KATALOG INFORMACJI
Znajdź podatności, zrozum powód priorytetu i sprawdź informacje u źródła.
Pełny dostępny katalog: publikacje z ostatnich 365 dni oraz całe dostępne KEV. Dopasowanie kategorii lub producenta nie potwierdza podatności konkretnej wersji produktu.
Wyścig w obsłudze timerów CPU w jądrze Linuxa może prowadzić do nieprawidłowego zarządzania zadaniami.
Memory corruption while using alignments for memory allocation.
A vulnerability in the 3rd party AV uninstaller module contained in Trend Micro Apex One (on-prem and SaaS), Worry-Free Business Security and Worry-Free Business Security Services could allow an attacker to manipulate the module to execute arbitrary commands on an affected installation. Note…
A logic issue existed in the handling of Group FaceTime calls. The issue was addressed with improved state management. This issue is fixed in iOS 12.1.4, macOS Mojave 10.14.3 Supplemental Update. The initiator of a Group FaceTime call may be able to cause the recipient to answer.
The issue was addressed with improved checks. This issue is fixed in iOS 16.7.1 and iPadOS 16.7.1. A local attacker may be able to elevate their privileges. Apple is aware of a report that this issue may have been actively exploited against versions of iOS before iOS 16.6.
Błąd w Mount Manager w systemach Windows umożliwia lokalnym atakującym wykonanie dowolnego kodu.
Arm Mali GPU Kernel Driver allows a non-privileged user to achieve write access to read-only memory pages. This affects Midgard r26p0 through r31p0, Bifrost r0p0 through r35p0, and Valhall r19p0 through r35p0.
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 15.7.1 and iPadOS 15.7.1, iOS 16.1 and iPadOS 16. An application may be able to execute arbitrary code with kernel privileges. Apple is aware of a report that this issue may have been actively…
Zdalne wykonanie kodu w Kentico Xperience umożliwia uwierzytelnionym użytkownikom przesyłanie dowolnych plików.
In ep_loop_check_proc of eventpoll.c, there is a possible way to corrupt memory due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid…
Arbitrary Process Execution vulnerability in McAfee Total Protection (MTP) prior to 16.0.30 allows a local user to gain elevated privileges and execute arbitrary code bypassing MTP self-defense.
The Versa Director GUI provides an option to customize the look and feel of the user interface. This option is only available for a user logged with Provider-Data-Center-Admin or Provider-Data-Center-System-Admin. (Tenant level users do not have this privilege). The “Change Favicon” (Favorite…
A download of code without integrity check vulnerability in the "execute restore src-vis" command of FortiOS before 7.0.3 may allow a local authenticated attacker to download arbitrary files on the device via specially crafted update packages.
A memory consumption issue was addressed with improved memory handling. This issue is fixed in iOS 13.5.1 and iPadOS 13.5.1, macOS Catalina 10.15.5 Supplemental Update, tvOS 13.4.6, watchOS 6.2.6. An application may be able to execute arbitrary code with kernel privileges.
Memory corruption while submitting a large list of sync points in an AUX command to the IOCTL_KGSL_GPU_AUX_COMMAND.
Use After Free vulnerability in Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver allows a local non-privileged user to make improper GPU memory processing operations to gain access to already freed memory.This issue affects Bifrost GPU Kernel Driver: from r34p0 through r40p0;…
Memory corruption in Graphics Linux while assigning shared virtual memory region during IOCTL call.
Błąd w obliczeniach w jądrze Linux pozwala nieuprzywilejowanemu użytkownikowi na zdalne wykonanie kodu.
TeamViewer Desktop through 14.7.1965 allows a bypass of remote-login access control because the same key is used for different customers' installations. It used a shared AES key for all installations since at least as far back as v7.0.43148, and used it for at least OptionsPasswordAES in the…
A use after free issue was addressed with improved memory management. This issue is fixed in macOS Mojave 10.14.4. An application may be able to gain elevated privileges.
In kbase_jd_user_buf_pin_pages of mali_kbase_mem.c, there is a possible out of bounds write due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:…
Memory corruption while maintaining memory maps of HLOS memory.
Memory corruption in DSP Services during a remote call from HLOS to DSP.
there is a possible way to bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.
