[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f1xm06xqykyhnG80RrMzncguDmXBrhYV_EC-9GiarYTA":3},{"success":4,"data":5},true,{"vendor":6,"topVulnerabilitiesByEpss":104,"kevVulnerabilities":166,"topProductsByCves":755,"seoMetadata":766,"meta":775},{"vendorId":7,"vendorName":8,"productCount":9,"cveCount":10,"kevCount":11,"versionCount":12,"lastCveUpdate":13,"firstLetter":14,"products":15,"description":103},17949,"linux",19,12142,74,5729,"2025-10-28","l",[16,21,28,34,40,46,51,57,61,65,69,73,77,81,85,89,93,96,100],{"id":17,"product_name":18,"version_count":19,"cve_count":20,"kev_count":11,"last_cve_update":13},104132,"linux_kernel",5163,12101,{"id":22,"product_name":23,"version_count":24,"cve_count":25,"kev_count":26,"last_cve_update":27},104140,"tizen",11,13,0,"2021-07-08",{"id":29,"product_name":30,"version_count":31,"cve_count":32,"kev_count":26,"last_cve_update":33},104129,"kernel",151,12,"2017-07-28",{"id":35,"product_name":36,"version_count":37,"cve_count":38,"kev_count":26,"last_cve_update":39},104123,"acrn",359,7,"2021-07-02",{"id":41,"product_name":42,"version_count":43,"cve_count":44,"kev_count":26,"last_cve_update":45},104141,"util-linux",17,4,"2011-04-10",{"id":47,"product_name":48,"version_count":26,"cve_count":49,"kev_count":26,"last_cve_update":50},104136,"mac80211",3,"2021-05-11",{"id":52,"product_name":53,"version_count":54,"cve_count":55,"kev_count":26,"last_cve_update":56},104126,"direct_connect",9,2,"2008-07-01",{"id":58,"product_name":8,"version_count":26,"cve_count":59,"kev_count":26,"last_cve_update":60},104131,1,"2009-08-18",{"id":62,"product_name":63,"version_count":59,"cve_count":59,"kev_count":26,"last_cve_update":64},104125,"dhcp6c","2019-11-27",{"id":66,"product_name":67,"version_count":26,"cve_count":59,"kev_count":26,"last_cve_update":68},104133,"linux_kernel_i40e\\\u002Fi40evf","2018-01-23",{"id":70,"product_name":71,"version_count":59,"cve_count":59,"kev_count":26,"last_cve_update":72},104127,"infiniband_hfi1_driver","2021-01-07",{"id":74,"product_name":75,"version_count":59,"cve_count":59,"kev_count":26,"last_cve_update":76},104135,"linux_kernel-rt","2016-06-27",{"id":78,"product_name":79,"version_count":26,"cve_count":59,"kev_count":26,"last_cve_update":80},104137,"mptcp_protocol","2022-11-28",{"id":82,"product_name":83,"version_count":55,"cve_count":59,"kev_count":26,"last_cve_update":84},104138,"parduslinux","2008-08-07",{"id":86,"product_name":87,"version_count":59,"cve_count":59,"kev_count":26,"last_cve_update":88},104139,"systemd","2012-07-12",{"id":90,"product_name":91,"version_count":26,"cve_count":59,"kev_count":26,"last_cve_update":92},104124,"audit","2008-04-02",{"id":94,"product_name":95,"version_count":59,"cve_count":59,"kev_count":26,"last_cve_update":68},104134,"linux_kernel_ixgbe",{"id":97,"product_name":98,"version_count":32,"cve_count":59,"kev_count":26,"last_cve_update":99},104128,"ipsec_tools_racoon_daemon","2008-08-13",{"id":101,"product_name":102,"version_count":26,"cve_count":59,"kev_count":26,"last_cve_update":80},104130,"layer_2_tunneling_protocol","Linux is a technology vendor with 19 tracked products and 12142 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this vendor.",[105,113,122,129,134,139,144,149,155,161],{"cveId":106,"description":107,"publishedDate":108,"cvssScore":109,"cvssVersion":110,"severity":111,"isKev":4,"epssScore":112},"CVE-2011-0611","Adobe Flash Player before 10.2.154.27 on Windows, Mac OS X, Linux, and Solaris and 10.2.156.12 and earlier on Android; Adobe AIR before 2.6.19140; and Authplay.dll (aka AuthPlayLib.bundle) in Adobe Reader 9.x before 9.4.4 and 10.x through 10.0.1 on Windows, Adobe Reader 9.x before 9.4.4 and 10.x before 10.0.3 on Mac OS X, and Adobe Acrobat 9.x before 9.4.4 and 10.x before 10.0.3 on Windows and Mac OS X allow remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted Flash content; as demonstrated by a Microsoft Office document with an embedded .swf file that has a size inconsistency in a \"group of included constants,\" object type confusion, ActionScript that adds custom functions to prototypes, and Date objects; and as exploited in the wild in April 2011.","2011-04-13",8.8,"v3.1","High",0.9941,{"cveId":114,"description":115,"publishedDate":116,"cvssScore":117,"cvssVersion":118,"severity":119,"isKev":120,"epssScore":121},"CVE-2009-3733","Directory traversal vulnerability in VMware Server 1.x before 1.0.10 build 203137 and 2.x before 2.0.2 build 203138 on Linux, VMware ESXi 3.5, and VMware ESX 3.0.3 and 3.5 allows remote attackers to read arbitrary files via unspecified vectors.","2009-11-02",5,"v2","Medium",false,0.83378,{"cveId":123,"description":124,"publishedDate":125,"cvssScore":126,"cvssVersion":118,"severity":127,"isKev":120,"epssScore":128},"CVE-2008-5499","Unspecified vulnerability in Adobe Flash Player for Linux 10.0.12.36, and 9.0.151.0 and earlier, allows remote attackers to execute arbitrary code via a crafted SWF file.","2008-12-18",9.3,"Critical",0.79426,{"cveId":130,"description":131,"publishedDate":132,"cvssScore":117,"cvssVersion":118,"severity":119,"isKev":120,"epssScore":133},"CVE-1999-0128","Oversized ICMP ping packets can result in a denial of service, aka Ping o' Death.","1996-12-18",0.74506,{"cveId":135,"description":136,"publishedDate":137,"cvssScore":117,"cvssVersion":118,"severity":119,"isKev":120,"epssScore":138},"CVE-2003-0001","Multiple ethernet Network Interface Card (NIC) device drivers do not pad frames with null bytes, which allows remote attackers to obtain information from previous packets or kernel memory by using malformed packets, as demonstrated by Etherleak.","2003-01-17",0.72511,{"cveId":140,"description":141,"publishedDate":142,"cvssScore":117,"cvssVersion":118,"severity":119,"isKev":120,"epssScore":143},"CVE-1999-0513","ICMP messages to broadcast addresses are allowed, allowing for a Smurf attack that can cause a denial of service.","1998-01-05",0.70934,{"cveId":145,"description":146,"publishedDate":147,"cvssScore":126,"cvssVersion":118,"severity":127,"isKev":120,"epssScore":148},"CVE-2010-3654","Adobe Flash Player before 9.0.289.0 and 10.x before 10.1.102.64 on Windows, Mac OS X, Linux, and Solaris and 10.1.95.1 on Android, and authplay.dll (aka AuthPlayLib.bundle or libauthplay.so.0.0.0) in Adobe Reader and Acrobat 9.x through 9.4, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via crafted SWF content, as exploited in the wild in October 2010.","2010-10-29",0.69679,{"cveId":150,"description":151,"publishedDate":152,"cvssScore":153,"cvssVersion":110,"severity":111,"isKev":4,"epssScore":154},"CVE-2011-0609","Unspecified vulnerability in Adobe Flash Player 10.2.154.13 and earlier on Windows, Mac OS X, Linux, and Solaris; 10.1.106.16 and earlier on Android; Adobe AIR 2.5.1 and earlier; and Authplay.dll (aka AuthPlayLib.bundle) in Adobe Reader and Acrobat 9.x through 9.4.2 and 10.x through 10.0.1 on Windows and Mac OS X, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted Flash content, as demonstrated by a .swf file embedded in an Excel spreadsheet, and as exploited in the wild in March 2011.","2011-03-15",7.8,0.63507,{"cveId":156,"description":157,"publishedDate":158,"cvssScore":159,"cvssVersion":118,"severity":119,"isKev":120,"epssScore":160},"CVE-2007-6514","Apache HTTP Server, when running on Linux with a document root on a Windows share mounted using smbfs, allows remote attackers to obtain unprocessed content such as source files for .php programs via a trailing \"\\\" (backslash), which is not handled by the intended AddType directive.","2007-12-21",4.3,0.38042,{"cveId":162,"description":163,"publishedDate":164,"cvssScore":153,"cvssVersion":118,"severity":111,"isKev":120,"epssScore":165},"CVE-2009-1385","Integer underflow in the e1000_clean_rx_irq function in drivers\u002Fnet\u002Fe1000\u002Fe1000_main.c in the e1000 driver in the Linux kernel before 2.6.30-rc8, the e1000e driver in the Linux kernel, and Intel Wired Ethernet (aka e1000) before 7.5.5 allows remote attackers to cause a denial of service (panic) via a crafted frame size.","2009-06-04",0.33727,[167,178,184,193,201,210,219,228,236,244,252,261,269,277,286,294,302,310,319,327,336,343,350,356,364,374,382,391,398,406,415,422,430,438,445,452,458,467,476,484,490,497,504,507,514,522,530,537,544,551,557,565,573,580,588,596,603,609,616,623,628,634,641,648,654,660,666,672,679,685,687,694,700,706,713,719,725,732,740,747],{"cveId":168,"description":169,"publishedDate":170,"cvssScore":171,"cvssVersion":172,"severity":127,"isKev":4,"epssScore":173,"cisaVulnName":174,"cisaDateAdded":175,"cisaShortDescription":176,"cisaRequiredAction":177},"CVE-2026-102490","Zammad packages built with packager.io (DEB and RPM) could have allowed a local attacker who already had file system write privileges as the unprivileged zammad service account to escalate to full root privileges on the host. Service processes began running as root and executed files that were owned and writable by the zammad account before dropping their identity to that account. An attacker holding that foothold could have escalated within seconds, because the affected services were restarted automatically whenever they stopped; no administrator interaction was required. Only installations from the DEB and RPM packages were affected — installations from source or the official container images were not. All released packaged versions were