Skip to contentDebian vulnerabilities
Newest
- google chrome, debian linux, fedoraproject fedora +2 moreUse after free in Media Capture in Google Chrome prior to 120.0.6099.62 allowed a remote attacker...CVE-2023-6510Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreUse after free in Side Panel Search in Google Chrome prior to 120.0.6099.62 allowed a remote...CVE-2023-6509Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreUse after free in Media Stream in Google Chrome prior to 120.0.6099.62 allowed a remote attacker...CVE-2023-6508Fix available8.8 High
- sierrawireless aleos, debian linux +1 moreImproper input leads to DoSCVE-2023-404627.5 High
- apple ipados, iphone os, macos +4 more +6 moreBluetooth HID Hosts in BlueZ may permit an unauthenticated Peripheral role HID Device to initiate...CVE-2023-45866Public exploitFix available6.3 Medium
- apple ipados, macos, safari +6 more +8 moreA memory corruption vulnerability was addressed with improved locking. This issue is fixed in iOS...CVE-2023-42917In KEVFix available8.8 High
- apple ipados, macos, safari +6 more +8 moreAn out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 17...CVE-2023-42916In KEVFix availableEPSS 17.8%6.5 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreUse after free in libavif in Google Chrome prior to 119.0.6045.199 allowed a remote attacker to...CVE-2023-6351Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreUse after free in libavif in Google Chrome prior to 119.0.6045.199 allowed a remote attacker to...CVE-2023-6350Public exploitFix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreInteger overflow in Skia in Google Chrome prior to 119.0.6045.199 allowed a remote attacker who...CVE-2023-6345In KEVFix availableEPSS 16.5%9.6 Critical
- google chrome, debian linux, fedoraproject fedora +2 moreType Confusion in Spellcheck in Google Chrome prior to 119.0.6045.199 allowed a remote attacker...CVE-2023-6348Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreUse after free in Mojo in Google Chrome prior to 119.0.6045.199 allowed a remote attacker to...CVE-2023-6347Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreUse after free in WebAudio in Google Chrome prior to 119.0.6045.199 allowed a remote attacker to...CVE-2023-6346Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreMemory safety bugs present in Firefox 119, Firefox 115.4, and Thunderbird 115.4. Some of these...CVE-2023-6212Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreRelative URLs starting with three slashes were incorrectly parsed, and a path-traversal "/../"...CVE-2023-6209Fix available6.5 Medium
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreWhen using X11, text selected by the page using the Selection API was erroneously copied into the...CVE-2023-6208Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreOwnership mismanagement led to a use-after-free in ReadableByteStreams This vulnerability affects...CVE-2023-6207Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreThe black fade animation when exiting fullscreen is roughly the length of the anti-clickjacking...CVE-2023-6206Fix available5.4 Medium
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreIt was possible to cause the use of a MessagePort after it had already been freed, which could...CVE-2023-6205Fix available6.5 Medium
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreOn some systems—depending on the graphics settings and drivers—it was possible to force an out-of...CVE-2023-6204Fix available6.5 Medium
- gnu gnutls, debian linux, fedoraproject fedora +12 more +14 moreGnutls: timing side-channel in the rsa-psk authenticationCVE-2023-5981Fix available5.9 Medium
- wireshark, debian linux +1 moreOut-of-bounds Read in WiresharkCVE-2023-6174Fix available6.3 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreUse after free in Navigation in Google Chrome prior to 119.0.6045.159 allowed a remote attacker...CVE-2023-6112Fix availableEPSS 24.7%8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreUse after free in Garbage Collection in Google Chrome prior to 119.0.6045.159 allowed a remote...CVE-2023-5997Fix available8.8 High
- debian linux, intel core i3-1005g1 firmware, core i3-10100y firmware +220 more +222 moreSequence of processor instructions leads to unexpected behavior for some Intel(R) Processors may...CVE-2023-23583Public exploitFix available8.8 High
- openvpn, debian linux, fedoraproject fedora +2 more +4 moreUse after free in OpenVPN version 2.6.0 to 2.6.6 may lead to undefined behavoir, leaking memory...CVE-2023-46850Fix available9.8 Critical