Lack of boundary checking of a buffer in set_skb_priv() of modem interface driver prior to SMR Oct-2021 Release 1 allows OOB read and it results in arbitrary code execution by dereference of invalid function pointer.
| Producent / podatność | Opis | Rekomendacja i powód | CVSS | EPSS | Daty źródłowe | Zapis |
|---|---|---|---|---|---|---|
| Wyścig w obsłudze timerów CPU w jądrze Linuxa może prowadzić do nieprawidłowego zarządzania zadaniami. | Wyścig w obsłudze timerów CPU w jądrze Linuxa może prowadzić do nieprawidłowego zarządzania zadaniami. |
Pilne działanie | 7,8 | 1,29 % | ||
| Memory corruption while using alignments for memory allocation. | Memory corruption while using alignments for memory allocation. |
Pilne działanie | 7,8 | 1,27 % | ||
| A vulnerability in the 3rd party AV uninstaller module contained in Trend Micro Apex One (on-prem and SaaS), Worry-Free Business Security… | A vulnerability in the 3rd party AV uninstaller module contained in Trend Micro Apex One (on-prem and SaaS), Worry-Free Business Security and Worry-Free Business Security Services could allow an attacker to manipulate the module to execute arbitrary commands on an affected installation. Note… |
Pilne działanie | 7,2 | 4,25 % | ||
| A logic issue existed in the handling of Group FaceTime calls. | A logic issue existed in the handling of Group FaceTime calls. The issue was addressed with improved state management. This issue is fixed in iOS 12.1.4, macOS Mojave 10.14.3 Supplemental Update. The initiator of a Group FaceTime call may be able to cause the recipient to answer. |
Pilne działanie | 7,5 | 2,63 % | ||
| The issue was addressed with improved checks. | The issue was addressed with improved checks. This issue is fixed in iOS 16.7.1 and iPadOS 16.7.1. A local attacker may be able to elevate their privileges. Apple is aware of a report that this issue may have been actively exploited against versions of iOS before iOS 16.6. |
Pilne działanie | 7,8 | 1,1 % | ||
| Błąd w Mount Manager w systemach Windows umożliwia lokalnym atakującym wykonanie dowolnego kodu. | Błąd w Mount Manager w systemach Windows umożliwia lokalnym atakującym wykonanie dowolnego kodu. |
Pilne działanie | 7,2 | 4,08 % | ||
| Arm Mali GPU Kernel Driver allows a non-privileged user to achieve write access to read-only memory pages. | Arm Mali GPU Kernel Driver allows a non-privileged user to achieve write access to read-only memory pages. This affects Midgard r26p0 through r31p0, Bifrost r0p0 through r35p0, and Valhall r19p0 through r35p0. |
Pilne działanie | 7,8 | 1,06 % | ||
| An out-of-bounds write issue was addressed with improved bounds checking. | An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 15.7.1 and iPadOS 15.7.1, iOS 16.1 and iPadOS 16. An application may be able to execute arbitrary code with kernel privileges. Apple is aware of a report that this issue may have been actively… |
Pilne działanie | 7,8 | 1,06 % | ||
| Zdalne wykonanie kodu w Kentico Xperience umożliwia uwierzytelnionym użytkownikom przesyłanie dowolnych plików. | Zdalne wykonanie kodu w Kentico Xperience umożliwia uwierzytelnionym użytkownikom przesyłanie dowolnych plików. |
Pilne działanie | 7,2 | 4,05 % | ||
| In ep_loop_check_proc of eventpoll.c, there is a possible way to corrupt memory due to a use after free. | In ep_loop_check_proc of eventpoll.c, there is a possible way to corrupt memory due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid… |
Pilne działanie | 7,8 | 1,05 % | ||
| Arbitrary Process Execution vulnerability in McAfee Total Protection (MTP) prior to 16.0.30 allows a local user to gain elevated… | Arbitrary Process Execution vulnerability in McAfee Total Protection (MTP) prior to 16.0.30 allows a local user to gain elevated privileges and execute arbitrary code bypassing MTP self-defense. |
Pilne działanie | 7,8 | 1,03 % | ||
| The Versa Director GUI provides an option to customize the look and feel of the user interface. | The Versa Director GUI provides an option to customize the look and feel of the user interface. This option is only available for a user logged with Provider-Data-Center-Admin or Provider-Data-Center-System-Admin. (Tenant level users do not have this privilege). The “Change Favicon” (Favorite… |