affected.","2026-09-30",9.4,"v4.0",0.0055,"Zammad GmbH Zammad Improper Privilege Management Vulnerability","2026-10-02","Zammad GmbH Zammad contains an improper privilege management vulnerability that can allow the local zammad user to escalate privileges to root. This vulnerability can be chained with CVE-2026-102489.","Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.",{"cveId":179,"description":180,"publishedDate":170,"cvssScore":171,"cvssVersion":172,"severity":127,"isKev":4,"epssScore":181,"cisaVulnName":182,"cisaDateAdded":175,"cisaShortDescription":183,"cisaRequiredAction":177},"CVE-2026-102489","Zammad versions 6.3.0 to 6.5.4 are vulnerable a session hijack vulnerability that leads to remote code execution as the zammad user. The bug is also present in version 7.0.0 to version 7.1.2, but not exploitable due to changes in the underlying framework.",0.01255,"Zammad GmbH Zammad Session Fixation Vulnerability","Zammad GmbH Zammad contains a session fixation vulnerability that can lead to remote code execution as the zammad user. This vulnerability can be chained with CVE-2026-102490.",{"cveId":185,"description":186,"publishedDate":187,"cvssScore":188,"cvssVersion":110,"severity":127,"isKev":4,"epssScore":189,"cisaVulnName":190,"cisaDateAdded":191,"cisaShortDescription":192,"cisaRequiredAction":177},"CVE-2025-39682","In the Linux kernel, the following vulnerability has been resolved:\n\ntls: fix handling of zero-length records on the rx_list\n\nEach recvmsg() call must process either\n - only contiguous DATA records (any number of them)\n - one non-DATA record\n\nIf the next record has different type than what has already been\nprocessed we break out of the main processing loop. If the record\nhas already been decrypted (which may be the case for TLS 1.3 where\nwe don't know type until decryption) we queue the pending record\nto the rx_list. Next recvmsg() will pick it up from there.\n\nQueuing the skb to rx_list after zero-copy decrypt is not possible,\nsince in that case we decrypted directly to the user space buffer,\nand we don't have an skb to queue (darg.skb points to the ciphertext\nskb for access to metadata like length).\n\nOnly data records are allowed zero-copy, and we break the processing\nloop after each non-data record. So we should never zero-copy and\nthen find out that the record type has changed. The corner case\nwe missed is when the initial record comes from rx_list, and it's\nzero length.","2025-09-05",9.8,0.0288,"Linux Kernel Improper Check for Unusual or Exceptional Conditions Vulnerability","2026-09-18","Linux Kernel contains an improper check for unusual or exceptional conditions vulnerability in the TLS receive path which allows a zero-length record retrieved from the rx_list to bypass the intended recvmsg() record-type handling, potentially causing subsequent TLS records to be processed using incorrect zero-copy and queuing assumptions. The impacted product(s) could be end-of-life (EoL) and\u002For end-of-service (EoS). Users are advised to discontinue use and\u002For transition to a supported version.",{"cveId":194,"description":195,"publishedDate":196,"cvssScore":153,"cvssVersion":110,"severity":111,"isKev":4,"epssScore":197,"cisaVulnName":198,"cisaDateAdded":199,"cisaShortDescription":200,"cisaRequiredAction":177},"CVE-2022-0995","An out-of-bounds (OOB) memory write flaw was found in the Linux kernel’s watch_queue event notification subsystem. This flaw can overwrite parts of the kernel state, potentially allowing a local user to gain privileged access or cause a denial of service on the system.","2022-03-25",0.08859,"Linux Kernel Out-of-Bounds Write Vulnerability","2026-08-26","Linux Kernel contains an out-of-bounds memory write vulnerability which could allow a local user to gain privileged access or cause a denial of service on the system.",{"cveId":202,"description":203,"publishedDate":204,"cvssScore":153,"cvssVersion":110,"severity":111,"isKev":4,"epssScore":205,"cisaVulnName":206,"cisaDateAdded":207,"cisaShortDescription":208,"cisaRequiredAction":209},"CVE-2022-0492","A vulnerability was found in the Linux kernel’s cgroup_release_agent_write in the kernel\u002Fcgroup\u002Fcgroup-v1.c function. This flaw, under certain circumstances, allows the use of the cgroups v1 release_agent feature to escalate privileges and bypass the namespace isolation unexpectedly.","2022-03-03",0.05528,"Linux Kernel Improper Authentication Vulnerability","2026-06-02","Linux Kernel contains an improper authentication vulnerability which could allow for privilege escalation via the cgroups v1 release_agent feature.","Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.",{"cveId":211,"description":212,"publishedDate":213,"cvssScore":153,"cvssVersion":110,"severity":111,"isKev":4,"epssScore":214,"cisaVulnName":215,"cisaDateAdded":216,"cisaShortDescription":217,"cisaRequiredAction":218},"CVE-2026-31431","In the Linux kernel, the following vulnerability has been resolved:\n\ncrypto: algif_aead - Revert to operating out-of-place\n\nThis mostly reverts commit 72548b093ee3 except for the copying of\nthe associated data.\n\nThere is no benefit in operating in-place in algif_aead since the\nsource and destination come from different mappings.  Get rid of\nall the complexity added for in-place operation and just copy the\nAD directly.","2026-04-22",0.03437,"Linux Kernel Incorrect Resource Transfer Between Spheres Vulnerability","2026-05-01","Linux Kernel contains an incorrect resource transfer between spheres vulnerability that could allow for privilege escalation.","\"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.",{"cveId":220,"description":221,"publishedDate":222,"cvssScore":153,"cvssVersion":223,"severity":111,"isKev":4,"epssScore":224,"cisaVulnName":225,"cisaDateAdded":226,"cisaShortDescription":227,"cisaRequiredAction":209},"CVE-2018-14634","An integer overflow flaw was found in the Linux kernel's create_elf_tables() function. An unprivileged local user with access to SUID (or otherwise privileged) binary could use this flaw to escalate their privileges on the system. Kernel versions 2.6.x, 3.10.x and 4.14.x are believed to be vulnerable.","2018-09-25","v3.0",0.14689,"Linux Kernel Integer Overflow Vulnerability","2026-01-26","Linux Kernel contains an integer overflow vulnerability in the create_elf_tables() function which could allow an unprivileged local user with access to SUID (or otherwise privileged) binary to escalate their privileges on the system.",{"cveId":229,"description":230,"publishedDate":231,"cvssScore":153,"cvssVersion":110,"severity":111,"isKev":4,"epssScore":232,"cisaVulnName":233,"cisaDateAdded":234,"cisaShortDescription":235,"cisaRequiredAction":209},"CVE-2025-41244","VMware Aria Operations and VMware Tools contain a local privilege escalation vulnerability. A malicious local actor with non-administrative privileges having access to a VM with VMware Tools installed and managed by Aria Operations with SDMP enabled may exploit this vulnerability to escalate privileges to root on the same VM.","2025-09-29",0.08438,"Broadcom VMware Aria Operations and VMware Tools Privilege Defined with Unsafe Actions Vulnerability","2025-10-30","Broadcom VMware Aria Operations and VMware Tools contain a privilege defined with unsafe actions vulnerability. A malicious local actor with non-administrative privileges having access to a VM with VMware Tools installed and managed by Aria Operations with SDMP enabled may exploit this vulnerability to escalate privileges to root on the same VM.",{"cveId":237,"description":238,"publishedDate":239,"cvssScore":153,"cvssVersion":110,"severity":111,"isKev":4,"epssScore":240,"cisaVulnName":241,"cisaDateAdded":242,"cisaShortDescription":243,"cisaRequiredAction":209},"CVE-2021-22555","A heap out-of-bounds write affecting Linux since v2.6.19-rc1 was discovered in net\u002Fnetfilter\u002Fx_tables.c. This allows an attacker to gain privileges or cause a DoS (via heap memory corruption) through user name space","2021-07-07",0.78684,"Linux Kernel Heap Out-of-Bounds Write Vulnerability","2025-10-06","Linux Kernel contains a heap out-of-bounds write vulnerability that could allow an attacker to gain privileges or cause a DoS (via heap memory corruption) through user name space.",{"cveId":245,"description":246,"publishedDate":247,"cvssScore":109,"cvssVersion":110,"severity":111,"isKev":4,"epssScore":248,"cisaVulnName":249,"cisaDateAdded":250,"cisaShortDescription":251,"cisaRequiredAction":209},"CVE-2025-10585","Type confusion in V8 in Google Chrome prior to 140.0.7339.185 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)","2025-09-24",0.05391,"Google Chromium V8 Type Confusion Vulnerability","2025-09-23","Google Chromium contains a type confusion vulnerability in the V8 JavaScript and WebAssembly engine.",{"cveId":253,"description":254,"publishedDate":255,"cvssScore":256,"cvssVersion":110,"severity":111,"isKev":4,"epssScore":257,"cisaVulnName":258,"cisaDateAdded":259,"cisaShortDescription":260,"cisaRequiredAction":209},"CVE-2025-38352","In the Linux kernel, the following vulnerability has been resolved:\n\nposix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del()\n\nIf an exiting non-autoreaping task has already passed exit_notify() and\ncalls handle_posix_cpu_timers() from IRQ, it can be reaped by its parent\nor debugger right after unlock_task_sighand().