Latest CVE Feed
-
9.3
HIGHCVE-2022-26769
A memory corruption issue was addressed with improved input validation. This issue is fixed in Security Update 2022-004 Catalina, macOS Monterey 12.4, macOS Big Sur 11.6.6. A malicious application may be able to execute arbitrary code with kernel privileg... Read more
- EPSS Score: %0.25
- Published: May. 26, 2022
- Modified: May. 30, 2025
-
9.3
HIGHCVE-2022-26768
A memory corruption issue was addressed with improved state management. This issue is fixed in macOS Monterey 12.4, watchOS 8.6, tvOS 15.5, macOS Big Sur 11.6.6. An application may be able to execute arbitrary code with kernel privileges.... Read more
- EPSS Score: %0.40
- Published: May. 26, 2022
- Modified: May. 30, 2025
-
5.5
MEDIUMCVE-2022-26767
The issue was addressed with additional permissions checks. This issue is fixed in macOS Monterey 12.4, macOS Big Sur 11.6.6. A malicious application may be able to bypass Privacy preferences.... Read more
Affected Products : macos- EPSS Score: %0.13
- Published: May. 26, 2022
- Modified: May. 30, 2025
-
5.5
MEDIUMCVE-2022-26766
A certificate parsing issue was addressed with improved checks. This issue is fixed in tvOS 15.5, iOS 15.5 and iPadOS 15.5, Security Update 2022-004 Catalina, watchOS 8.6, macOS Big Sur 11.6.6, macOS Monterey 12.4. A malicious app may be able to bypass si... Read more
- EPSS Score: %3.03
- Published: May. 26, 2022
- Modified: May. 30, 2025
-
4.7
MEDIUMCVE-2022-26765
A race condition was addressed with improved state handling. This issue is fixed in watchOS 8.6, tvOS 15.5, macOS Monterey 12.4, iOS 15.5 and iPadOS 15.5. A malicious attacker with arbitrary read and write capability may be able to bypass Pointer Authenti... Read more
- EPSS Score: %0.06
- Published: May. 26, 2022
- Modified: May. 30, 2025
-
7.5
HIGHCVE-2021-38604
In librt in the GNU C Library (aka glibc) through 2.34, sysdeps/unix/sysv/linux/mq_notify.c mishandles certain NOTIFY_REMOVED data, leading to a NULL pointer dereference. NOTE: this vulnerability was introduced as a side effect of the CVE-2021-33574 fix.... Read more
Affected Products : fedora communications_cloud_native_core_network_repository_function communications_cloud_native_core_unified_data_repository glibc communications_cloud_native_core_network_function_cloud_native_environment communications_cloud_native_core_binding_support_function communications_cloud_native_core_security_edge_protection_proxy enterprise_operations_monitor- EPSS Score: %0.07
- Published: Aug. 12, 2021
- Modified: May. 30, 2025
-
7.5
HIGHCVE-2019-5094
An exploitable code execution vulnerability exists in the quota file functionality of E2fsprogs 1.45.3. A specially crafted ext4 partition can cause an out-of-bounds write on the heap, resulting in code execution. An attacker can corrupt a partition to tr... Read more
- EPSS Score: %0.33
- Published: Sep. 24, 2019
- Modified: May. 30, 2025
-
5.3
MEDIUMCVE-2022-40482
The authentication method in Laravel 8.x through 9.x before 9.32.0 was discovered to be vulnerable to user enumeration via timeless timing attacks with HTTP/2 multiplexing. This is caused by the early return inside the hasValidCredentials method in the Il... Read more
Affected Products : framework- EPSS Score: %0.30
- Published: Apr. 25, 2023
- Modified: May. 30, 2025
-
8.1
HIGHCVE-2025-48416
An OpenSSH daemon listens on TCP port 22. There is a hard-coded entry in the "/etc/shadow" file in the firmware image for the "root" user. However, in the default SSH configuration the "PermitRootLogin" is disabled, preventing the root user from logging i... Read more
