Latest CVE Feed
-
5.5
MEDIUMCVE-2024-54485
The issue was addressed by adding additional logic. This issue is fixed in iPadOS 17.7.3, iOS 18.2 and iPadOS 18.2. An attacker with physical access to an iOS device may be able to view notification content from the lock screen.... Read more
- Published: Dec. 12, 2024
- Modified: Dec. 13, 2024
-
5.5
MEDIUMCVE-2024-54477
The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.2, macOS Ventura 13.7.2, macOS Sonoma 14.7.2. An app may be able to access user-sensitive data.... Read more
Affected Products : macos- Published: Dec. 12, 2024
- Modified: Dec. 13, 2024
-
5.5
MEDIUMCVE-2024-54476
The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.2, macOS Ventura 13.7.2, macOS Sonoma 14.7.2. An app may be able to access user-sensitive data.... Read more
Affected Products : macos- Published: Dec. 12, 2024
- Modified: Dec. 19, 2024
-
5.5
MEDIUMCVE-2024-54471
This issue was addressed with additional entitlement checks. This issue is fixed in macOS Sonoma 14.7.1, macOS Ventura 13.7.1. A malicious application may be able to leak a user's credentials.... Read more
Affected Products : macos- Published: Dec. 12, 2024
- Modified: Mar. 20, 2025
-
5.5
MEDIUMCVE-2024-52906
IBM AIX 7.2, 7.3, VIOS 3.1, and 4.1 could allow a non-privileged local user to exploit a vulnerability in the TCP/IP kernel extension to cause a denial of service.... Read more
- Published: Dec. 25, 2024
- Modified: Jul. 25, 2025
-
5.5
MEDIUMCVE-2024-50354
gnark is a fast zk-SNARK library that offers a high-level API to design circuits. In gnark 0.11.0 and earlier, deserialization of Groth16 verification keys allocate excessive memory, consuming a lot of resources and triggering a crash with the error fatal... Read more
Affected Products :- Published: Oct. 31, 2024
- Modified: Nov. 01, 2024
-
5.5
MEDIUMCVE-2024-49527
Animate versions 23.0.7, 24.0.4 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue... Read more
- Published: Nov. 12, 2024
- Modified: Nov. 18, 2024
-
5.5
MEDIUMCVE-2024-49512
InDesign Desktop versions ID18.5.3, ID19.5 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of... Read more
- Published: Nov. 12, 2024
- Modified: Nov. 16, 2024
-
5.5
MEDIUMCVE-2006-5649
Unspecified vulnerability in the "alignment check exception handling" in Ubuntu 5.10, 6.06 LTS, and 6.10 for the PowerPC (PPC) allows local users to cause a denial of service (kernel panic) via unspecified vectors.... Read more
- EPSS Score: %0.05
- Published: Dec. 14, 2006
- Modified: Apr. 09, 2025
-
5.5
MEDIUMCVE-2006-5648
Ubuntu Linux 6.10 for the PowerPC (PPC) allows local users to cause a denial of service (resource consumption) by using the (1) sys_get_robust_list and (2) sys_set_robust_list functions to create processes that cannot be killed.... Read more
- EPSS Score: %0.05
- Published: Dec. 14, 2006
- Modified: Apr. 09, 2025
-
5.5
MEDIUMCVE-2006-4342
The kernel in Red Hat Enterprise Linux 3, when running on SMP systems, allows local users to cause a denial of service (deadlock) by running the shmat function on an shm at the same time that shmctl is removing that shm (IPC_RMID), which prevents a spinlo... Read more
Affected Products : enterprise_linux- EPSS Score: %0.16
- Published: Oct. 17, 2006
- Modified: Apr. 09, 2025
-
5.5
MEDIUMCVE-2024-48241
An issue in radare2 v5.8.0 through v5.9.4 allows a local attacker to cause a denial of service via the __bf_div function.... Read more
Affected Products : radare2- Published: Oct. 30, 2024
- Modified: Jun. 13, 2025
-
5.5
MEDIUMCVE-2024-47458
Bridge versions 13.0.9, 14.1.2 and earlier are affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial of servic... Read more
- Published: Nov. 12, 2024
- Modified: Nov. 14, 2024
-
5.5
MEDIUMCVE-2024-47457
Illustrator versions 28.7.1 and earlier are affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service c... Read more
- Published: Nov. 12, 2024
- Modified: Nov. 14, 2024
-
5.5
MEDIUMCVE-2024-47454
Illustrator versions 28.7.1 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue req... Read more
- Published: Nov. 12, 2024
- Modified: Nov. 14, 2024
-
5.5
MEDIUMCVE-2024-45306
Vim is an open source, command line text editor. Patch v9.1.0038 optimized how the cursor position is calculated and removed a loop, that verified that the cursor position always points inside a line and does not become invalid by pointing beyond the end ... Read more
Affected Products : vim- Published: Sep. 02, 2024
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2024-45147
Bridge versions 13.0.9, 14.1.2 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue ... Read more
- Published: Nov. 12, 2024
- Modified: Nov. 14, 2024
-
5.5
MEDIUMCVE-2024-45145
Lightroom Desktop versions 7.4.1, 13.5, 12.5.1 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitatio... Read more
Affected Products : lightroom- Published: Oct. 09, 2024
- Modified: Oct. 18, 2024
-
5.5
MEDIUMCVE-2024-45111
Illustrator versions 28.6, 27.9.5 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this iss... Read more
- Published: Sep. 13, 2024
- Modified: Sep. 13, 2024
-
5.5
MEDIUMCVE-2024-45020
In the Linux kernel, the following vulnerability has been resolved: bpf: Fix a kernel verifier crash in stacksafe() Daniel Hodges reported a kernel verifier crash when playing with sched-ext. Further investigation shows that the crash is due to invalid ... Read more
Affected Products : linux_kernel- Published: Sep. 11, 2024
- Modified: Sep. 13, 2024