Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 17,075

Export CSV
CVE-2024-7525

mozilla: Missing permission check when creating a StreamFilter

It was possible for a web extension with minimal permissions to create a `StreamFilter` which could be used to read and modify the response body of requests on any site. This vulnerability affects Firefox < 129, Firefox ESR < 115.14, Firefox ESR < 128.1, Thunderbird < 128.1, and Thunderbird < 115.14.

CVSS 3.1 · 9.1 Critical EPSS < 1% KEV · Not listed
Vendors
Mozilla Redhat
Products
Firefox Firefox Esr Thunderbird and 6 more
CVE-2024-7522

mozilla: Out of bounds read in editor component

Editor code failed to check an attribute value. This could have led to an out-of-bounds read. This vulnerability affects Firefox < 129, Firefox ESR < 115.14, Firefox ESR < 128.1, Thunderbird < 128.1, and Thunderbird < 115.14.

CVSS 3.1 · 9.1 Critical EPSS < 1% KEV · Not listed
Vendors
Mozilla Redhat
Products
Firefox Firefox Esr Thunderbird and 6 more
CVE-2024-7521

mozilla: Incomplete WebAssembly exception handing

Incomplete WebAssembly exception handing could have led to a use-after-free. This vulnerability affects Firefox < 129, Firefox ESR < 115.14, Firefox ESR < 128.1, Thunderbird < 128.1, and Thunderbird < 115.14.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed
Vendors
Mozilla Redhat
Products
Firefox Firefox Esr Thunderbird and 6 more
CVE-2024-7519

mozilla: Out of bounds memory access in graphics shared memory handling

Insufficient checks when processing graphics shared memory could have led to memory corruption. This could be leveraged by an attacker to perform a sandbox escape. This vulnerability affects Firefox < 129, Firefox ESR < 115.14, Firefox ESR < 128.1, Thunderbird < 128.1, and Thunderbird < 115.14.

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Mozilla Redhat
Products
Firefox Firefox Esr Thunderbird and 6 more
CVE-2024-42226

kernel: usb: xhci: prevent potential failure in handle_tx_event() for Transfer events without TRB

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

CVSS 3.1 · 5.5 Medium EPSS n/a KEV · Not listed
Vendors
Redhat
Products
Enterprise Linux
CVE-2024-35918

kernel: randomize_kstack: Improve entropy diffusion

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

CVSS 3.1 · 5.5 Medium EPSS n/a KEV · Not listed
Vendors
Redhat
Products
Enterprise Linux
CVE-2024-38391

kernel: cxl/region: Fix cxlr_pmem leaks

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

CVSS 3.1 · 4.4 Medium EPSS n/a KEV · Not listed
Vendors
Redhat
Products
Enterprise Linux
CVE-2024-35812

kernel: usb: cdc-wdm: close race between read and workqueue

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

CVSS 3.1 · 5.5 Medium EPSS n/a KEV · Not listed
Vendors
Redhat
Products
Enterprise Linux
CVE-2023-52734

kernel: net: sched: sch: Bounds check priority

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

CVSS 3.1 · 5.5 Medium EPSS n/a KEV · Not listed
Vendors
Redhat
Products
Enterprise Linux
CVE-2024-35923

kernel: io_uring: clear opcode specific data for an early failure

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

CVSS 3.1 · 5.5 Medium EPSS n/a KEV · Not listed
Vendors
Redhat
Products
Enterprise Linux
CVE-2023-52758

kernel: i2c: dev: copy userspace array safely

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

CVSS 3.1 · 4.4 Medium EPSS n/a KEV · Not listed
Vendors
Redhat
Products
Enterprise Linux
CVE-2024-35876

kernel: x86/mce: Make sure to grab mce_sysfs_mutex in set_bank()

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

CVSS 3.1 · 5.5 Medium EPSS n/a KEV · Not listed
Vendors
Redhat
Products
Enterprise Linux Rhel Eus
CVE-2024-26650

kernel: p2sb_bar() calls during PCI device probe

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

CVSS 3.1 · 4.4 Medium EPSS n/a KEV · Not listed
Vendors
Redhat
Products
Enterprise Linux
CVE-2023-52651

kernel: wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

CVSS 3.1 · 5.5 Medium EPSS n/a KEV · Not listed
Vendors
Redhat
Products
Enterprise Linux Rhel Eus
CVE-2022-27458

mariadb: use-after-poison in Binary_string::free_buffer

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2022-27447. Reason: This candidate is a reservation duplicate of CVE-2022-27447. Notes: All CVE users should reference CVE-2022-27447 instead of this candidate.

CVSS 3.1 · 7.5 High EPSS n/a KEV · Not listed
Vendors
Redhat
Products
Enterprise Linux Rhel Software Collections
CVE-2021-47213

kernel: NFSD: Fix exposure in nfsd4_decode_bitmap()

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

CVSS 3.1 · 6.1 Medium EPSS n/a KEV · Not listed
Vendors
Redhat
Products
Enterprise Linux
CVE-2024-23252

webkit: processing malicious web content may lead to denial-of-service

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

CVSS 3.1 · 6.5 Medium EPSS n/a KEV · Not listed
Vendors
Redhat
Products
Enterprise Linux Rhel Els
CVE-2023-52605

kernel: ACPI: extlog: fix NULL pointer dereference check

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

CVSS 3.1 · 4.4 Medium EPSS n/a KEV · Not listed
Vendors
Redhat
Products
Enterprise Linux Rhel Eus