Affected Products :- Published: May. 21, 2025
- Modified: May. 30, 2025
- Vuln Type: Authentication
-
4.3
MEDIUMCVE-2024-7097
An incorrect authorization vulnerability exists in multiple WSO2 products due to a flaw in the SOAP admin service, which allows user account creation regardless of the self-registration configuration settings. This vulnerability enables malicious actors t... Read more
Affected Products :- Published: May. 30, 2025
- Modified: May. 30, 2025
- Vuln Type: Authorization
-
6.5
MEDIUMCVE-2024-57336
Incorrect access control in M2Soft CROWNIX Report & ERS affected v7.x to v7.4.3.599 and v8.x to v8.0.3.79 allows unauthorized attackers to obtain Administrator account access.... Read more
Affected Products :- Published: May. 28, 2025
- Modified: May. 30, 2025
- Vuln Type: Authorization
-
7.3
HIGHCVE-2024-27199
In JetBrains TeamCity before 2023.11.4 path traversal allowing to perform limited admin actions was possible... Read more
Affected Products : teamcity- Published: Mar. 04, 2024
- Modified: May. 30, 2025
-
7.8
HIGHCVE-2022-32810
The issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.5, watchOS 8.7, iOS 15.6 and iPadOS 15.6. An app may be able to execute arbitrary code with kernel privileges.... Read more
- EPSS Score: %0.06
- Published: Aug. 24, 2022
- Modified: May. 30, 2025
-
7.5
HIGHCVE-2022-32793
Multiple out-of-bounds write issues were addressed with improved bounds checking. This issue is fixed in macOS Monterey 12.5, watchOS 8.7, tvOS 15.6, iOS 15.6 and iPadOS 15.6. An app may be able to disclose kernel memory.... Read more
- EPSS Score: %0.24
- Published: Aug. 24, 2022
- Modified: May. 30, 2025
-
9.8
CRITICALCVE-2022-26776
This issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.4, macOS Big Sur 11.6.6. An attacker may be able to cause unexpected application termination or arbitrary code execution.... Read more
Affected Products : macos- EPSS Score: %1.64
- Published: May. 26, 2022
- Modified: May. 30, 2025
-
9.8
CRITICALCVE-2022-26775
An integer overflow was addressed with improved input validation. This issue is fixed in Security Update 2022-004 Catalina, macOS Monterey 12.4. An attacker may be able to cause unexpected application termination or arbitrary code execution.... Read more
- EPSS Score: %1.53
- Published: May. 26, 2022
- Modified: May. 30, 2025
-
7.8
HIGHCVE-2022-26774
A logic issue was addressed with improved state management. This issue is fixed in iTunes 12.12.4 for Windows. A local attacker may be able to elevate their privileges.... Read more
Affected Products : itunes- EPSS Score: %0.14
- Published: May. 26, 2022
- Modified: May. 30, 2025
-
7.1
HIGHCVE-2022-26773
A logic issue was addressed with improved state management. This issue is fixed in iTunes 12.12.4 for Windows. An application may be able to delete files for which it does not have permission.... Read more
Affected Products : itunes- EPSS Score: %0.25
- Published: May. 26, 2022
- Modified: May. 30, 2025
-
9.3
HIGHCVE-2022-26772
A memory corruption issue was addressed with improved state management. This issue is fixed in macOS Monterey 12.4. An application may be able to execute arbitrary code with kernel privileges.... Read more
Affected Products : macos- EPSS Score: %0.26
- Published: May. 26, 2022
- Modified: May. 30, 2025
-
9.3
HIGHCVE-2022-26771
A memory corruption issue was addressed with improved state management. This issue is fixed in watchOS 8.6, tvOS 15.5, iOS 15.5 and iPadOS 15.5. A malicious application may be able to execute arbitrary code with kernel privileges.... Read more
- EPSS Score: %0.26
- Published: May. 26, 2022
- Modified: May. 30, 2025