CVEs published in September 2022
3,650 vulnerabilities, 294 critical, 12 exploited.
- google chrome, fedoraproject fedora, google linux and chrome os +2 moreHeap buffer overflow in Exosphere in Google Chrome on Chrome OS, Lacros prior to 105.0.5195.52...8.8 High
- google chrome, fedoraproject fedora +1 moreHeap buffer overflow in WebUI in Google Chrome on Chrome OS prior to 105.0.5195.52 allowed a...8.8 High
- google chrome, fedoraproject fedora +1 moreUse after free in SplitScreen in Google Chrome on Chrome OS, Lacros prior to 105.0.5195.52...8.8 High
- google chrome, fedoraproject fedora +1 moreInappropriate implementation in Chrome OS lockscreen in Google Chrome on Chrome OS prior to 105.0...6.8 Medium
- google chrome, fedoraproject fedora +1 moreInsufficient policy enforcement in Extensions API in Google Chrome prior to 105.0.5195.52 allowed...6.5 Medium
- google chrome, fedoraproject fedora +1 moreUse after free in Browser Tag in Google Chrome prior to 105.0.5195.52 allowed an attacker who...8.8 High
- google chrome, fedoraproject fedora +1 moreInsufficient validation of untrusted input in V8 in Google Chrome prior to 105.0.5195.52 allowed...8.8 High
- google chrome, fedoraproject fedora +1 moreInappropriate implementation in Site Isolation in Google Chrome prior to 105.0.5195.52 allowed a...6.5 Medium
- google chrome, fedoraproject fedora +1 moreHeap buffer overflow in Screen Capture in Google Chrome on Chrome OS prior to 105.0.5195.52...8.8 High
- google chrome, fedoraproject fedora +1 moreUse after free in PhoneHub in Google Chrome on Chrome OS prior to 105.0.5195.52 allowed a remote...8.8 High
- google chrome, fedoraproject fedora +1 moreUse after free in WebSQL in Google Chrome prior to 105.0.5195.52 allowed a remote attacker to...8.8 High
- google chrome, fedoraproject fedora +1 moreUse after free in Layout in Google Chrome prior to 105.0.5195.52 allowed a remote attacker to...8.8 High
- google chrome, fedoraproject fedora +1 moreUse after free in WebSQL in Google Chrome prior to 105.0.5195.52 allowed a remote attacker to...8.8 High
- google chrome, fedoraproject fedora, google chromium network service +2 moreUse after free in Network Service in Google Chrome prior to 105.0.5195.52 allowed a remote...8.8 High
- mozilla thunderbirdWhen receiving an HTML email that specified to load an <code>iframe</code> element from a remote...4.3 Medium
- mozilla thunderbirdIf a Thunderbird user replied to a crafted HTML email containing a <code>meta</code> tag, with...8.1 High
- mozilla thunderbirdWhen receiving an HTML email that contained an <code>iframe</code> element, which used a <code...6.5 Medium
- python-scciclient project python-scciclient, debian linux +1 morepython-scciclient vulnerable to Man-in-the-middle (MITM) attacks7.4 High
- red hat undertow, netapp active iq unified manager, cloud secure agent +6 more +8 moreA flaw was found in Undertow. Denial of service can be achieved as Undertow server waits for the...4.9 Medium
- clusterlabs pcs, debian linux +1 moreA vulnerability was found in the PCS project. This issue occurs due to incorrect permissions on a...7.8 High
- debian linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moreAn issue was found in the Linux kernel in nf_conntrack_irc where the message handling can be...5.3 Medium
- google android, mediatek, inc. mt6580, mt6735, mt6737, mt6739, mt6750s, mt6753, mt6755s, mt6757, mt6757c, mt6757cd, mt6757ch, mt6763, mt6771, mt8163, mt8167, mt8167s, mt8173, mt8183, mt8321, mt8362a, mt8385, mt8518, mt8532, mt8765, mt8788, yoctoproject yocto +2 moreIn BT firmware, there is a possible out of bounds write due to a missing bounds check. This could...9.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, qualcomm apq8009w firmware, apq8017 firmware +127 more +129 moreInformation disclosure in Bluetooth driver due to buffer over-read while reading l2cap length in...8.2 High
