Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 17,087

Export CSV
CVE-2020-3895

webkitgtk: Memory corruption triggered by a malicious web content

A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 13.4 and iPadOS 13.4, tvOS 13.4, watchOS 6.2, Safari 13.1, iTunes for Windows 12.10.5, iCloud for Windows 10.9.3, iCloud for Windows 7.18. Processing maliciously crafted web content may lead to arbitrary code execution.

CVSS 3.1 · 8.8 High EPSS 2.7% KEV · Not listed
Vendors
Apple Redhat
Products
Icloud Ipad Os Iphone Os and 5 more
CVE-2020-3894

webkitgtk: Race condition allows reading of restricted memory

A race condition was addressed with additional validation. This issue is fixed in iOS 13.4 and iPadOS 13.4, tvOS 13.4, Safari 13.1, iTunes for Windows 12.10.5, iCloud for Windows 10.9.3, iCloud for Windows 7.18. An application may be able to read restricted memory.

CVSS 3.1 · 3.1 Low EPSS 1.1% KEV · Not listed
Vendors
Apple Redhat
Products
Icloud Ipad Os Iphone Os and 4 more
CVE-2020-3885

webkitgtk: Incorrect processing of file URLs

A logic issue was addressed with improved restrictions. This issue is fixed in iOS 13.4 and iPadOS 13.4, tvOS 13.4, Safari 13.1, iTunes for Windows 12.10.5, iCloud for Windows 10.9.3, iCloud for Windows 7.18. A file URL may be incorrectly processed.

CVSS 3.1 · 4.3 Medium EPSS 1.6% KEV · Not listed
Vendors
Apple Redhat
Products
Icloud Ipad Os Iphone Os and 4 more
CVE-2020-3868

webkitgtk: Multiple memory corruption issues leading to arbitrary code execution

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1, tvOS 13.3.1, Safari 13.0.5, iTunes for Windows 12.10.4, iCloud for Windows 11.0, iCloud for Windows 7.17. Processing maliciously crafted web content may lead to arbitrary code execution.

CVSS 3.1 · 8.8 High EPSS 2.7% KEV · Not listed
Vendors
Apple Opensuse Redhat
Products
Icloud Ipados Iphone Os and 5 more
CVE-2020-3867

webkitgtk: Incorrect state management leading to universal cross-site scripting

A logic issue was addressed with improved state management. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1, tvOS 13.3.1, Safari 13.0.5, iTunes for Windows 12.10.4, iCloud for Windows 11.0, iCloud for Windows 7.17. Processing maliciously crafted web content may lead to universal cross site scripting.

CVSS 3.1 · 6.1 Medium EPSS 1.4% KEV · Not listed
Vendors
Apple Opensuse Redhat and 1 more
Products
Icloud Ipados Iphone Os and 6 more
CVE-2020-3865

webkitgtk: Incorrect security check for a top-level DOM object context

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1, tvOS 13.3.1, Safari 13.0.5, iTunes for Windows 12.10.4, iCloud for Windows 11.0, iCloud for Windows 7.17. Processing maliciously crafted web content may lead to arbitrary code execution.

CVSS 3.1 · 8.8 High EPSS 1.9% KEV · Not listed
Vendors
Apple Opensuse Redhat
Products
Icloud Ipados Iphone Os and 5 more
CVE-2020-3864

webkitgtk: Non-unique security origin for DOM object contexts

A logic issue was addressed with improved validation. This issue is fixed in iCloud for Windows 7.17, iTunes 12.10.4 for Windows, iCloud for Windows 10.9.2, tvOS 13.3.1, Safari 13.0.5, iOS 13.3.1 and iPadOS 13.3.1. A DOM object context may not have had a unique security origin.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Apple Redhat
Products
Icloud Ipados Iphone Os and 7 more
CVE-2020-3862

webkitgtk: Denial of service via incorrect memory handling

A denial of service issue was addressed with improved memory handling. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1, tvOS 13.3.1, Safari 13.0.5, iTunes for Windows 12.10.4, iCloud for Windows 11.0, iCloud for Windows 7.17. A malicious website may be able to cause a denial of service.

CVSS 3.1 · 6.5 Medium EPSS 2.0% KEV · Not listed
Vendors
Apple Opensuse Redhat
Products
Icloud Ipados Iphone Os and 5 more
CVE-2020-3757

flash-plugin: Arbitrary Code Execution vulnerability (APSB20-06)

Adobe Flash Player versions 32.0.0.321 and earlier, 32.0.0.314 and earlier, 32.0.0.321 and earlier, and 32.0.0.255 and earlier have a type confusion vulnerability. Successful exploitation could lead to arbitrary code execution.

CVSS 3.1 · 8.8 High EPSS 10.2% KEV · Not listed
Vendors
Adobe Apple Google and 3 more
Products
Flash Player Macos Chrome Os and 8 more
CVE-2020-36557

kernel: race condition between the VT_DISALLOCATE ioctl and closing/opening of ttys, causing a use-after-free in con_shutdown().