- openvpn, debian linux, fedoraproject fedora +2 more +4 moreUsing the --fragment option in certain configuration setups OpenVPN version 2.6.0 to 2.6.6 allows...CVE-2023-46849Fix available7.5 High
- sensiolabs symfony, debian linux, symfony twig-bridge +2 moreSymfony potential Cross-site Scripting vulnerabilities in CodeExtension filtersCVE-2023-46734Fix available6.1 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreUse after free in WebAudio in Google Chrome prior to 119.0.6045.123 allowed a remote attacker to...CVE-2023-5996Fix available8.8 High
- debian linux, fedoraproject fedora, roundcube webmail +2 moreRoundcube 1.5.x before 1.5.6 and 1.6.x before 1.6.5 allows XSS via a Content-Type or Content...CVE-2023-47272Fix available6.1 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreIncorrect security UI in Picture In Picture in Google Chrome prior to 119.0.6045.105 allowed a...CVE-2023-5859Fix available4.3 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreInappropriate implementation in WebApp Provider in Google Chrome prior to 119.0.6045.105 allowed...CVE-2023-5858Fix available4.3 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreInappropriate implementation in Downloads in Google Chrome prior to 119.0.6045.105 allowed a...CVE-2023-5857Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreUse after free in Side Panel in Google Chrome prior to 119.0.6045.105 allowed a remote attacker...CVE-2023-5856Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreUse after free in Reading Mode in Google Chrome prior to 119.0.6045.105 allowed a remote attacker...CVE-2023-5855Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreUse after free in Profiles in Google Chrome prior to 119.0.6045.105 allowed a remote attacker who...CVE-2023-5854Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreIncorrect security UI in Downloads in Google Chrome prior to 119.0.6045.105 allowed a remote...CVE-2023-5853Fix available4.3 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreUse after free in Printing in Google Chrome prior to 119.0.6045.105 allowed a remote attacker who...CVE-2023-5852Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreInappropriate implementation in Downloads in Google Chrome prior to 119.0.6045.105 allowed a...CVE-2023-5851Fix available4.3 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreIncorrect security UI in Downloads in Google Chrome prior to 119.0.6045.105 allowed a remote...CVE-2023-5850Fix available4.3 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreInteger overflow in USB in Google Chrome prior to 119.0.6045.105 allowed a remote attacker to...CVE-2023-5849Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreInsufficient data validation in USB in Google Chrome prior to 119.0.6045.105 allowed a remote...CVE-2023-5482Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreInappropriate implementation in Payments in Google Chrome prior to 119.0.6045.105 allowed a...CVE-2023-5480Fix available6.1 Medium
- apache activemq, activemq legacy openwire module, debian linux +3 more +5 moreApache ActiveMQ, Apache ActiveMQ Legacy OpenWire Module: Unbounded deserialization causes ActiveMQ to be vulnerable to a remote code execution (RCE) attackCVE-2023-46604In KEVPublic exploitFix availableEPSS 100.0%10.0 Critical
- browserify browserify-sign, debian linux +1 morebrowserify-sign vulnerable via an upper bound check issue in `dsaVerify` that leads to a signature forgery attackCVE-2023-46234Fix available6.5 Medium
- microsoft open-vm-tools, debian linux, vmware open vm tools +2 moreopen-vm-tools contains a file descriptor hijack vulnerability in the vmware-user-suid-wrapper. A...CVE-2023-34059Fix available7.4 High
- vmware tools, debian linux, fedoraproject fedora +2 more +4 moreVMware Tools contains a SAML token signature bypass vulnerability. A malicious actor that has...CVE-2023-34058Fix available7.1 High
- apple ipados, macos, safari +6 more +8 moreA logic issue was addressed with improved checks. This issue is fixed in iOS 17.1 and iPadOS 17.1...CVE-2023-42852Fix available8.8 High
- apple ipados, macos, safari +4 more +6 moreThe issue was addressed with improved memory handling. This issue is fixed in macOS Sonoma 14.1,...CVE-2023-41983Fix available6.5 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreUse after free in Profiles in Google Chrome prior to 118.0.5993.117 allowed a remote attacker to...CVE-2023-5472Fix available8.8 High
- Show moreLoading…