platform/vendor/qcom-opensource/system/btAndroidNo score- qualcomm, inc. snapdragon connectivity, snapdragon mobile, qualcomm sd 8 gen1 5g firmware, sm7450 firmware +13 more +15 moreMemory corruption in graphics due to use-after-free while graphics profiling in Snapdragon...8.4 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +124 more +126 moreDenial of service in WLAN HOST due to buffer over read while unpacking frames in Snapdragon Auto,...7.5 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, qualcomm ar8035 firmware, qca6174a firmware +63 more +65 morePossible integer overflow and memory corruption due to improper validation of buffer size sent to...8.4 High
- qualcomm, inc. snapdragon auto, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon wearables, qualcomm apq8096au firmware, mdm9650 firmware +19 more +21 moreMemory corruption in kernel due to improper input validation while processing ION commands in...6.7 Medium
- qualcomm, inc. snapdragon compute, snapdragon connectivity, snapdragon industrial iot, snapdragon mobile, qualcomm apq8053 firmware, msm8953 firmware +47 more +49 moreMemory corruption in synx driver due to use-after-free condition in the synx driver due to...8.4 High
- google androidIn the SEPolicy configuration of system apps, there is a possible access to the 'ip' utility due...5.5 Medium
- google androidIn addOrUpdateNetwork of WifiServiceImpl.java, there is a possible way for a guest user to...7.8 High
- google androidIn SettingsActivity.java, there is a possible way to make a device discoverable over Bluetooth,...5.5 Medium
- google androidIn checkAccess of MediaProvider.java, there is a possible file deletion due to a path traversal...7.8 High
- google androidIn extract3GPPGlobalDescriptions of TextDescriptions.cpp, there is a possible out of bounds read...5.5 Medium
- google androidIn declareDuplicatePermission of ParsedPermissionUtils.java, there is a possible way to obtain a...7.8 High
- google androidSummary:Product: AndroidVersions: Android SoCAndroid ID: A-2382570009.8 Critical
- google androidSummary:Product: AndroidVersions: Android SoCAndroid ID: A-2382570029.8 Critical
- google androidSummary:Product: AndroidVersions: Android SoCAndroid ID: A-2382570049.8 Critical
- google androidSummary:Product: AndroidVersions: Android SoCAndroid ID: A-2382273239.8 Critical
- google androidSummary:Product: AndroidVersions: Android SoCAndroid ID: A-2382273249.8 Critical
- google androidSummary:Product: AndroidVersions: Android SoCAndroid ID: A-2382273289.8 Critical
- google androida function called 'nla_parse', do not check the len of para, it will check nla_type (which can be...9.8 Critical
- fedoraproject fedora, redhat ansible automation platform, openshift container platform +2 moreAn Improper Certificate Validation attack was found in Openshift. A re-encrypt Route with...6.5 Medium
- samba, fedoraproject fedora +1 moreIn Samba, GnuTLS gnutls_rnd() can fail and give predictable random values.5.5 Medium
- fedoraproject fedora, gnu gcc, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +2 more +4 moreHeap/stack buffer overflow in the dlang_lname function in d-demangle.c in libiberty allows...6.5 Medium
- google androidIn MMU_MapPages of TBD, there is a possible out of bounds write due to improper input validation....7.8 High
- google androidThe path in this case is a little bit convoluted. The end result is that via an ioctl an...9.8 Critical
- google androidIn PVRSRVBridgePMRPDumpSymbolicAddr of the PowerVR kernel driver, a missing size check means...7.8 High
- google androidIn PVRSRVRGXSubmitTransferKM of rgxtransfer.c, there is a possible user after free due to a race...7.0 High
- sqlite, netapp ontap select deploy administration utility, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +2 more +4 moreIn SQLite 3.31.1, there is an out of bounds access problem through ALTER TABLE for views that...9.8 Critical
- Show moreLoading…