CVE-2022-48503

webkitgtk: improper bounds checking leading to arbitrary code execution

The issue was addressed with improved bounds checks. This issue is fixed in tvOS 15.6, watchOS 8.7, iOS 15.6 and iPadOS 15.6, macOS Monterey 12.5, Safari 15.6. Processing web content may lead to arbitrary code execution.

CVSS 3.1 · 8.8 High EPSS 3.2% KEV · Listed

Vendors

Apple Redhat

Products

Ipados Iphone Os Macos and 5 more

CVE-2021-30761

webkitgtk: Memory corruption leading to arbitrary code execution

A memory corruption issue was addressed with improved state management. This issue is fixed in iOS 12.5.4. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited..

CVSS 3.1 · 8.8 High EPSS 10.5% KEV · Listed

Vendors

Apple Redhat

Products

Iphone Os Enterprise Linux Rhel Els

CVE-2021-30762

webkitgtk: Use-after-free leading to arbitrary code execution

A use after free issue was addressed with improved memory management. This issue is fixed in iOS 12.5.4. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited..

CVSS 3.1 · 8.8 High EPSS 11.0% KEV · Listed

Vendors

Apple Redhat

Products

Iphone Os Enterprise Linux Rhel Els

CVE-2023-23529

webkitgtk: processing maliciously crafted web content may be exploited for arbitrary code execution

A type confusion issue was addressed with improved checks. This issue is fixed in iOS 15.7.4 and iPadOS 15.7.4, iOS 16.3.1 and iPadOS 16.3.1, macOS Ventura 13.2.1, Safari 16.3. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited.

CVSS 3.1 · 8.8 High EPSS 9.5% KEV · Listed

Vendors

Apple Redhat

Products

Ipados Iphone Os Macos and 3 more

CVE-2022-42856

webkitgtk: processing maliciously crafted web content may lead to an arbitrary code execution

A type confusion issue was addressed with improved state handling. This issue is fixed in Safari 16.2, tvOS 16.2, macOS Ventura 13.1, iOS 15.7.2 and iPadOS 15.7.2, iOS 16.1.2. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited against versions of iOS released before iOS 15.1..

CVSS 3.1 · 8.8 High EPSS 8.5% KEV · Listed

Vendors

Apple Redhat

Products

Ipados Iphone Os Macos and 4 more

CVE-2022-32893

webkitgtk: processing maliciously crafted web content may lead to arbitrary code execution

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 15.6.1 and iPadOS 15.6.1, macOS Monterey 12.5.1, Safari 15.6.1. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited.

CVSS 3.1 · 8.8 High EPSS 10.5% KEV · Listed

Vendors

Apple Debian Fedoraproject and 3 more

Products

Ipados Iphone Os Macos and 7 more

CVE-2021-1789

webkitgtk: Type confusion issue leading to arbitrary code execution

A type confusion issue was addressed with improved state handling. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, tvOS 14.4, watchOS 7.3, iOS 14.4 and iPadOS 14.4, Safari 14.0.3. Processing maliciously crafted web content may lead to arbitrary code execution.

CVSS 3.1 · 8.8 High EPSS 14.0% KEV · Listed

Vendors

Apple Fedoraproject Redhat and 1 more

Products

Ipados Iphone Os Mac Os X and 7 more

CVE-2021-1870

webkitgtk: Logic issue leading to arbitrary code execution

A logic issue was addressed with improved restrictions. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, iOS 14.4 and iPadOS 14.4. A remote attacker may be able to cause arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited..

CVSS 3.1 · 9.8 Critical EPSS 7.7% KEV · Listed

Vendors

Apple Fedoraproject Redhat and 1 more

Products

Ipados Iphone Os Mac Os X and 5 more

CVE-2021-1871

webkitgtk: Logic issue leading to arbitrary code execution

A logic issue was addressed with improved restrictions. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, iOS 14.4 and iPadOS 14.4. A remote attacker may be able to cause arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited..