\n\nIf a concurrent posix_cpu_timer_del() runs at that moment, it won't be\nable to detect timer->it.cpu.firing != 0: cpu_timer_task_rcu() and\u002For\nlock_task_sighand() will fail.\n\nAdd the tsk->exit_state check into run_posix_cpu_timers() to fix this.\n\nThis fix is not needed if CONFIG_POSIX_CPU_TIMERS_TASK_WORK=y, because\nexit_task_work() is called before exit_notify(). But the check still\nmakes sense, task_work_add(&tsk->posix_cputimers_work.work) will fail\nanyway in this case.","2025-07-22",7.4,0.01341,"Linux Kernel Time-of-Check Time-of-Use (TOCTOU) Race Condition Vulnerability","2025-09-04","Linux kernel contains a time-of-check time-of-use (TOCTOU) race condition vulnerability that has a high impact on confidentiality, integrity, and availability.",{"cveId":262,"description":263,"publishedDate":264,"cvssScore":265,"cvssVersion":110,"severity":111,"isKev":4,"epssScore":266,"cisaVulnName":249,"cisaDateAdded":267,"cisaShortDescription":268,"cisaRequiredAction":209},"CVE-2025-6554","Type confusion in V8 in Google Chrome prior to 138.0.7204.96 allowed a remote attacker to perform arbitrary read\u002Fwrite via a crafted HTML page. (Chromium security severity: High)","2025-06-30",8.1,0.14142,"2025-07-02","Google Chromium V8 contains a type confusion vulnerability that could allow a remote attacker to perform arbitrary read\u002Fwrite via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.",{"cveId":270,"description":271,"publishedDate":272,"cvssScore":153,"cvssVersion":110,"severity":111,"isKev":4,"epssScore":273,"cisaVulnName":274,"cisaDateAdded":275,"cisaShortDescription":276,"cisaRequiredAction":209},"CVE-2023-0386","A flaw was found in the Linux kernel, where unauthorized access to the execution of the setuid file with capabilities was found in the Linux kernel’s OverlayFS subsystem in how a user copies a capable file from a nosuid mount into another mount. This uid mapping bug allows a local user to escalate their privileges on the system.","2023-03-22",0.0788,"Linux Kernel Improper Ownership Management Vulnerability","2025-06-17","Linux Kernel contains an improper ownership management vulnerability, where unauthorized access to the execution of the setuid file with capabilities was found in the Linux kernel’s OverlayFS subsystem in how a user copies a capable file from a nosuid mount into another mount. This uid mapping bug allows a local user to escalate their privileges on the system.",{"cveId":278,"description":279,"publishedDate":280,"cvssScore":281,"cvssVersion":110,"severity":127,"isKev":4,"epssScore":282,"cisaVulnName":283,"cisaDateAdded":284,"cisaShortDescription":285,"cisaRequiredAction":209},"CVE-2025-34028","The Commvault Command Center Innovation Release allows an unauthenticated actor to upload ZIP files that represent install packages that, when expanded by the target server, are vulnerable to path traversal vulnerability that can result in Remote Code Execution via malicious JSP.\n\n\n\n\n\nThis issue affects Command Center Innovation Release: 11.38.0 to 11.38.20. The vulnerability is fixed in 11.38.20 with SP38-CU20-433 and SP38-CU20-436 and also fixed in 11.38.25 with SP38-CU25-434 and SP38-CU25-438.","2025-04-22",10,0.97604,"Commvault Command Center Path Traversal Vulnerability","2025-05-02","Commvault Command Center contains a path traversal vulnerability that allows a remote, unauthenticated attacker to execute arbitrary code.",{"cveId":287,"description":288,"publishedDate":289,"cvssScore":109,"cvssVersion":110,"severity":111,"isKev":4,"epssScore":290,"cisaVulnName":291,"cisaDateAdded":292,"cisaShortDescription":293,"cisaRequiredAction":209},"CVE-2025-3928","Commvault Web Server has an unspecified vulnerability that can be exploited by a remote, authenticated attacker. According to the Commvault advisory: \"Webservers can be compromised through bad actors creating and executing webshells.\" Fixed in version 11.36.46, 11.32.89, 11.28.141, and 11.20.217 for Windows and Linux platforms. This vulnerability was added to the CISA Known Exploited Vulnerabilities (KEV) Catalog on 2025-04-28.","2025-04-25",0.02484,"Commvault Web Server Unspecified Vulnerability","2025-04-28","Commvault Web Server contains an unspecified vulnerability that allows a remote, authenticated attacker to create and execute webshells.",{"cveId":295,"description":296,"publishedDate":297,"cvssScore":153,"cvssVersion":110,"severity":111,"isKev":4,"epssScore":298,"cisaVulnName":299,"cisaDateAdded":300,"cisaShortDescription":301,"cisaRequiredAction":209},"CVE-2024-53197","In the Linux kernel, the following vulnerability has been resolved:\n\nALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices\n\nA bogus device can provide a bNumConfigurations value that exceeds the\ninitial value used in usb_get_configuration for allocating dev->config.\n\nThis can lead to out-of-bounds accesses later, e.g. in\nusb_destroy_configuration.","2024-12-27",0.04117,"Linux Kernel Out-of-Bounds Access Vulnerability","2025-04-09","Linux Kernel contains an out-of-bounds access vulnerability in the USB-audio driver that allows an attacker with physical access to the system to use a malicious USB device to potentially manipulate system memory, escalate privileges, or execute arbitrary code.",{"cveId":303,"description":304,"publishedDate":305,"cvssScore":306,"cvssVersion":110,"severity":111,"isKev":4,"epssScore":307,"cisaVulnName":308,"cisaDateAdded":300,"cisaShortDescription":309,"cisaRequiredAction":209},"CVE-2024-53150","In the Linux kernel, the following vulnerability has been resolved:\n\nALSA: usb-audio: Fix out of bounds reads when finding clock sources\n\nThe current USB-audio driver code doesn't check bLength of each\ndescriptor at traversing for clock descriptors.  That is, when a\ndevice provides a bogus descriptor with a shorter bLength, the driver\nmight hit out-of-bounds reads.\n\nFor addressing it, this patch adds sanity checks to the validator\nfunctions for the clock descriptor traversal.  When the descriptor\nlength is shorter than expected, it's skipped in the loop.\n\nFor the clock source and clock multiplier descriptors, we can just\ncheck bLength against the sizeof() of each descriptor type.\nOTOH, the clock selector descriptor of UAC2 and UAC3 has an array\nof bNrInPins elements and two more fields at its tail, hence those\nhave to be checked in addition to the sizeof() check.","2024-12-24",7.1,0.01354,"Linux Kernel Out-of-Bounds Read Vulnerability","Linux Kernel contains an out-of-bounds read vulnerability in the USB-audio driver that allows a local, privileged attacker to obtain potentially sensitive information.",{"cveId":311,"description":312,"publishedDate":313,"cvssScore":314,"cvssVersion":110,"severity":119,"isKev":4,"epssScore":315,"cisaVulnName":316,"cisaDateAdded":317,"cisaShortDescription":318,"cisaRequiredAction":209},"CVE-2024-50302","In the Linux kernel, the following vulnerability has been resolved:\n\nHID: core: zero-initialize the report buffer\n\nSince the report buffer is used by all kinds of drivers in various ways, let's\nzero-initialize it during allocation to make sure that it can't be ever used\nto leak kernel memory via specially-crafted report.","2024-11-19",5.5,0.00811,"Linux Kernel Use of Uninitialized Resource Vulnerability","2025-03-04","The Linux kernel contains a use of uninitialized resource vulnerability that allows an attacker to leak kernel memory via a specially crafted HID report.",{"cveId":320,"description":321,"publishedDate":322,"cvssScore":153,"cvssVersion":110,"severity":111,"isKev":4,"epssScore":323,"cisaVulnName":198,"cisaDateAdded":324,"cisaShortDescription":325,"cisaRequiredAction":326},"CVE-2024-53104","In the Linux kernel, the following vulnerability has been resolved:\n\nmedia: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format\n\nThis can lead to out of bounds writes since frames of this type were not\ntaken into account when calculating the size of the frames buffer in\nuvc_parse_streaming.","2024-12-02",0.03395,"2025-02-05","Linux kernel contains an out-of-bounds write vulnerability in the uvc_parse_streaming component of the USB Video Class (UVC) driver that could allow for physical escalation of privilege.","Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.",{"cveId":328,"description":329,"publishedDate":330,"cvssScore":188,"cvssVersion":110,"severity":127,"isKev":4,"epssScore":331,"cisaVulnName":332,"cisaDateAdded":333,"cisaShortDescription":334,"cisaRequiredAction":335},"CVE-2014-0497","Integer underflow in Adobe Flash Player before 11.7.700.261 and 11.8.x through 12.0.x before 12.0.0.44 on Windows and Mac OS X, and before 11.2.202.336 on Linux, allows remote attackers to execute arbitrary code via unspecified vectors.","2014-02-05",0.99879,"Adobe Flash Player Integer Underflow Vulnerablity","2024-09-17","Adobe Flash Player contains an integer underflow vulnerability that allows a remote attacker to execute arbitrary code.","The impacted product is end-of-life (EoL) and\u002For end-of-service (EoS). Users should discontinue utilization of the product.",{"cveId":337,"description":338,"publishedDate":339,"cvssScore":109,"cvssVersion":110,"severity":111,"isKev":4,"epssScore":340,"cisaVulnName":341,"cisaDateAdded":333,"cisaShortDescription":342,"cisaRequiredAction":335},"CVE-2013-0648","Unspecified vulnerability in the ExternalInterface ActionScript functionality in Adobe Flash