Archive
9 July 2024
Vulnerabilities first published on this day (UTC), newest first.
257 results · Clear filters · Feed
-
High 8.8
Windows Text Services Framework Elevation of Privilege Vulnerability
Windows Text Services Framework Elevation of Privilege Vulnerability
-
High 7.2
IBM WebSphere Application Server code execution
IBM WebSphere Application Server 8.5 and 9.0 could allow a remote authenticated attacker, who has authorized access to the administrative console, to execute arbitrary code. Using specially crafted input, the attacker could exploit this vulnerability to execu…
-
High 8.4
Heap-based Buffer Overflow in Delta Electronics CNCSoft-G2
Delta Electronics CNCSoft-G2 lacks proper validation of the length of user-supplied data prior to copying it to a fixed-length heap-based buffer. If a target visits a malicious page or opens a malicious file an attacker can leverage this vulnerability to exec…
-
High 8.4
Out-of-bounds Read in Delta Electronics CNCSoft-G2
Delta Electronics CNCSoft-G2 lacks proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. If a target visits a malicious page or opens a malicious file an attacker can leverage this vulnerability to execute co…
-
High 8.4
Out-of-bounds Write in Delta Electronics CNCSoft-G2
Delta Electronics CNCSoft-G2 lacks proper validation of user-supplied data, which can result in a memory corruption condition. If a target visits a malicious page or opens a malicious file an attacker can leverage this vulnerability to execute code in the con…
-
High 7.8
Stack-based Buffer Overflow in Delta Electronics CNCSoft-G2
Delta Electronics CNCSoft-G2 lacks proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. If a target visits a malicious page or opens a malicious file an attacker can leverage this vulnerability to exe…
-
High 7.8
In PVRSRV_MMap of pvr_bridge_k.c, there is a possible arbitrary code execution due to a logic error in the code. This c…
-
High 7.4
In smp_proc_rand of smp_act.cc, there is a possible authentication bypass during legacy BLE pairing due to incorrect im…
-
High 7.4
In DevmemIntUnexportCtx of devicemem_server.c, there is a possible arbitrary code execution due to a race condition. Th…
-
High 7.0
In _UnrefAndMaybeDestroy of pmr.c, there is a possible arbitrary code execution due to a race condition. This could lea…
-
High 7.4
In com_android_internal_os_ZygoteCommandBuffer_nativeForkRepeatedly of com_android_internal_os_ZygoteCommandBuffer.cpp,…
-
High 7.4CVE-2024-31320 Public exploit
In setSkipPrompt of AssociationRequest.java , there is a possible way to establish a companion device association witho…
-
High 7.8
In multiple functions of StatsService.cpp, there is a possible memory corruption due to a use after free. This could le…
-
High 7.8
In setMimeGroup of PackageManagerService.java, there is a possible way to hide the service from Settings due to a logic…
-
High 8.4
In DevmemIntChangeSparse2 of devicemem_server.c, there is a possible arbitrary code execution due to a logic error in t…
-
High 8.4
In multiple locations, there is a possible way to bypass a restriction on adding new Wi-Fi connections due to a missing…
-
High 8.4
In updateNotificationChannelFromPrivilegedListener of NotificationManagerService.java, there is a possible cross-user d…
-
High 7.8
In hide of WindowState.java, there is a possible way to bypass tapjacking/overlay protection by launching the activity …
-
High 7.8
In CompanionDeviceManagerService.java, there is a possible way to pair a companion device without user acceptance due t…
-
High 7.8
In onCreate of multiple files, there is a possible way to trick the user into granting health permissions due to tapjac…
-
High 7.8
In multiple locations, there is a possible way in which policy migration code will never be executed due to a logic err…
-
High 7.8
In multiple locations, there is a possible way to reveal images across users data due to a logic error in the code. Thi…
-
High 7.8
In newServiceInfoLocked of AutofillManagerServiceImpl.java, there is a possible way to hide an enabled Autofill service…
-
High 7.8
In onResult of AccountManagerService.java, there is a possible way to perform an arbitrary background activity launch d…
-
High 7.8
In availableToWriteBytes of MessageQueueBase.h, there is a possible out of bounds write due to an incorrect bounds chec…
-
High 7.8CVE-2024-31317 Public exploit
In multiple functions of ZygoteProcess.java, there is a possible way to achieve code execution as any app via WRITE_SEC…
-
High 7.8
In RGXFWChangeOSidPriority of rgxfwutils.c, there is a possible arbitrary code execution due to a missing bounds check.…
-
High 7.3
In RGXCreateHWRTData_aux of rgxta3d.c, there is a possible arbitrary code execution due to a use after free. This could…
-
High 7.8
In DevmemXIntUnreserveRange of devicemem_server.c, there is a possible arbitrary code execution due to a logic error in…
-
High 7.8
In multiple locations, there is a possible permission bypass due to a confused deputy. This could lead to local escalat…
-
High 7.8
In multiple locations, there is a possible permission bypass due to a confused deputy. This could lead to local escalat…
-
High 8.4
In RGXCreateZSBufferKM of rgxta3d.c, there is a possible arbitrary code execution due to a use after free. This could l…
-
High 8.4
In CacheOpPMRExec of cache_km.c, there is a possible out of bounds write due to an integer overflow. This could lead to…
-
High 7.8
Adobe Bridge has an integer overflow vulnerability when parsing SVG file
Bridge versions 14.0.4, 13.0.7, 14.1 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a v…
-
High 7.8
Adobe Indesign TIF File Parsing Heap Memory Corruption
InDesign Desktop versions ID19.3, ID18.5.2 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a …
-
High 7.8
Adobe Indesign 2024 TIFF File Parsing Memory Corruption Remote Code Execution vulnerability
InDesign Desktop versions ID19.3, ID18.5.2 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a …
-
High 7.8
Adobe Indesign 2024 RLE File Parsing Heap Memory Corruption
InDesign Desktop versions ID19.3, ID18.5.2 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a …
-
High 7.8
Adobe Indesign WMF File Parsing Out Of Bound Write
InDesign Desktop versions ID19.3, ID18.5.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim…
-
High 7.0
Adobe Premiere Pro arbitrary DLL loading lead to remote code execution
Premiere Pro versions 23.6.5, 24.4.1 and earlier are affected by an Untrusted Search Path vulnerability that could lead to arbitrary code execution. An attacker could exploit this vulnerability by inserting a malicious file into the search path, which the app…
-
High 7.5
Code Signing Bypass on Windows in electron-updater < 6.3.0-alpha.6
electron-updater allows for automatic updates for Electron apps. The file `packages/electron-updater/src/windowsExecutableCodeSignatureVerifier.ts` implements the signature validation routine for Electron applications on Windows. Because of the surrounding sh…