CVSS 3.1 · 9.8 Critical EPSS 7.0% KEV · Listed

Vendors

Apple Debian Fedoraproject and 1 more

Products

Ipados Iphone Os Mac Os X and 5 more

CVE-2023-28205

WebKitGTK: use-after-free leads to arbitrary code execution

A use after free issue was addressed with improved memory management. This issue is fixed in Safari 16.4.1, iOS 15.7.5 and iPadOS 15.7.5, iOS 16.4.1 and iPadOS 16.4.1, macOS Ventura 13.3.1. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited.

CVSS 3.1 · 8.8 High EPSS 27.1% KEV · Listed

Vendors

Apple Redhat

Products

Ipados Iphone Os Macos and 3 more

CVE-2021-30666

webkitgtk: Buffer overflow leading to arbitrary code execution

A buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS 12.5.3. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited..

CVSS 3.1 · 8.8 High EPSS 3.0% KEV · Listed

Vendors

Apple Redhat

Products

Iphone Os Enterprise Linux Rhel Els

CVE-2021-30665

webkitgtk: Memory corruption leading to arbitrary code execution

A memory corruption issue was addressed with improved state management. This issue is fixed in watchOS 7.4.1, iOS 14.5.1 and iPadOS 14.5.1, tvOS 14.6, iOS 12.5.3, macOS Big Sur 11.3.1. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited..

CVSS 3.1 · 8.8 High EPSS 3.7% KEV · Listed

Vendors

Apple Redhat

Products

Ipados Iphone Os Macos and 4 more

CVE-2021-30663

webkitgtk: Integer overflow leading to arbitrary code execution

An integer overflow was addressed with improved input validation. This issue is fixed in iOS 14.5.1 and iPadOS 14.5.1, tvOS 14.6, iOS 12.5.3, Safari 14.1.1, macOS Big Sur 11.3.1. Processing maliciously crafted web content may lead to arbitrary code execution.

CVSS 3.1 · 7.8 High EPSS 3.5% KEV · Listed

Vendors

Apple Redhat

Products

Ipados Iphone Os Macos and 4 more

CVE-2022-22620

webkitgtk: maliciously crafted web content may lead to arbitrary code execution due to use after free

A use after free issue was addressed with improved memory management. This issue is fixed in macOS Monterey 12.2.1, iOS 15.3.1 and iPadOS 15.3.1, Safari 15.3 (v. 16612.4.9.1.8 and 15612.4.9.1.8). Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited..

CVSS 3.1 · 8.8 High EPSS 16.3% KEV · Listed

Vendors

Apple Redhat

Products

Ipados Iphone Os Macos and 3 more

CVE-2021-30661

webkitgtk: Use-after-free leading to arbitrary code execution

A use after free issue was addressed with improved memory management. This issue is fixed in Safari 14.1, iOS 12.5.3, iOS 14.5 and iPadOS 14.5, watchOS 7.4, tvOS 14.5, macOS Big Sur 11.3. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited..

CVSS 3.1 · 8.8 High EPSS 4.5% KEV · Listed

Vendors

Apple Redhat

Products

Ipados Iphone Os Macos and 5 more

CVE-2021-0920

kernel: Use After Free in unix_gc() which could result in a local privilege escalation

In unix_scm_to_skb of af_unix.c, there is a possible use after free bug due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-196926917References: Upstream kernel

CVSS 3.1 · 6.4 Medium EPSS < 1% KEV · Listed

Vendors

Debian Google Linux and 1 more

Products

Debian Linux Android Linux Kernel and 8 more

CVE-2025-40907

FCGI versions 0.44 through 0.82, for Perl, include a vulnerable version of the FastCGI fcgi2 (aka fcgi) library

FCGI versions 0.44 through 0.82, for Perl, include a vulnerable version of the FastCGI fcgi2 (aka fcgi) library. The included FastCGI library is affected by CVE-2025-23016, causing an integer overflow (and resultant heap-based buffer overflow) via crafted nameLen or valueLen values in data to the IPC socket. This occurs in ReadParams in fcgiapp.c.

