Latest CVE Feed
-
5.5
MEDIUMCVE-2021-29253
The Tableau integration in RSA Archer 6.4 P1 (6.4.0.1) through 6.9 P2 (6.9.0.2) is affected by an insecure credential storage vulnerability. An malicious attacker with access to the Tableau workbook file may obtain access to credential information to use ... Read more
Affected Products : archer- Published: May. 26, 2021
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2022-4543
A flaw named "EntryBleed" was found in the Linux Kernel Page Table Isolation (KPTI). This issue could allow a local attacker to leak KASLR base via prefetch side-channels based on TLB timing for Intel systems.... Read more
Affected Products : linux_kernel- Published: Jan. 11, 2023
- Modified: Apr. 08, 2025
-
5.5
MEDIUMCVE-2023-52638
In the Linux kernel, the following vulnerability has been resolved: can: j1939: prevent deadlock by changing j1939_socks_lock to rwlock The following 3 locks would race against each other, causing the deadlock situation in the Syzbot bug report: - j193... Read more
Affected Products : linux_kernel- Published: Apr. 03, 2024
- Modified: Feb. 03, 2025
-
5.5
MEDIUMCVE-2024-49946
In the Linux kernel, the following vulnerability has been resolved: ppp: do not assume bh is held in ppp_channel_bridge_input() Networking receive path is usually handled from BH handler. However, some protocols need to acquire the socket lock, and pack... Read more
Affected Products : linux_kernel- Published: Oct. 21, 2024
- Modified: Nov. 12, 2024
-
5.5
MEDIUMCVE-2024-53154
In the Linux kernel, the following vulnerability has been resolved: clk: clk-apple-nco: Add NULL check in applnco_probe Add NULL check in applnco_probe, to handle kernel NULL pointer dereference error.... Read more
Affected Products : linux_kernel- Published: Dec. 24, 2024
- Modified: Jan. 07, 2025
-
5.5
MEDIUMCVE-2024-58011
In the Linux kernel, the following vulnerability has been resolved: platform/x86: int3472: Check for adev == NULL Not all devices have an ACPI companion fwnode, so adev might be NULL. This can e.g. (theoretically) happen when a user manually binds one o... Read more
Affected Products : linux_kernel- Published: Feb. 27, 2025
- Modified: Mar. 06, 2025
- Vuln Type: Memory Corruption
-
5.5
MEDIUMCVE-2024-40919
In the Linux kernel, the following vulnerability has been resolved: bnxt_en: Adjust logging of firmware messages in case of released token in __hwrm_send() In case of token is released due to token->state == BNXT_HWRM_DEFERRED, released token (set to NU... Read more
Affected Products : linux_kernel- Published: Jul. 12, 2024
- Modified: Feb. 03, 2025
-
5.5
MEDIUMCVE-2024-54524
A logic issue was addressed with improved file handling. This issue is fixed in macOS Sequoia 15.2. A malicious app may be able to access arbitrary files.... Read more
Affected Products : macos- Published: Dec. 12, 2024
- Modified: Dec. 18, 2024
-
5.5
MEDIUMCVE-2024-44946
In the Linux kernel, the following vulnerability has been resolved: kcm: Serialise kcm_sendmsg() for the same socket. syzkaller reported UAF in kcm_release(). [0] The scenario is 1. Thread A builds a skb with MSG_MORE and sets kcm->seq_skb. 2. Th... Read more
Affected Products : linux_kernel- Published: Aug. 31, 2024
- Modified: Sep. 04, 2024
-
5.5
MEDIUMCVE-2023-36838
An Out-of-bounds Read vulnerability in the flow processing daemon (flowd) of Juniper Networks Junos OS on SRX Series allows a local, authenticated attacker with low privileges, to cause a Denial of Service (DoS). If a low privileged user executes a speci... Read more
- Published: Jul. 14, 2023
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2024-46694
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: avoid using null object of framebuffer Instead of using state->fb->obj[0] directly, get object from framebuffer by calling drm_gem_fb_get_obj() and return error code wh... Read more
Affected Products : linux_kernel- Published: Sep. 13, 2024
- Modified: Sep. 19, 2024
-
5.5
MEDIUMCVE-2024-46789
In the Linux kernel, the following vulnerability has been resolved: mm/slub: add check for s->flags in the alloc_tagging_slab_free_hook When enable CONFIG_MEMCG & CONFIG_KFENCE & CONFIG_KMEMLEAK, the following warning always occurs,This is because the f... Read more
Affected Products : linux_kernel- Published: Sep. 18, 2024
- Modified: Nov. 20, 2024
-
5.5
MEDIUMCVE-2024-46862
In the Linux kernel, the following vulnerability has been resolved: ASoC: Intel: soc-acpi-intel-mtl-match: add missing empty item There is no links_num in struct snd_soc_acpi_mach {}, and we test !link->num_adr as a condition to end the loop in hda_sdw_... Read more
Affected Products : linux_kernel- Published: Sep. 27, 2024
- Modified: Oct. 03, 2024
-
5.5
MEDIUMCVE-2022-28257
Acrobat Reader DC version 22.001.2011x (and earlier), 20.005.3033x (and earlier) and 17.012.3022x (and earlier) are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memo... Read more
- Published: May. 11, 2022
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2021-30817
A permissions issue was addressed with improved validation. This issue is fixed in macOS Big Sur 11.5. A malicious application may be able to access data about the accounts the user is using Family Sharing with.... Read more
Affected Products : macos- Published: Oct. 28, 2021
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2024-50256
In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6() I got a syzbot report without a repro [1] crashing in nf_send_reset6() I think the issue is that dev->hard_header_len... Read more
Affected Products : linux_kernel- Published: Nov. 09, 2024
- Modified: Nov. 14, 2024
-
5.5
MEDIUMCVE-2021-30920
A permissions issue was addressed with improved validation. This issue is fixed in macOS Monterey 12.0.1. A local attacker may be able to read sensitive information.... Read more
Affected Products : macos- Published: Aug. 24, 2021
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2025-31231
A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.4. An app may be able to read sensitive location information.... Read more
Affected Products : macos- Published: May. 29, 2025
- Modified: Jun. 02, 2025
- Vuln Type: Authorization
-
5.5
MEDIUMCVE-2022-48826
In the Linux kernel, the following vulnerability has been resolved: drm/vc4: Fix deadlock on DSI device attach error DSI device attach to DSI host will be done with host device's lock held. Un-registering host in "device attach" error path (ex: probe r... Read more
Affected Products : linux_kernel- Published: Jul. 16, 2024
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2020-0549
Cleanup errors in some data cache evictions for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.... Read more
Affected Products : ubuntu_linux fedora debian_linux leap core_i7-6700hq_firmware core_i7-6770hq_firmware core_i7-6820hk_firmware core_i7-6820hq_firmware core_i7-6870hq_firmware core_i7-6920hq_firmware +848 more products- Published: Jan. 28, 2020
- Modified: Nov. 21, 2024