A race condition in the Linux kernel before 5.6.2 between the VT_DISALLOCATE ioctl and closing/opening of ttys could lead to a use-after-free.

CVSS 3.1 · 5.1 Medium EPSS < 1% KEV · Not listed
Vendors
Linux Redhat
Products
Linux Kernel Enterprise Linux
CVE-2020-36516

kernel: off-path attacker may inject data or terminate victim's TCP session

An issue was discovered in the Linux kernel through 5.16.11. The mixed IPID assignment method with the hash-based IPID assignment policy allows an off-path attacker to inject data into a victim's TCP session or terminate that session.

CVSS 3.1 · 5.9 Medium EPSS < 1% KEV · Not listed
Vendors
Linux Netapp Redhat
Products
Linux Kernel Bootstrap Os Cloud Volumes Ontap Mediator and 29 more
CVE-2020-36386

kernel: slab out-of-bounds read in hci_extended_inquiry_result_evt() in net/bluetooth/hci_event.c

An issue was discovered in the Linux kernel before 5.8.1. net/bluetooth/hci_event.c has a slab out-of-bounds read in hci_extended_inquiry_result_evt, aka CID-51c19bf3d5cf.

CVSS 3.1 · 7.1 High EPSS < 1% KEV · Not listed
Vendors
Linux Redhat
Products
Linux Kernel Enterprise Linux
CVE-2020-36385

kernel: use-after-free in drivers/infiniband/core/ucma.c ctx use-after-free

An issue was discovered in the Linux kernel before 5.10. drivers/infiniband/core/ucma.c has a use-after-free because the ctx is reached via the ctx_list in some ucma_migrate_id situations where ucma_close is called, aka CID-f5449e74802c.

CVSS 3.1 · 7.8 High EPSS 1.5% KEV · Not listed
Vendors
Linux Netapp Redhat and 1 more
Products
Linux Kernel H300e H300e Firmware and 23 more
CVE-2020-36331

libwebp: out-of-bounds read in ChunkAssignData() in mux/muxinternal.c

A flaw was found in libwebp in versions before 1.0.1. An out-of-bounds read was found in function ChunkAssignData. The highest threat from this vulnerability is to data confidentiality and to the service availability.

CVSS 3.1 · 9.1 Critical EPSS 2.3% KEV · Not listed
Vendors
Apple Debian Netapp and 2 more
Products
Ipados Iphone Os Debian Linux and 3 more
CVE-2020-36330

libwebp: out-of-bounds read in ChunkVerifyAndAssign() in mux/muxread.c

A flaw was found in libwebp in versions before 1.0.1. An out-of-bounds read was found in function ChunkVerifyAndAssign. The highest threat from this vulnerability is to data confidentiality and to the service availability.

CVSS 3.1 · 9.1 Critical EPSS 2.2% KEV · Not listed
Vendors
Apple Debian Netapp and 2 more
Products
Ipados Iphone Os Debian Linux and 3 more
CVE-2020-36329

libwebp: use-after-free in EmitFancyRGB() in dec/io_dec.c

A flaw was found in libwebp in versions before 1.0.1. A use-after-free was found due to a thread being killed too early. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.

CVSS 3.1 · 9.8 Critical EPSS 2.3% KEV · Not listed
Vendors
Apple Debian Netapp and 2 more
Products
Ipados Iphone Os Debian Linux and 5 more
CVE-2020-36328

libwebp: heap-based buffer overflow in WebPDecode*Into functions

A flaw was found in libwebp in versions before 1.0.1. A heap-based buffer overflow in function WebPDecodeRGBInto is possible due to an invalid check for buffer size. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.

CVSS 3.1 · 9.8 Critical EPSS 2.7% KEV · Not listed
Vendors
Apple Debian Netapp and 2 more
Products
Ipados Iphone Os Debian Linux and 5 more
CVE-2020-36323

rust: optimization for joining strings can cause uninitialized bytes to be exposed

In the standard library in Rust before 1.52.0, there is an optimization for joining strings that can cause uninitialized bytes to be exposed (or the program to crash) if the borrowed string changes after its length is checked.

CVSS 3.1 · 8.2 High EPSS 2.0% KEV · Not listed
Vendors
Fedoraproject Redhat Rust-lang
Products
Fedora Devtools Enterprise Linux and 1 more
CVE-2020-36322

kernel: fuse: fuse_do_getattr() calls make_bad_inode() in inappropriate situations

An issue was discovered in the FUSE filesystem implementation in the Linux kernel before 5.10.6, aka CID-5d069dbe8aaf. fuse_do_getattr() calls make_bad_inode() in inappropriate situations, causing a system crash. NOTE: the original fix for this vulnerability was incomplete, and its incompleteness is tracked as CVE-2021-28950.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Debian Linux Redhat and 1 more
Products
Debian Linux Linux Kernel Enterprise Linux and 3 more