Player before 10.3.183.67 and 11.x before 11.6.602.171 on Windows and Mac OS X, and before 10.3.183.67 and 11.x before 11.2.202.273 on Linux, allows remote attackers to execute arbitrary code via crafted SWF content, as exploited in the wild in February 2013.","2013-02-27",0.11094,"Adobe Flash Player Code Execution Vulnerability","Adobe Flash Player contains an unspecified vulnerability in the ExternalInterface ActionScript functionality that allows a remote attacker to execute arbitrary code via crafted SWF content.",{"cveId":344,"description":345,"publishedDate":346,"cvssScore":109,"cvssVersion":110,"severity":111,"isKev":4,"epssScore":347,"cisaVulnName":348,"cisaDateAdded":333,"cisaShortDescription":349,"cisaRequiredAction":335},"CVE-2014-0502","Double free vulnerability in Adobe Flash Player before 11.7.700.269 and 11.8.x through 12.0.x before 12.0.0.70 on Windows and Mac OS X and before 11.2.202.341 on Linux, Adobe AIR before 4.0.0.1628 on Android, Adobe AIR SDK before 4.0.0.1628, and Adobe AIR SDK & Compiler before 4.0.0.1628 allows remote attackers to execute arbitrary code via unspecified vectors, as exploited in the wild in February 2014.","2014-02-21",0.24817,"Adobe Flash Player Double Free Vulnerablity","Adobe Flash Player contains a double free vulnerability that allows a remote attacker to execute arbitrary code.",{"cveId":351,"description":352,"publishedDate":339,"cvssScore":109,"cvssVersion":110,"severity":111,"isKev":4,"epssScore":353,"cisaVulnName":354,"cisaDateAdded":333,"cisaShortDescription":355,"cisaRequiredAction":335},"CVE-2013-0643","The Firefox sandbox in Adobe Flash Player before 10.3.183.67 and 11.x before 11.6.602.171 on Windows and Mac OS X, and before 10.3.183.67 and 11.x before 11.2.202.273 on Linux, does not properly restrict privileges, which makes it easier for remote attackers to execute arbitrary code via crafted SWF content, as exploited in the wild in February 2013.",0.10533,"Adobe Flash Player Incorrect Default Permissions Vulnerability","Adobe Flash Player contains an incorrect default permissions vulnerability in the Firefox sandbox that allows a remote attacker to execute arbitrary code via crafted SWF content. ",{"cveId":357,"description":358,"publishedDate":359,"cvssScore":153,"cvssVersion":110,"severity":111,"isKev":4,"epssScore":360,"cisaVulnName":361,"cisaDateAdded":362,"cisaShortDescription":363,"cisaRequiredAction":326},"CVE-2017-1000253","Linux distributions that have not patched their long-term kernels with https:\u002F\u002Fgit.kernel.org\u002Flinus\u002Fa87938b2e246b81b4fb713edb371a9fa3c5c3c86 (committed on April 14, 2015). This kernel vulnerability was fixed in April 2015 by commit a87938b2e246b81b4fb713edb371a9fa3c5c3c86 (backported to Linux 3.10.77 in May 2015), but it was not recognized as a security threat. With CONFIG_ARCH_BINFMT_ELF_RANDOMIZE_PIE enabled, and a normal top-down address allocation strategy, load_elf_binary() will attempt to map a PIE binary into an address range immediately below mm->mmap_base. Unfortunately, load_elf_ binary() does not take account of the need to allocate sufficient space for the entire binary which means that, while the first PT_LOAD segment is mapped below mm->mmap_base, the subsequent PT_LOAD segment(s) end up being mapped above mm->mmap_base into the are that is supposed to be the \"gap\" between the stack and the binary.","2017-10-05",0.10695,"Linux Kernel PIE Stack Buffer Corruption Vulnerability ","2024-09-09","Linux kernel contains a position-independent executable (PIE) stack buffer corruption vulnerability in load_elf_ binary() that allows a local attacker to escalate privileges. ",{"cveId":365,"description":366,"publishedDate":367,"cvssScore":368,"cvssVersion":110,"severity":111,"isKev":4,"epssScore":369,"cisaVulnName":370,"cisaDateAdded":371,"cisaShortDescription":372,"cisaRequiredAction":373},"CVE-2022-0185","A heap-based buffer overflow flaw was found in the way the legacy_parse_param function in the Filesystem Context functionality of the Linux kernel verified the supplied parameters length. An unprivileged (in case of unprivileged user namespaces enabled, otherwise needs namespaced CAP_SYS_ADMIN privilege) local user able to open a filesystem that does not support the Filesystem Context API (and thus fallbacks to legacy handling) could use this flaw to escalate their privileges on the system.","2022-02-11",8.4,0.25151,"Linux Kernel Heap-Based Buffer Overflow Vulnerability","2024-08-21","Linux kernel contains a heap-based buffer overflow vulnerability in the legacy_parse_param function in the Filesystem Context functionality. This allows an attacker to open a filesystem that does not support the Filesystem Context API and ultimately escalate privileges.","Apply updates per vendor instructions or discontinue use of the product if updates are unavailable.",{"cveId":375,"description":376,"publishedDate":377,"cvssScore":153,"cvssVersion":110,"severity":111,"isKev":4,"epssScore":378,"cisaVulnName":379,"cisaDateAdded":380,"cisaShortDescription":381,"cisaRequiredAction":326},"CVE-2024-36971","In the Linux kernel, the following vulnerability has been resolved:\n\nnet: fix __dst_negative_advice() race\n\n__dst_negative_advice() does not enforce proper RCU rules when\nsk->dst_cache must be cleared, leading to possible UAF.\n\nRCU rules are that we must first clear sk->sk_dst_cache,\nthen call dst_release(old_dst).\n\nNote that sk_dst_reset(sk) is implementing this protocol correctly,\nwhile __dst_negative_advice() uses the wrong order.\n\nGiven that ip6_negative_advice() has special logic\nagainst RTF_CACHE, this means each of the three ->negative_advice()\nexisting methods must perform the sk_dst_reset() themselves.\n\nNote the check against NULL dst is centralized in\n__dst_negative_advice(), there is no need to duplicate\nit in various callbacks.\n\nMany thanks to Clement Lecigne for tracking this issue.\n\nThis old bug became visible after the blamed commit, using UDP sockets.","2024-06-10",0.02701,"Android Kernel Remote Code Execution Vulnerability","2024-08-07","Android contains an unspecified vulnerability in the kernel that allows for remote code execution. This vulnerability resides in Linux Kernel and could impact other products, including but not limited to Android OS.",{"cveId":383,"description":384,"publishedDate":385,"cvssScore":386,"cvssVersion":110,"severity":119,"isKev":4,"epssScore":387,"cisaVulnName":388,"cisaDateAdded":389,"cisaShortDescription":390,"cisaRequiredAction":373},"CVE-2022-2586","It was discovered that a nft object or expression could reference a nft set on a different nft table, leading to a use-after-free once that table was deleted.","2024-01-08",5.3,0.10202,"Linux Kernel Use-After-Free Vulnerability","2024-06-26","Linux Kernel contains a use-after-free vulnerability in the nft_object, allowing local attackers to escalate privileges. ",{"cveId":392,"description":393,"publishedDate":394,"cvssScore":153,"cvssVersion":110,"severity":111,"isKev":4,"epssScore":395,"cisaVulnName":388,"cisaDateAdded":396,"cisaShortDescription":397,"cisaRequiredAction":326},"CVE-2024-1086","A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation.\n\n\n\nThe nft_verdict_init() function allows positive values as drop error within the hook verdict, and hence the nf_hook_slow() function can cause a double free vulnerability when NF_DROP is issued with a drop error which resembles NF_ACCEPT.\n\n\n\nWe recommend upgrading past commit f342de4e2f33e0e39165d8639387aa6c19dff660.","2024-01-31",0.28058,"2024-05-30","Linux kernel contains a use-after-free vulnerability in the netfilter: nf_tables component that allows an attacker to achieve local privilege escalation.",{"cveId":399,"description":400,"publishedDate":401,"cvssScore":109,"cvssVersion":110,"severity":111,"isKev":4,"epssScore":402,"cisaVulnName":249,"cisaDateAdded":403,"cisaShortDescription":404,"cisaRequiredAction":405},"CVE-2023-3079","Type confusion in V8 in Google Chrome prior to 114.0.5735.110 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)","2023-06-05",0.37858,"2023-06-07","Google Chromium V8 Engine contains a type confusion vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.","Apply updates per vendor instructions.",{"cveId":407,"description":408,"publishedDate":409,"cvssScore":153,"cvssVersion":110,"severity":111,"isKev":4,"epssScore":410,"cisaVulnName":411,"cisaDateAdded":412,"cisaShortDescription":413,"cisaRequiredAction":414},"CVE-2010-3904","The rds_page_copy_user function in net\u002Frds\u002Fpage.c in the Reliable Datagram Sockets (RDS) protocol implementation in the Linux kernel before 2.6.36 does not properly validate addresses obtained from user space, which allows local users to gain privileges via crafted use of the sendmsg and recvmsg system calls.","2010-12-06",0.15861,"Linux Kernel Improper Input Validation Vulnerability","2023-05-12","Linux Kernel contains an improper input validation vulnerability in the Reliable Datagram Sockets (RDS) protocol implementation that allows local users to gain privileges via crafted use of the sendmsg and recvmsg system calls.","The impacted product is end-of-life and should be disconnected if still in use.",{"cveId":416,"description":417,"publishedDate":418,"cvssScore":314,"cvssVersion":110,"severity":119,"isKev":4,"epssScore":419,"cisaVulnName":420,"cisaDateAdded":412,"cisaShortDescription":421,"cisaRequiredAction":414},"CVE-2014-0196","The