Pilne działanie | 7,2 | 4,01 % | ||
| A download of code without integrity check vulnerability in the "execute restore src-vis" command of FortiOS before 7.0.3 may allow a… | A download of code without integrity check vulnerability in the "execute restore src-vis" command of FortiOS before 7.0.3 may allow a local authenticated attacker to download arbitrary files on the device via specially crafted update packages. |
Pilne działanie | 7,8 | 0,87 % | ||
| A memory consumption issue was addressed with improved memory handling. | A memory consumption issue was addressed with improved memory handling. This issue is fixed in iOS 13.5.1 and iPadOS 13.5.1, macOS Catalina 10.15.5 Supplemental Update, tvOS 13.4.6, watchOS 6.2.6. An application may be able to execute arbitrary code with kernel privileges. |
Pilne działanie | 7,8 | 0,83 % | ||
| Memory corruption while submitting a large list of sync points in an AUX command to the IOCTL_KGSL_GPU_AUX_COMMAND. | Memory corruption while submitting a large list of sync points in an AUX command to the IOCTL_KGSL_GPU_AUX_COMMAND. |
Pilne działanie | 7,8 | 0,79 % | ||
| Use After Free vulnerability in Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver allows a local non-privileged user to… | Use After Free vulnerability in Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver allows a local non-privileged user to make improper GPU memory processing operations to gain access to already freed memory.This issue affects Bifrost GPU Kernel Driver: from r34p0 through r40p0;… |
Pilne działanie | 7,8 | 0,76 % | ||
| Memory corruption in Graphics Linux while assigning shared virtual memory region during IOCTL call. | Memory corruption in Graphics Linux while assigning shared virtual memory region during IOCTL call. |
Pilne działanie | 7,8 | 0,74 % | ||
| Błąd w obliczeniach w jądrze Linux pozwala nieuprzywilejowanemu użytkownikowi na zdalne wykonanie kodu. | Błąd w obliczeniach w jądrze Linux pozwala nieuprzywilejowanemu użytkownikowi na zdalne wykonanie kodu. |
Pilne działanie | 7,8 | 0,71 % | ||
| TeamViewer Desktop through 14.7.1965 allows a bypass of remote-login access control because the same key is used for different customers'… | TeamViewer Desktop through 14.7.1965 allows a bypass of remote-login access control because the same key is used for different customers' installations. It used a shared AES key for all installations since at least as far back as v7.0.43148, and used it for at least OptionsPasswordAES in the… |
Pilne działanie | 7,0 | 4,71 % | ||
| A use after free issue was addressed with improved memory management. | A use after free issue was addressed with improved memory management. This issue is fixed in macOS Mojave 10.14.4. An application may be able to gain elevated privileges. |
Pilne działanie | 7,8 | 0,7 % | ||
| In kbase_jd_user_buf_pin_pages of mali_kbase_mem.c, there is a possible out of bounds write due to a logic error in the code. | In kbase_jd_user_buf_pin_pages of mali_kbase_mem.c, there is a possible out of bounds write due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:… |
Pilne działanie | 7,8 | 0,69 % | ||
| Memory corruption while maintaining memory maps of HLOS memory. | Memory corruption while maintaining memory maps of HLOS memory. |
Pilne działanie | 7,8 | 0,67 % | ||
| Memory corruption in DSP Services during a remote call from HLOS to DSP. | Memory corruption in DSP Services during a remote call from HLOS to DSP. |
Pilne działanie | 7,8 | 0,67 % | ||
| there is a possible way to bypass due to a logic error in the code. | there is a possible way to bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation. |
Pilne działanie | 7,8 | 0,67 % | ||
| Lack of boundary checking of a buffer in set_skb_priv() of modem interface driver prior to SMR Oct-2021 Release 1 allows OOB read and it… | Lack of boundary checking of a buffer in set_skb_priv() of modem interface driver prior to SMR Oct-2021 Release 1 allows OOB read and it results in arbitrary code execution by dereference of invalid function pointer. |
Pilne działanie | 7,8 | 0,64 % |
Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.