CVSS 3.1 · 5.3 Medium EPSS < 1% KEV · Not listed

Vendors

Fastcgi Redhat

Products

Fcgi Enterprise Linux Rhel Aus and 4 more

CVE-2024-21145

OpenJDK: Out-of-bounds access in 2D image handling (8324559)

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D). Supported versions that are affected are Oracle Java SE: 8u411, 8u411-perf, 11.0.23, 17.0.11, 21.0.3, 22.0.1; Oracle GraalVM for JDK: 17.0.11, 21.0.3, 22.0.1; Oracle GraalVM Enterprise Edition: 20.3.14 and 21.3.10. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data as well as unauthorized read access to a subset of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 4.8 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N).

CVSS 3.1 · 4.8 Medium EPSS < 1% KEV · Not listed

Vendors

Netapp Oracle Redhat

Products

Bluexp Cloud Insights Storage Workload Security Agent Oncommand Insight and 12 more

CVE-2018-25032

zlib: A flaw found in zlib when compressing (not decompressing) certain inputs

zlib before 1.2.12 allows memory corruption when deflating (i.e., when compressing) if the input has many distant matches.

CVSS 3.1 · 7.5 High EPSS 51.7% KEV · Not listed

Vendors

Apple Azul Debian and 10 more

Products

Mac Os X Macos Zulu and 44 more

CVE-2024-42472

Flatpak may allow access to files outside sandbox for certain apps

Flatpak is a Linux application sandboxing and distribution framework. Prior to versions 1.14.0 and 1.15.10, a malicious or compromised Flatpak app using persistent directories could access and write files outside of what it would otherwise have access to, which is an attack on integrity and confidentiality. When `persistent=subdir` is used in the application permissions (represented as `--persist=subdir` in the command-line interface), that means that an application which otherwise doesn't have access to the real user home directory will see an empty home directory with a writeable subdirectory `subdir`. Behind the scenes, this directory is actually a bind mount and the data is stored in the per-application directory as `~/.var/app/$APPID/subdir`. This allows existing apps that are not aware of the per-application directory to still work as intended without general home directory access. However, the application does have write access to the application directory `~/.var/app/$APPID` where this directory is stored. If the source directory for the `persistent`/`--persist` option is replaced by a symlink, then the next time the application is started, the bind mount will follow the symlink and mount whatever it points to into the sandbox. Partial protection against this vulnerability can be provided by patching Flatpak using the patches in commits ceec2ffc and 98f79773. However, this leaves a race condition that could be exploited by two instances of a malicious app running in parallel. Closing the race condition requires updating or patching the version of bubblewrap that is used by Flatpak to add the new `--bind-fd` option using the patch and then patching Flatpak to use it. If Flatpak has been configured at build-time with `-Dsystem_bubblewrap=bwrap` (1.15.x) or `--with-system-bubblewrap=bwrap` (1.14.x or older), or a similar option, then the version of bubblewrap that needs to be patched is a system copy that is distributed separately, typically `/usr/bin/bwrap`. This configuration is the one that is typically used in Linux distributions. If Flatpak has been configured at build-time with `-Dsystem_bubblewrap=` (1.15.x) or with `--without-system-bubblewrap` (1.14.x or older), then it is the bundled version of bubblewrap that is included with Flatpak that must be patched. This is typically installed as `/usr/libexec/flatpak-bwrap`. This configuration is the default when building from source code. For the 1.14.x stable branch, these changes are included in Flatpak 1.14.10. The bundled version of bubblewrap included in this release has been updated to 0.6.3. For the 1.15.x development branch, these changes are included in Flatpak 1.15.10. The bundled version of bubblewrap in this release is a Meson "wrap" subproject, which has been updated to 0.10.0. The 1.12.x and 1.10.x branches will not be updated for this vulnerability. Long-term support OS distributions should backport the individual changes into their versions of Flatpak and bubblewrap, or update to newer versions if their stability policy allows it. As a workaround, avoid using applications using the `persistent` (`--persist`) permission.

CVSS 3.1 · 10 Critical EPSS 1.3% KEV · Not listed

Vendors

Debian Flatpak Redhat

Products

Debian Linux Flatpak Enterprise Linux and 5 more