n_tty_write function in drivers\u002Ftty\u002Fn_tty.c in the Linux kernel through 3.14.3 does not properly manage tty driver access in the \"LECHO & !OPOST\" case, which allows local users to cause a denial of service (memory corruption and system crash) or gain privileges by triggering a race condition involving read and write operations with long strings.","2014-05-07",0.22475,"Linux Kernel Race Condition Vulnerability","Linux Kernel contains a race condition vulnerability within the n_tty_write function that allows local users to cause a denial-of-service (DoS) or gain privileges via read and write operations with long strings.",{"cveId":423,"description":424,"publishedDate":425,"cvssScore":426,"cvssVersion":110,"severity":111,"isKev":4,"epssScore":427,"cisaVulnName":388,"cisaDateAdded":428,"cisaShortDescription":429,"cisaRequiredAction":405},"CVE-2023-0266","A use after free vulnerability exists in the ALSA PCM package in the Linux Kernel. SNDRV_CTL_IOCTL_ELEM_{READ|WRITE}32 is missing locks that can be used in a use-after-free that can result in a priviledge escalation to gain ring0 access from the system user. We recommend upgrading past commit 56b88b50565cd8b946a2d00b0c83927b7ebb055e","2023-01-30",7.9,0.03672,"2023-03-30","Linux kernel contains a use-after-free vulnerability that allows for privilege escalation to gain ring0 access from the system user.",{"cveId":431,"description":432,"publishedDate":433,"cvssScore":188,"cvssVersion":110,"severity":127,"isKev":4,"epssScore":434,"cisaVulnName":435,"cisaDateAdded":436,"cisaShortDescription":437,"cisaRequiredAction":405},"CVE-2022-47986","IBM Aspera Faspex 4.4.2 Patch Level 1 and earlier could allow a remote attacker to execute arbitrary code on the system, caused by a YAML deserialization flaw. By sending a specially crafted obsolete API call, an attacker could exploit this vulnerability to execute arbitrary code on the system. The obsolete API call was removed in Faspex 4.4.2 PL2. IBM X-Force ID: 243512.","2023-02-17",0.99965,"IBM Aspera Faspex Code Execution Vulnerability","2023-02-21","IBM Aspera Faspex could allow a remote attacker to execute code on the system, caused by a YAML deserialization flaw.",{"cveId":439,"description":440,"publishedDate":441,"cvssScore":109,"cvssVersion":110,"severity":111,"isKev":4,"epssScore":442,"cisaVulnName":411,"cisaDateAdded":443,"cisaShortDescription":444,"cisaRequiredAction":405},"CVE-2013-6282","The (1) get_user and (2) put_user API functions in the Linux kernel before 3.5.5 on the v6k and v7 ARM platforms do not validate certain addresses, which allows attackers to read or modify the contents of arbitrary kernel memory locations via a crafted application, as exploited in the wild against Android devices in October and November 2013.","2013-11-20",0.39711,"2022-09-15","The get_user and put_user API functions of the Linux kernel fail to validate the target address when being used on ARM v6k\u002Fv7 platforms. This allows an application to read and write kernel memory which could lead to privilege escalation.",{"cveId":446,"description":447,"publishedDate":448,"cvssScore":368,"cvssVersion":110,"severity":111,"isKev":4,"epssScore":449,"cisaVulnName":450,"cisaDateAdded":443,"cisaShortDescription":451,"cisaRequiredAction":405},"CVE-2013-2094","The perf_swevent_init function in kernel\u002Fevents\u002Fcore.c in the Linux kernel before 3.8.9 uses an incorrect integer data type, which allows local users to gain privileges via a crafted perf_event_open system call.","2013-05-14",0.47709,"Linux Kernel Privilege Escalation Vulnerability","Linux kernel fails to check all 64 bits of attr.config passed by user space, resulting to out-of-bounds access of the perf_swevent_enabled array in sw_perf_event_destroy(). Explotation allows for privilege escalation.",{"cveId":453,"description":454,"publishedDate":455,"cvssScore":153,"cvssVersion":110,"severity":111,"isKev":4,"epssScore":456,"cisaVulnName":225,"cisaDateAdded":443,"cisaShortDescription":457,"cisaRequiredAction":405},"CVE-2013-2596","Integer overflow in the fb_mmap function in drivers\u002Fvideo\u002Ffbmem.c in the Linux kernel before 3.8.9, as used in a certain Motorola build of Android 4.1.2 and other products, allows local users to create a read-write memory mapping for the entirety of kernel memory, and consequently gain privileges, via crafted \u002Fdev\u002Fgraphics\u002Ffb0 mmap2 system calls, as demonstrated by the Motochopper pwn program.","2013-04-13",0.03212,"Linux kernel fb_mmap function in drivers\u002Fvideo\u002Ffbmem.c contains an integer overflow vulnerability that allows for privilege escalation.",{"cveId":459,"description":460,"publishedDate":461,"cvssScore":462,"cvssVersion":110,"severity":119,"isKev":4,"epssScore":463,"cisaVulnName":464,"cisaDateAdded":465,"cisaShortDescription":466,"cisaRequiredAction":405},"CVE-2022-2856","Insufficient validation of untrusted input in Intents in Google Chrome on Android prior to 104.0.5112.101 allowed a remote attacker to arbitrarily browse to a malicious website via a crafted HTML page.","2022-09-26",6.5,0.04561,"Google Chromium Intents Insufficient Input Validation Vulnerability","2022-08-18","Google Chromium Intents contains an insufficient validation of untrusted input vulnerability that allows a remote attacker to browse to a malicious website via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.",{"cveId":468,"description":469,"publishedDate":470,"cvssScore":471,"cvssVersion":110,"severity":111,"isKev":4,"epssScore":472,"cisaVulnName":473,"cisaDateAdded":474,"cisaShortDescription":475,"cisaRequiredAction":405},"CVE-2022-30333","RARLAB UnRAR before 6.12 on Linux and UNIX allows directory traversal to write to files during an extract (aka unpack) operation, as demonstrated by creating a ~\u002F.ssh\u002Fauthorized_keys file. NOTE: WinRAR and Android RAR are unaffected.","2022-05-09",7.5,0.99233,"RARLAB UnRAR Directory Traversal Vulnerability","2022-08-09","RARLAB UnRAR on Linux and UNIX contains a directory traversal vulnerability, allowing an attacker to write to files during an extract (unpack) operation.",{"cveId":477,"description":478,"publishedDate":479,"cvssScore":109,"cvssVersion":110,"severity":111,"isKev":4,"epssScore":480,"cisaVulnName":481,"cisaDateAdded":482,"cisaShortDescription":483,"cisaRequiredAction":405},"CVE-2016-5198","V8 in Google Chrome prior to 54.0.2840.90 for Linux, and 54.0.2840.85 for Android, and 54.0.2840.87 for Windows and Mac included incorrect optimisation assumptions, which allowed a remote attacker to perform arbitrary read\u002Fwrite operations, leading to code execution, via a crafted HTML page.","2017-01-19",0.34164,"Google Chromium V8 Out-of-Bounds Memory Vulnerability","2022-06-08","Google Chromium V8 Engine contains an out-of-bounds memory access vulnerability that allows a remote attacker to perform read\u002Fwrite operations, leading to code execution, via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.",{"cveId":485,"description":486,"publishedDate":487,"cvssScore":109,"cvssVersion":110,"severity":111,"isKev":4,"epssScore":488,"cisaVulnName":249,"cisaDateAdded":482,"cisaShortDescription":489,"cisaRequiredAction":405},"CVE-2017-5070","Type confusion in V8 in Google Chrome prior to 59.0.3071.86 for Linux, Windows, and Mac, and 59.0.3071.92 for Android, allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.","2017-10-27",0.32071,"Google Chromium V8 Engine contains a type confusion vulnerability that allows a remote attacker to execute code inside a sandbox via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.",{"cveId":491,"description":492,"publishedDate":493,"cvssScore":109,"cvssVersion":110,"severity":111,"isKev":4,"epssScore":494,"cisaVulnName":495,"cisaDateAdded":482,"cisaShortDescription":496,"cisaRequiredAction":405},"CVE-2017-5030","Incorrect handling of complex species in V8 in Google Chrome prior to 57.0.2987.98 for Linux, Windows, and Mac and 57.0.2987.108 for Android allowed a remote attacker to execute arbitrary code via a crafted HTML page.","2017-04-24",0.40635,"Google Chromium V8 Memory Corruption Vulnerability","Google Chromium V8 Engine contains a memory corruption vulnerability that allows a remote attacker to execute code via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.",{"cveId":498,"description":499,"publishedDate":500,"cvssScore":265,"cvssVersion":110,"severity":111,"isKev":4,"epssScore":501,"cisaVulnName":502,"cisaDateAdded":482,"cisaShortDescription":503,"cisaRequiredAction":414},"CVE-2012-0754","Adobe Flash Player before 10.3.183.15 and 11.x before 11.1.102.62 on Windows, Mac OS X, Linux, and Solaris; before 11.1.111.6 on Android 2.x and 3.x; and before 11.1.115.6 on Android 4.x allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.","2012-02-16",0.91085,"Adobe Flash Player Memory Corruption Vulnerability","Adobe Flash Player contains a memory corruption vulnerability that allows remote attackers to execute code or cause denial-of-service (DoS).",{"cveId":150,"description":151,"publishedDate":152,"cvssScore":153,"cvssVersion":110,"severity":111,"isKev":4,"epssScore":154,"cisaVulnName":505,"cisaDateAdded":482,"cisaShortDescription":506,"cisaRequiredAction":414},"Adobe Flash Player Unspecified Vulnerability","Adobe Flash Player contains an unspecified vulnerability that allows remote attackers