmu_drain_pebs_nhm in arch/x86/events/intel/ds.c in the Linux kernel through 5.11.8 on some Haswell CPUs, userspace applications (such as perf-fuzzer) can cause a system crash because the PEBS status in a PEBS record is mishandled, aka CID-d88d05... Read more
- EPSS Score: %0.03
- Published: Mar. 22, 2021
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2023-52706
In the Linux kernel, the following vulnerability has been resolved: gpio: sim: fix a memory leak Fix an inverted logic bug in gpio_sim_remove_hogs() that leads to GPIO hog structures never being freed.... Read more
Affected Products : linux_kernel- Published: May. 21, 2024
- Modified: Jan. 06, 2025
-
5.5
MEDIUMCVE-2021-0938
In memzero_explicit of compiler-clang.h, there is a possible bypass of defense in depth due to uninitialized data. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitat... Read more
Affected Products : android- EPSS Score: %0.06
- Published: Oct. 25, 2021
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2024-26744
In the Linux kernel, the following vulnerability has been resolved: RDMA/srpt: Support specifying the srpt_service_guid parameter Make loading ib_srpt with this parameter set work. The current behavior is that setting that parameter while loading the ib... Read more
- Published: Apr. 03, 2024
- Modified: May. 02, 2025
-
5.5
MEDIUMCVE-2014-8355
PCX parser code in ImageMagick before 6.8.9-9 allows remote attackers to cause a denial of service (out-of-bounds read).... Read more
Affected Products : imagemagick- EPSS Score: %0.49
- Published: Apr. 11, 2017
- Modified: Apr. 20, 2025
-
5.5
MEDIUMCVE-2019-1010305
libmspack 0.9.1alpha is affected by: Buffer Overflow. The impact is: Information Disclosure. The component is: function chmd_read_headers() in libmspack(file libmspack/mspack/chmd.c). The attack vector is: the victim must open a specially crafted chm file... Read more
- EPSS Score: %0.46
- Published: Jul. 15, 2019
- Modified: Nov. 21, 2024