Latest CVE Feed
-
7.5
HIGHCVE-2024-45113
ColdFusion versions 2023.6, 2021.12 and earlier are affected by an Improper Authentication vulnerability that could result in privilege escalation. An attacker could exploit this vulnerability to gain unauthorized access and affect the integrity of the ap... Read more
Affected Products : coldfusion- Published: Sep. 13, 2024
- Modified: Sep. 13, 2024
-
7.8
HIGHCVE-2024-39380
After Effects versions 23.6.6, 24.5 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a vic... Read more
- Published: Sep. 13, 2024
- Modified: Sep. 13, 2024
-
7.8
HIGHCVE-2024-39381
After Effects versions 23.6.6, 24.5 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim mu... Read more
- Published: Sep. 13, 2024
- Modified: Sep. 13, 2024
-
5.5
MEDIUMCVE-2024-39382
After Effects versions 23.6.6, 24.5 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this i... Read more
- Published: Sep. 13, 2024
- Modified: Sep. 13, 2024
-
7.8
HIGHCVE-2024-41859
After Effects versions 23.6.6, 24.5 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim mu... Read more
- Published: Sep. 13, 2024
- Modified: Sep. 13, 2024
-
7.8
HIGHCVE-2024-46699
In the Linux kernel, the following vulnerability has been resolved: drm/v3d: Disable preemption while updating GPU stats We forgot to disable preemption around the write_seqcount_begin/end() pair while updating GPU stats: [ ] WARNING: CPU: 2 PID: 12 ... Read more
Affected Products : linux_kernel- Published: Sep. 13, 2024
- Modified: Sep. 13, 2024
-
5.5
MEDIUMCVE-2024-46698
In the Linux kernel, the following vulnerability has been resolved: video/aperture: optionally match the device in sysfb_disable() In aperture_remove_conflicting_pci_devices(), we currently only call sysfb_disable() on vga class devices. This leads to ... Read more
Affected Products : linux_kernel- Published: Sep. 13, 2024
- Modified: Sep. 13, 2024
-
7.8
HIGHCVE-2024-46696
In the Linux kernel, the following vulnerability has been resolved: nfsd: fix potential UAF in nfsd4_cb_getattr_release Once we drop the delegation reference, the fields embedded in it are no longer safe to access. Do that last.... Read more
Affected Products : linux_kernel- Published: Sep. 13, 2024
- Modified: Sep. 13, 2024
-
4.7
MEDIUMCVE-2024-46693
In the Linux kernel, the following vulnerability has been resolved: soc: qcom: pmic_glink: Fix race during initialization As pointed out by Stephen Boyd it is possible that during initialization of the pmic_glink child drivers, the protection-domain not... Read more
Affected Products : linux_kernel- Published: Sep. 13, 2024
- Modified: Sep. 13, 2024
-
5.5
MEDIUMCVE-2024-46692
In the Linux kernel, the following vulnerability has been resolved: firmware: qcom: scm: Mark get_wq_ctx() as atomic call Currently get_wq_ctx() is wrongly configured as a standard call. When two SMC calls are in sleep and one SMC wakes up, it calls get... Read more
Affected Products : linux_kernel- Published: Sep. 13, 2024
- Modified: Sep. 13, 2024
-
5.5
MEDIUMCVE-2024-46691
In the Linux kernel, the following vulnerability has been resolved: usb: typec: ucsi: Move unregister out of atomic section Commit '9329933699b3 ("soc: qcom: pmic_glink: Make client-lock non-sleeping")' moved the pmic_glink client list under a spinlock,... Read more
Affected Products : linux_kernel- Published: Sep. 13, 2024
- Modified: Sep. 13, 2024
-
7.8
HIGHCVE-2024-46683
In the Linux kernel, the following vulnerability has been resolved: drm/xe: prevent UAF around preempt fence The fence lock is part of the queue, therefore in the current design anything locking the fence should then also hold a ref to the queue to prev... Read more
Affected Products : linux_kernel- Published: Sep. 13, 2024
- Modified: Sep. 13, 2024
-
5.5
MEDIUMCVE-2024-46682
In the Linux kernel, the following vulnerability has been resolved: nfsd: prevent panic for nfsv4.0 closed files in nfs4_show_open Prior to commit 3f29cc82a84c ("nfsd: split sc_status out of sc_type") states_show() relied on sc_type field to be of valid... Read more
Affected Products : linux_kernel- Published: Sep. 13, 2024
- Modified: Sep. 13, 2024
-
5.5
MEDIUMCVE-2024-46677
In the Linux kernel, the following vulnerability has been resolved: gtp: fix a potential NULL pointer dereference When sockfd_lookup() fails, gtp_encap_enable_socket() returns a NULL pointer, but its callers only check for error pointers thus miss the N... Read more
Affected Products : linux_kernel- Published: Sep. 13, 2024
- Modified: Sep. 13, 2024
-
7.8
HIGHCVE-2024-46674
In the Linux kernel, the following vulnerability has been resolved: usb: dwc3: st: fix probed platform device ref count on probe error path The probe function never performs any paltform device allocation, thus error path "undo_platform_dev_alloc" is en... Read more
Affected Products : linux_kernel- Published: Sep. 13, 2024
- Modified: Sep. 13, 2024
-
7.8
HIGHCVE-2024-46673
In the Linux kernel, the following vulnerability has been resolved: scsi: aacraid: Fix double-free on probe failure aac_probe_one() calls hardware-specific init functions through the aac_driver_ident::init pointer, all of which eventually call down to a... Read more
Affected Products : linux_kernel- Published: Sep. 13, 2024
- Modified: Sep. 13, 2024
-
0.0
NACVE-2024-46713
In the Linux kernel, the following vulnerability has been resolved: perf/aux: Fix AUX buffer serialization Ole reported that event->mmap_mutex is strictly insufficient to serialize the AUX buffer, add a per RB mutex to fully serialize it. Note that in ... Read more
Affected Products : linux_kernel- Published: Sep. 13, 2024
- Modified: Sep. 13, 2024
-
5.5
MEDIUMCVE-2024-45009
In the Linux kernel, the following vulnerability has been resolved: mptcp: pm: only decrement add_addr_accepted for MPJ req Adding the following warning ... WARN_ON_ONCE(msk->pm.add_addr_accepted == 0) ... before decrementing the add_addr_accepted c... Read more
Affected Products : linux_kernel- Published: Sep. 11, 2024
- Modified: Sep. 13, 2024
-
5.5
MEDIUMCVE-2024-45011
In the Linux kernel, the following vulnerability has been resolved: char: xillybus: Check USB endpoints when probing device Ensure, as the driver probes the device, that all endpoints that the driver may attempt to access exist and are of the correct ty... Read more
Affected Products : linux_kernel- Published: Sep. 11, 2024
- Modified: Sep. 13, 2024
-
5.5
MEDIUMCVE-2024-45020
In the Linux kernel, the following vulnerability has been resolved: bpf: Fix a kernel verifier crash in stacksafe() Daniel Hodges reported a kernel verifier crash when playing with sched-ext. Further investigation shows that the crash is due to invalid ... Read more
Affected Products : linux_kernel- Published: Sep. 11, 2024
- Modified: Sep. 13, 2024