to execute code or cause denial-of-service (DoS).",{"cveId":508,"description":509,"publishedDate":500,"cvssScore":510,"cvssVersion":110,"severity":119,"isKev":4,"epssScore":511,"cisaVulnName":512,"cisaDateAdded":482,"cisaShortDescription":513,"cisaRequiredAction":414},"CVE-2012-0767","Cross-site scripting (XSS) vulnerability in Adobe Flash Player before 10.3.183.15 and 11.x before 11.1.102.62 on Windows, Mac OS X, Linux, and Solaris; before 11.1.111.6 on Android 2.x and 3.x; and before 11.1.115.6 on Android 4.x allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka \"Universal XSS (UXSS),\" as exploited in the wild in February 2012.",6.1,0.06187,"Adobe Flash Player Cross-Site Scripting (XSS) Vulnerability","Adobe Flash Player contains a XSS vulnerability that allows remote attackers to inject web script or HTML.",{"cveId":515,"description":516,"publishedDate":517,"cvssScore":188,"cvssVersion":110,"severity":127,"isKev":4,"epssScore":518,"cisaVulnName":519,"cisaDateAdded":520,"cisaShortDescription":521,"cisaRequiredAction":414},"CVE-2015-0310","Adobe Flash Player before 13.0.0.262 and 14.x through 16.x before 16.0.0.287 on Windows and OS X and before 11.2.202.438 on Linux does not properly restrict discovery of memory addresses, which allows attackers to bypass the ASLR protection mechanism on Windows, and have an unspecified impact on other platforms, via unknown vectors, as exploited in the wild in January 2015.","2015-01-23",0.15097,"Adobe Flash Player ASLR Bypass Vulnerability","2022-05-25","Adobe Flash Player does not properly restrict discovery of memory addresses, which allows attackers to bypass the address space layout randomization (ASLR) protection mechanism.",{"cveId":523,"description":524,"publishedDate":525,"cvssScore":109,"cvssVersion":110,"severity":111,"isKev":4,"epssScore":526,"cisaVulnName":527,"cisaDateAdded":520,"cisaShortDescription":528,"cisaRequiredAction":529},"CVE-2016-0984","Use-after-free vulnerability in Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and before 11.2.202.569 on Linux, Adobe AIR before 20.0.0.260, Adobe AIR SDK before 20.0.0.260, and Adobe AIR SDK & Compiler before 20.0.0.260 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-0973, CVE-2016-0974, CVE-2016-0975, CVE-2016-0982, and CVE-2016-0983.","2016-02-10",0.54544,"Adobe Flash Player and AIR Use-After-Free Vulnerability","Use-after-free vulnerability in Adobe Flash Player and Adobe AIR allows attackers to execute code.","The impacted products are end-of-life and should be disconnected if still in use.",{"cveId":531,"description":532,"publishedDate":533,"cvssScore":109,"cvssVersion":110,"severity":111,"isKev":4,"epssScore":534,"cisaVulnName":535,"cisaDateAdded":520,"cisaShortDescription":536,"cisaRequiredAction":414},"CVE-2015-8651","Integer overflow in Adobe Flash Player before 18.0.0.324 and 19.x and 20.x before 20.0.0.267 on Windows and OS X and before 11.2.202.559 on Linux, Adobe AIR before 20.0.0.233, Adobe AIR SDK before 20.0.0.233, and Adobe AIR SDK & Compiler before 20.0.0.233 allows attackers to execute arbitrary code via unspecified vectors.","2015-12-28",0.67698,"Adobe Flash Player Integer Overflow Vulnerability","Integer overflow in Adobe Flash Player allows attackers to execute code.",{"cveId":538,"description":539,"publishedDate":540,"cvssScore":109,"cvssVersion":110,"severity":111,"isKev":4,"epssScore":541,"cisaVulnName":542,"cisaDateAdded":520,"cisaShortDescription":543,"cisaRequiredAction":414},"CVE-2014-8439","Adobe Flash Player before 13.0.0.258 and 14.x and 15.x before 15.0.0.239 on Windows and OS X and before 11.2.202.424 on Linux, Adobe AIR before 15.0.0.293, Adobe AIR SDK before 15.0.0.302, and Adobe AIR SDK & Compiler before 15.0.0.302 allow attackers to execute arbitrary code or cause a denial of service (invalid pointer dereference) via unspecified vectors.","2014-11-25",0.20369,"Adobe Flash Player Dereferenced Pointer Vulnerability","Adobe Flash Player has a vulnerability in the way it handles a dereferenced memory pointer which could lead to code execution.",{"cveId":545,"description":546,"publishedDate":547,"cvssScore":109,"cvssVersion":110,"severity":111,"isKev":4,"epssScore":548,"cisaVulnName":549,"cisaDateAdded":520,"cisaShortDescription":550,"cisaRequiredAction":529},"CVE-2016-1010","Integer overflow in Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows and OS X and before 11.2.202.577 on Linux, Adobe AIR before 21.0.0.176, Adobe AIR SDK before 21.0.0.176, and Adobe AIR SDK & Compiler before 21.0.0.176 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-0963 and CVE-2016-0993.","2016-03-12",0.19333,"Adobe Flash Player and AIR Integer Overflow Vulnerability","Integer overflow vulnerability in Adobe Flash Player and AIR allows attackers to execute code.",{"cveId":552,"description":553,"publishedDate":554,"cvssScore":153,"cvssVersion":110,"severity":111,"isKev":4,"epssScore":555,"cisaVulnName":450,"cisaDateAdded":520,"cisaShortDescription":556,"cisaRequiredAction":405},"CVE-2014-3153","The futex_requeue function in kernel\u002Ffutex.c in the Linux kernel through 3.14.5 does not ensure that calls have two different futex addresses, which allows local users to gain privileges via a crafted FUTEX_REQUEUE command that facilitates unsafe waiter modification.","2014-06-07",0.37233,"The futex_requeue function in kernel\u002Ffutex.c in Linux kernel does not ensure that calls have two different futex addresses, which allows local users to gain privileges.",{"cveId":558,"description":559,"publishedDate":560,"cvssScore":188,"cvssVersion":110,"severity":127,"isKev":4,"epssScore":561,"cisaVulnName":562,"cisaDateAdded":563,"cisaShortDescription":564,"cisaRequiredAction":414},"CVE-2018-5002","Adobe Flash Player versions 29.0.0.171 and earlier have a Stack-based buffer overflow vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the current user.","2018-07-09",0.25059,"Adobe Flash Player Stack-based Buffer Overflow Vulnerability","2022-05-23","Adobe Flash Player have a stack-based buffer overflow vulnerability that could lead to remote code execution.",{"cveId":566,"description":567,"publishedDate":568,"cvssScore":569,"cvssVersion":110,"severity":119,"isKev":4,"epssScore":570,"cisaVulnName":571,"cisaDateAdded":563,"cisaShortDescription":572,"cisaRequiredAction":405},"CVE-2021-0920","In unix_scm_to_skb of af_unix.c, there is a possible use after free bug due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-196926917References: Upstream kernel","2021-12-15",6.4,0.00867,"Android Kernel Race Condition Vulnerability","Android kernel contains a race condition, which allows for a use-after-free vulnerability. Exploitation can allow for privilege escalation.",{"cveId":574,"description":575,"publishedDate":576,"cvssScore":153,"cvssVersion":110,"severity":111,"isKev":4,"epssScore":577,"cisaVulnName":450,"cisaDateAdded":578,"cisaShortDescription":579,"cisaRequiredAction":405},"CVE-2022-0847","A flaw was found in the way the \"flags\" member of the new pipe buffer structure was lacking proper initialization in copy_page_to_iter_pipe and push_pipe functions in the Linux kernel and could thus contain stale values. An unprivileged local user could use this flaw to write to pages in the page cache backed by read only files and as such escalate their privileges on the system.","2022-03-10",0.92795,"2022-04-25","Linux kernel contains an improper initialization vulnerability where an unprivileged local user could escalate their privileges on the system. This vulnerability has the moniker of \"Dirty Pipe.\"",{"cveId":581,"description":582,"publishedDate":583,"cvssScore":153,"cvssVersion":110,"severity":111,"isKev":4,"epssScore":584,"cisaVulnName":585,"cisaDateAdded":586,"cisaShortDescription":587,"cisaRequiredAction":405},"CVE-2022-22960","VMware Workspace ONE Access, Identity Manager and vRealize Automation contain a privilege escalation vulnerability due to improper permissions in support scripts. A malicious actor with local access can escalate privileges to 'root'.","2022-04-13",0.35519,"VMware Multiple Products Privilege Escalation Vulnerability","2022-04-15","VMware Workspace ONE Access, Identity Manager and vRealize Automation contain a privilege escalation vulnerability due to improper permissions in support scripts.",{"cveId":589,"description":590,"publishedDate":591,"cvssScore":188,"cvssVersion":110,"severity":127,"isKev":4,"epssScore":592,"cisaVulnName":593,"cisaDateAdded":594,"cisaShortDescription":595,"cisaRequiredAction":405},"CVE-2022-22954","VMware Workspace ONE Access and Identity Manager contain a remote code execution vulnerability due to server-side template injection. A malicious actor with network access can trigger a server-side template injection that may result in remote code execution.","2022-04-11",0.99998,"VMware Workspace ONE Access and Identity Manager Server-Side Template Injection Vulnerability","2022-04-14","VMware Workspace ONE Access and Identity Manager allow for remote code execution due to server-side template injection.",{"cveId":597,"description":598,"publishedDate":599,"cvssScore":188,"cvssVersion":110,"severity":127,"isKev":4,"epssScore":600,"cisaVulnName":601,"cisaDateAdded":583,"cisaShortDescription":602,"cisaRequiredAction":414},"CVE-2015-3113","Heap-based buffer overflow in Adobe Flash Player before 13.0.0.296 and 14.x through 18.x before 18.0.0.194 on Windows and OS