Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.7Out-Of-Bounds Write in TPM2 Reference Library in Google ChromeOS 122.0.6261.132 stable on Cr50 Boards allows an attacker with root access to gain persistence and bypass operating sCheck this weekEPSS 19.00%Apr 15, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: mptcp: always handle address removal under msk socket lock Syzkaller reported a lockdep splat in th…Check if you run itEPSS 0.22%Mar 27, 2025
- High8.3Google Chromium Mojo Sandbox Escape VulnerabilityPatch nowKEVEPSS 9.24%Mar 25, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: bpf: avoid holding freeze_mutex during mmap operation We use map->freeze_mutex to prevent races bet…Check if you run itEPSS 0.25%Mar 12, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: Fix slab-use-after-free Read in mgmt_remove_adv_monitor_sync This fixes the follow…Check if you run itEPSS 0.24%Feb 27, 2025
- High7.1In the Linux kernel, the following vulnerability has been resolved: ipmr: do not call mr_mfc_uses_dev() for unres entries syzbot found that calling mr_mfc_uses_dev() f…Check if you run itEPSS 0.21%Feb 27, 2025
- High7.0In the Linux kernel, the following vulnerability has been resolved: net: rose: fix timer races against user threads Rose timers only acquire the socket spinlock, witho…Check if you run itEPSS 0.17%Feb 27, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: net: usb: rtl8150: enable basic endpoint checking Syzkaller reports [1] encountering a common issue…Check if you run itEPSS 0.23%Feb 27, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: mptcp: pm: only set fullmesh for subflow endp With the in-kernel path-manager, it is possible to ch…Check if you run itEPSS 0.22%Feb 27, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: mptcp: handle fastopen disconnect correctly Syzbot was able to trigger a data stream corruption: WA…Check if you run itEPSS 0.22%Feb 27, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: net_sched: sch_sfq: don't allow 1 packet limit The current implementation does not work correctly w…Check if you run itEPSS 0.27%Feb 27, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: mac802154: check local interfaces before deleting sdata list syzkaller reported a corrupted list in…Check if you run itEPSS 0.24%Jan 31, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: af_packet: fix vlan_get_tci() vs MSG_PEEK Blamed commit forgot MSG_PEEK case, allowing a crash [1]…Check if you run itEPSS 0.27%Jan 15, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: af_packet: fix vlan_get_protocol_dgram() vs MSG_PEEK Blamed commit forgot MSG_PEEK case, allowing a…Check if you run itEPSS 0.27%Jan 15, 2025
- UnknownSign In With Google plugin for WordPress authenticate_user Authentication Bypass VulnerabilityPatch nowKEVEPSS 0.81%Dec 12, 2024
- UnknownDocuSeal Flattened Layer VulnerabilityPatch nowKEVEPSS 0.21%Dec 5, 2024
- UnknownDocuSign Print Option Flattened Layer VulnerabilityPatch nowKEVEPSS 0.35%Dec 5, 2024
- UnknownDocumenso Flattened Layer VulnerabilityPatch nowKEVEPSS 0.21%Dec 5, 2024
- UnknownDropBox Sign Flattened Layer VulnerabilityPatch nowKEVEPSS 0.19%Dec 5, 2024
- High7.0In the Linux kernel, the following vulnerability has been resolved: arm64/sve: Discard stale CPU state when handling SVE traps The logic for handling SVE traps manipul…Check if you run itEPSS 0.24%Nov 19, 2024
- Medium5.3Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect')Open the advisoryOct 28, 2024
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: prevent nf_skb_duplicated corruption syzbot found that nf_dup_ipv4() or nf_du…Check if you run itEPSS 0.29%Oct 21, 2024
- High7.0In the Linux kernel, the following vulnerability has been resolved: jfs: Fix uaf in dbFreeBits [syzbot reported] ======================================================…Check if you run itEPSS 0.26%Oct 21, 2024
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: can: bcm: Clear bo->bcm_proc_read after remove_proc_entry().Check if you run itEPSS 0.25%Oct 21, 2024
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev() Blamed commit accidentally removed…Check if you run itEPSS 0.24%Oct 21, 2024