X and before 11.2.202.468 on Linux allows remote attackers to execute arbitrary code via unspecified vectors, as exploited in the wild in June 2015.","2015-06-23",0.99812,"Adobe Flash Player Heap-Based Buffer Overflow Vulnerability","Heap-based buffer overflow vulnerability in Adobe Flash Player allows remote attackers to execute code.",{"cveId":604,"description":605,"publishedDate":517,"cvssScore":188,"cvssVersion":110,"severity":127,"isKev":4,"epssScore":606,"cisaVulnName":607,"cisaDateAdded":583,"cisaShortDescription":608,"cisaRequiredAction":414},"CVE-2015-0311","Unspecified vulnerability in Adobe Flash Player through 13.0.0.262 and 14.x, 15.x, and 16.x through 16.0.0.287 on Windows and OS X and through 11.2.202.438 on Linux allows remote attackers to execute arbitrary code via unknown vectors, as exploited in the wild in January 2015.",0.85589,"Adobe Flash Player Remote Code Execution Vulnerability","Unspecified vulnerability in Adobe Flash Player allows remote attackers to execute code.",{"cveId":610,"description":611,"publishedDate":612,"cvssScore":188,"cvssVersion":110,"severity":127,"isKev":4,"epssScore":613,"cisaVulnName":614,"cisaDateAdded":583,"cisaShortDescription":615,"cisaRequiredAction":414},"CVE-2014-9163","Stack-based buffer overflow in Adobe Flash Player before 13.0.0.259 and 14.x and 15.x before 15.0.0.246 on Windows and OS X and before 11.2.202.425 on Linux allows attackers to execute arbitrary code via unspecified vectors, as exploited in the wild in December 2014.","2014-12-10",0.20724,"Adobe Flash Player Stack-Based Buffer Overflow Vulnerability","Stack-based buffer overflow in Adobe Flash Player allows attackers to execute code remotely.",{"cveId":617,"description":618,"publishedDate":619,"cvssScore":188,"cvssVersion":110,"severity":127,"isKev":4,"epssScore":620,"cisaVulnName":621,"cisaDateAdded":583,"cisaShortDescription":622,"cisaRequiredAction":414},"CVE-2015-5123","Use-after-free vulnerability in the BitmapData class in the ActionScript 3 (AS3) implementation in Adobe Flash Player 13.x through 13.0.0.302 on Windows and OS X, 14.x through 18.0.0.203 on Windows and OS X, 11.x through 11.2.202.481 on Linux, and 12.x through 18.0.0.204 on Linux Chrome installations allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted Flash content that overrides a valueOf function, as exploited in the wild in July 2015.","2015-07-14",0.1883,"Adobe Flash Player Use-After-Free Vulnerability","Use-after-free vulnerability in the BitmapData class in the ActionScript 3 (AS3) implementation in Adobe Flash Player allows remote attackers to execute code or cause a denial-of-service (DoS).",{"cveId":624,"description":625,"publishedDate":619,"cvssScore":188,"cvssVersion":110,"severity":127,"isKev":4,"epssScore":626,"cisaVulnName":621,"cisaDateAdded":583,"cisaShortDescription":627,"cisaRequiredAction":414},"CVE-2015-5122","Use-after-free vulnerability in the DisplayObject class in the ActionScript 3 (AS3) implementation in Adobe Flash Player 13.x through 13.0.0.302 on Windows and OS X, 14.x through 18.0.0.203 on Windows and OS X, 11.x through 11.2.202.481 on Linux, and 12.x through 18.0.0.204 on Linux Chrome installations allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted Flash content that leverages improper handling of the opaqueBackground property, as exploited in the wild in July 2015.",0.93892,"Use-after-free vulnerability in the DisplayObject class in the ActionScript 3 (AS3) implementation in Adobe Flash Player allows remote attackers to execute code or cause a denial-of-service (DoS).",{"cveId":629,"description":630,"publishedDate":631,"cvssScore":188,"cvssVersion":110,"severity":127,"isKev":4,"epssScore":632,"cisaVulnName":621,"cisaDateAdded":583,"cisaShortDescription":633,"cisaRequiredAction":414},"CVE-2015-0313","Use-after-free vulnerability in Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows remote attackers to execute arbitrary code via unspecified vectors, as exploited in the wild in February 2015, a different vulnerability than CVE-2015-0315, CVE-2015-0320, and CVE-2015-0322.","2015-02-02",0.95266,"Use-after-free vulnerability in Adobe Flash Player allows remote attackers to execute code.",{"cveId":635,"description":636,"publishedDate":637,"cvssScore":638,"cvssVersion":110,"severity":119,"isKev":4,"epssScore":639,"cisaVulnName":450,"cisaDateAdded":591,"cisaShortDescription":640,"cisaRequiredAction":405},"CVE-2021-22600","A double free bug in packet_set_ring() in net\u002Fpacket\u002Faf_packet.c can be exploited by a local user through crafted syscalls to escalate privileges or deny service. We recommend upgrading kernel past the effected versions or rebuilding past ec6af094ea28f0f2dda1a6a33b14cd57e36a9755","2022-01-26",6.6,0.06586,"Linux Kernel contains a flaw in the packet socket (AF_PACKET) implementation which could lead to incorrectly freeing memory. A local user could exploit this for denial-of-service (DoS) or possibly for privilege escalation.",{"cveId":642,"description":643,"publishedDate":644,"cvssScore":471,"cvssVersion":110,"severity":111,"isKev":4,"epssScore":645,"cisaVulnName":502,"cisaDateAdded":646,"cisaShortDescription":647,"cisaRequiredAction":414},"CVE-2012-2034","Adobe Flash Player before 10.3.183.20 and 11.x before 11.3.300.257 on Windows and Mac OS X; before 10.3.183.20 and 11.x before 11.2.202.236 on Linux; before 11.1.111.10 on Android 2.x and 3.x; and before 11.1.115.9 on Android 4.x, and Adobe AIR before 3.3.0.3610, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2012-2037.","2012-06-09",0.07713,"2022-03-28","Adobe Flash Player contains a memory corruption vulnerability that allows for remote code execution or denial-of-service (DoS).",{"cveId":649,"description":650,"publishedDate":651,"cvssScore":188,"cvssVersion":110,"severity":127,"isKev":4,"epssScore":652,"cisaVulnName":607,"cisaDateAdded":196,"cisaShortDescription":653,"cisaRequiredAction":414},"CVE-2016-4171","Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier allows remote attackers to execute arbitrary code via unknown vectors, as exploited in the wild in June 2016.","2016-06-16",0.20055,"Unspecified vulnerability in Adobe Flash Player allows for remote code execution.",{"cveId":655,"description":656,"publishedDate":657,"cvssScore":109,"cvssVersion":110,"severity":111,"isKev":4,"epssScore":658,"cisaVulnName":621,"cisaDateAdded":196,"cisaShortDescription":659,"cisaRequiredAction":414},"CVE-2016-7892","Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable use after free vulnerability in the TextField class. Successful exploitation could lead to arbitrary code execution.","2016-12-15",0.18786,"Adobe Flash Player has an exploitable use-after-free vulnerability in the TextField class.",{"cveId":661,"description":662,"publishedDate":663,"cvssScore":188,"cvssVersion":110,"severity":127,"isKev":4,"epssScore":664,"cisaVulnName":502,"cisaDateAdded":204,"cisaShortDescription":665,"cisaRequiredAction":414},"CVE-2015-3043","Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, as exploited in the wild in April 2015, a different vulnerability than CVE-2015-0347, CVE-2015-0350, CVE-2015-0352, CVE-2015-0353, CVE-2015-0354, CVE-2015-0355, CVE-2015-0360, CVE-2015-3038, CVE-2015-3041, and CVE-2015-3042.","2015-04-14",0.73862,"A memory corruption vulnerability exists in Adobe Flash Player that allows an attacker to perform remote code execution.",{"cveId":667,"description":668,"publishedDate":669,"cvssScore":188,"cvssVersion":110,"severity":127,"isKev":4,"epssScore":670,"cisaVulnName":621,"cisaDateAdded":204,"cisaShortDescription":671,"cisaRequiredAction":414},"CVE-2015-5119","Use-after-free vulnerability in the ByteArray class in the ActionScript 3 (AS3) implementation in Adobe Flash Player 13.x through 13.0.0.296 and 14.x through 18.0.0.194 on Windows and OS X and 11.x through 11.2.202.468 on Linux allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted Flash content that overrides a valueOf function, as exploited in the wild in July 2015.","2015-07-08",0.99344,"A use-after-free vulnerability exists within the ActionScript 3 ByteArray class in Adobe Flash Player that allows an attacker to perform remote code execution.",{"cveId":673,"description":674,"publishedDate":675,"cvssScore":188,"cvssVersion":110,"severity":127,"isKev":4,"epssScore":676,"cisaVulnName":677,"cisaDateAdded":204,"cisaShortDescription":678,"cisaRequiredAction":414},"CVE-2016-1019","Adobe Flash Player 21.0.0.197 and earlier allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via unspecified vectors, as exploited in the wild in April 2016.","2016-04-07",0.22316,"Adobe Flash Player Arbitrary Code Execution Vulnerability","Adobe Flash Player allows remote attackers to cause a denial of service or possibly execute arbitrary code.",{"cveId":680,"description":681,"publishedDate":682,"cvssScore":109,"cvssVersion":110,"severity":111,"isKev":4,"epssScore":683,"cisaVulnName":621,"cisaDateAdded":204,"cisaShortDescription":684,"cisaRequiredAction":414},"CVE-2016-7855","Use-after-free vulnerability in Adobe Flash Player before 23.0.0.205 on Windows and OS X and before 11.2.202.643 on Linux allows remote attackers to execute arbitrary code via unspecified vectors, as exploited in the wild in October 2016.","2016-11-01",0.25198,"Use-after-free vulnerability in Adobe Flash Player Windows and OS and Linux allows remote attackers to execute arbitrary code.",{"cveId":106,"description":107,"publishedDate":108,"cvssScore":109,"cvssVersion":110,"severity":111,"isKev":4,"epssScore":112,"cisaVulnName":607,"cisaDateAdded":204,"cisaShortDescription":686,"cisaRequiredAction":414},"Adobe Flash Player contains a vulnerability that allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted Flash content.",{"cveId":688,"description":689,"publishedDate":690,"cvssScore":109,"cvssVersion":110,"severity":111,"isKev":4,"epssScore":691,"cisaVulnName":692,"cisaDateAdded":204,"cisaShortDescription":693,"cisaRequiredAction":414},"CVE-2017-11292","Adobe Flash Player version 27.0.0.159 and earlier has a flawed bytecode verification procedure, which allows for an untrusted value to be used in the calculation of an array index. This can lead to type confusion, and successful exploitation could lead to arbitrary code execution.","2017-10-22",0.11885,"Adobe Flash Player Type Confusion Vulnerability","Adobe Flash Player contains a type confusion vulnerability which can allow for remote code execution.",{"cveId":695,"description":696,"publishedDate":697,"cvssScore":153,"cvssVersion":110,"severity":111,"isKev":4,"epssScore":698,"cisaVulnName":677,"cisaDateAdded":204,"cisaShortDescription":699,"cisaRequiredAction":414},"CVE-2012-1535","Unspecified vulnerability in Adobe Flash Player before 11.3.300.271 on Windows and Mac OS X and before 11.2.202.238 on Linux allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted SWF content, as exploited in the wild in August 2012 with SWF content in a Word document.","2012-08-15",0.70384,"Unspecified vulnerability in Adobe Flash Player allows remote attackers to execute arbitrary code or cause a denial of service via crafted SWF content.",{"cveId":701,"description":702,"publishedDate":703,"cvssScore":153,"cvssVersion":110,"severity":111,"isKev":4,"epssScore":704,"cisaVulnName":677,"cisaDateAdded":204,"cisaShortDescription":705,"cisaRequiredAction":414},"CVE-2015-7645","Adobe Flash Player 18.x through 18.0.0.252 and 19.x through 19.0.0.207 on Windows and OS X and 11.x through 11.2.202.535 on Linux allows remote attackers to execute arbitrary code via a crafted SWF file, as exploited in the wild in October 2015.","2015-10-15",0.65339,"Adobe Flash Player allows remote attackers to execute arbitrary code via a crafted SWF file.",{"cveId":707,"description":708,"publishedDate":709,"cvssScore":153,"cvssVersion":110,"severity":111,"isKev":4,"epssScore":710,"cisaVulnName":711,"cisaDateAdded":204,"cisaShortDescription":712,"cisaRequiredAction":405},"CVE-2013-0640","Adobe Reader and Acrobat 9.x before 9.5.4, 10.x before 10.1.6, and 11.x before 11.0.02 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted PDF document, as exploited in the wild in February 2013.","2013-02-14",0.86927,"Adobe Reader and Acrobat Memory Corruption Vulnerability","An memory corruption vulnerability exists in the acroform.dll in Adobe Reader that allows an attacker to perform remote code execution.",{"cveId":714,"description":715,"publishedDate":709,"cvssScore":153,"cvssVersion":110,"severity":111,"isKev":4,"epssScore":716,"cisaVulnName":717,"cisaDateAdded":204,"cisaShortDescription":718,"cisaRequiredAction":405},"CVE-2013-0641","Buffer overflow in Adobe Reader and Acrobat 9.x before 9.5.4, 10.x before 10.1.6, and 11.x before 11.0.02 allows remote attackers to execute arbitrary code via a crafted PDF document, as exploited in the wild in February 2013.",0.32346,"Adobe Reader Buffer Overflow Vulnerability","A buffer overflow vulnerability exists in Adobe Reader which allows an attacker to perform remote code execution.",{"cveId":720,"description":721,"publishedDate":722,"cvssScore":38,"cvssVersion":110,"severity":111,"isKev":4,"epssScore":723,"cisaVulnName":420,"cisaDateAdded":204,"cisaShortDescription":724,"cisaRequiredAction":405},"CVE-2016-5195","Race condition in mm\u002Fgup.c in the Linux kernel 2.x through 4.x before 4.8.3 allows local users to gain privileges by leveraging incorrect handling of a copy-on-write (COW) feature to write to a read-only memory mapping, as exploited in the wild in October 2016, aka \"Dirty COW.\"","2016-11-10",0.83524,"Race condition in mm\u002Fgup.c in the Linux kernel allows local users to escalate privileges.",{"cveId":726,"description":727,"publishedDate":728,"cvssScore":188,"cvssVersion":110,"severity":127,"isKev":4,"epssScore":729,"cisaVulnName":621,"cisaDateAdded":730,"cisaShortDescription":731,"cisaRequiredAction":414},"CVE-2018-15982","Flash Player versions 31.0.0.153 and earlier, and 31.0.0.108 and earlier have a use after free vulnerability. Successful exploitation could lead to arbitrary code execution.","2019-01-18",0.89581,"2022-02-15","Adobe Flash Player com.adobe.tvsdk.mediacore.metadata Use After Free Vulnerability",{"cveId":733,"description":734,"publishedDate":735,"cvssScore":153,"cvssVersion":110,"severity":111,"isKev":4,"epssScore":736,"cisaVulnName":737,"cisaDateAdded":738,"cisaShortDescription":739,"cisaRequiredAction":405},"CVE-2019-13272","In the Linux kernel before 5.1.17, ptrace_link in kernel\u002Fptrace.c mishandles the recording of the credentials of a process that wants to create a ptrace relationship, which allows local users to obtain root access by leveraging certain scenarios with a parent-child process relationship, where a parent drops privileges and calls execve (potentially allowing control by an attacker). One contributing factor is an object lifetime issue (which can also cause a panic). Another contributing factor is incorrect marking of a ptrace relationship as privileged, which is exploitable through (for example) Polkit's pkexec helper with PTRACE_TRACEME. NOTE: SELinux deny_ptrace might be a usable workaround in some environments.","2019-07-17",0.52199,"Linux Kernel Improper Privilege Management Vulnerability","2021-12-10","Kernel\u002Fptrace.c in Linux kernel mishandles contains an improper privilege management vulnerability that allows local users to obtain root access.",{"cveId":741,"description":742,"publishedDate":743,"cvssScore":188,"cvssVersion":110,"severity":127,"isKev":4,"epssScore":744,"cisaVulnName":621,"cisaDateAdded":745,"cisaShortDescription":746,"cisaRequiredAction":414},"CVE-2018-4878","A use-after-free vulnerability was discovered in Adobe Flash Player before 28.0.0.161. This vulnerability occurs due to a dangling pointer in the Primetime SDK related to media player handling of listener objects. A successful attack can lead to arbitrary code execution. This was exploited in the wild in January and February 2018.","2018-02-06",0.89532,"2021-11-03","Adobe Flash Player contains a use-after-free vulnerability that could allow for code execution.",{"cveId":748,"description":749,"publishedDate":750,"cvssScore":751,"cvssVersion":110,"severity":127,"isKev":4,"epssScore":752,"cisaVulnName":753,"cisaDateAdded":745,"cisaShortDescription":754,"cisaRequiredAction":405},"CVE-2020-4006","VMware Workspace One Access, Access Connector, Identity Manager, and Identity Manager Connector address have a command injection vulnerability.","2020-11-23",9.1,0.17302,"Multiple VMware Products Command Injection Vulnerability","VMware Workspace One Access, Access Connector, Identity Manager, and Identity Manager Connector contain a command injection vulnerability. An attacker with network access to the administrative configurator on port 8443 and a valid password for the configurator administrator account can execute commands with unrestricted privileges on the underlying operating system.",[756,757,758,759,760,761,762,763,764,765],{"id":17,"product_name":18,"version_count":19,"cve_count":20,"kev_count":11,"last_cve_update":13},{"id":22,"product_name":23,"version_count":24,"cve_count":25,"kev_count":26,"last_cve_update":27},{"id":29,"product_name":30,"version_count":31,"cve_count":32,"kev_count":26,"last_cve_update":33},{"id":35,"product_name":36,"version_count":37,"cve_count":38,"kev_count":26,"last_cve_update":39},{"id":41,"product_name":42,"version_count":43,"cve_count":44,"kev_count":26,"last_cve_update":45},{"id":47,"product_name":48,"version_count":26,"cve_count":49,"kev_count":26,"last_cve_update":50},{"id":52,"product_name":53,"version_count":54,"cve_count":55,"kev_count":26,"last_cve_update":56},{"id":58,"product_name":8,"version_count":26,"cve_count":59,"kev_count":26,"last_cve_update":60},{"id":62,"product_name":63,"version_count":59,"cve_count":59,"kev_count":26,"last_cve_update":64},{"id":66,"product_name":67,"version_count":26,"cve_count":59,"kev_count":26,"last_cve_update":68},{"title":767,"metaDescription":768,"keywords":769,"structuredData":770},"Linux - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Linux covering 19 products with 12142 tracked vulnerabilities including 22 critical and 51 high-severity issues and 74 CISA KEV vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Linux vulnerabilities, Linux security, Linux CVE, Linux threat intelligence, vendor security analysis, cybersecurity threats, vulnerability management, CVE tracking, Linux KEV, Linux exploited vulnerabilities",{"@context":771,"@type":772,"name":773,"description":768,"url":774},"https:\u002F\u002Fschema.org","Organization","Linux","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Flinux",{"totalProducts":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":13,"generatedAt":776,"apiVersion":777},"2026-10-16T23:11:17.311Z","3.0"]