Redhat Desktop vulnerabilities

• debian linux, linux kernel, fedoraproject fedora +15 more +17 more Use-after-free in Linux kernel's netfilter: nf_tables component CVE-2024-1086 In KEVPublic exploitFix available EPSS 28.1% 7.8 HighJanuary 31, 2024
• x.org xwayland, fedoraproject fedora, red hat enterprise linux 6 +13 more +15 more Xorg-x11-server: selinux context corruption CVE-2024-0409 Fix available 7.8 HighJanuary 16, 2024
• fedoraproject fedora, red hat enterprise linux 6, enterprise linux 7 +13 more +15 more Xorg-x11-server: selinux unlabeled glx pbuffer CVE-2024-0408 Fix available 5.5 MediumJanuary 16, 2024
• debian linux, fedoraproject fedora, red hat enterprise linux 6 +19 more +21 more Xorg-x11-server: heap buffer overflow in devicefocusevent and procxiquerypointer CVE-2023-6816 Fix available 9.8 CriticalJanuary 16, 2024
• freeipa, fedoraproject fedora, red hat enterprise linux 6 +32 more +34 more Ipa: invalid csrf protection CVE-2023-5455 Fix available 6.5 MediumJanuary 10, 2024
• postgresql, red hat advanced cluster security 4.2, enterprise linux 6 +37 more +39 more Postgresql: buffer overrun from integer overflow in array modification CVE-2023-5869 Fix available 8.8 HighNovember 10, 2023
• redhat insights-client, red hat enterprise linux 6, enterprise linux 7 +29 more +31 more Insights-client: unsafe handling of temporary files and directories CVE-2023-3972 Fix available 7.8 HighNovember 1, 2023
• debian linux, fedoraproject fedora, red hat enterprise linux 6 +25 more +27 more Xorg-x11-server: out-of-bounds write in xichangedeviceproperty/rrchangeoutputproperty CVE-2023-5367 Fix available 7.8 HighOctober 25, 2023
• redhat subscription-manager, fedoraproject fedora, red hat enterprise linux 6 +30 more +32 more Subscription-manager: inadequate authorization of com.redhat.rhsm1 d-bus interface allows local users to modify configuration CVE-2023-3899 Fix available 7.8 HighAugust 22, 2023
• x.org x server, fedoraproject fedora, redhat enterprise linux +16 more +18 more A vulnerability was found in X.Org. This issue occurs due to a dangling pointer in... CVE-2023-0494 Fix available 7.8 HighFebruary 7, 2023
• fedoraproject sssd, redhat enterprise linux, enterprise linux desktop +10 more +12 more sssd: libsss_certmap fails to sanitise certificate data used in LDAP filters CVE-2022-4254 Fix available 8.8 HighJanuary 27, 2023
• port389 389-ds-base, redhat enterprise linux desktop, enterprise linux for ibm z systems +5 more +7 more A double-free was found in the way 389-ds-base handles virtual attributes context in persistent... CVE-2021-4091 Fix available 7.5 HighFebruary 18, 2022
• samba, canonical ubuntu linux, debian linux +20 more +22 more The Samba vfs_fruit module uses extended file attributes (EA, xattr) to provide "...enhanced... CVE-2021-44142 Public exploitFix available EPSS 73.6% 8.8 HighJanuary 31, 2022
• linux kernel, fedoraproject fedora, netapp h300e firmware +35 more +37 more Important: kernel security, bug fix, and enhancement update CVE-2022-0330 Fix available 7.8 HighJanuary 26, 2022
• polkit project polkit, canonical ubuntu linux, oracle http server +27 more +29 more A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec... CVE-2021-4034 In KEVPublic exploitFix available EPSS 94.9% 7.8 HighJanuary 25, 2022
• samba, canonical ubuntu linux, debian linux +14 more +16 more A flaw was found in the way Samba, as an Active Directory Domain Controller, implemented Kerberos... CVE-2020-25719 Fix available 7.2 HighNovember 9, 2021
• samba, canonical ubuntu linux, debian linux +22 more +24 more A flaw was found in the way Samba maps domain users to local users. An authenticated attacker... CVE-2020-25717 Fix available 8.1 HighNovember 9, 2021
• samba, canonical ubuntu linux, debian linux +21 more +23 more A flaw was found in the way samba implemented SMB1 authentication. An attacker could use this... CVE-2016-2124 Fix available 5.9 MediumNovember 9, 2021
• kernel kvm, linux kernel, fedoraproject fedora +24 more +26 more Important: kernel security, bug fix, and enhancement update CVE-2021-3656 Public exploitFix available 8.8 HighAugust 16, 2021
• imagemagick, fedoraproject fedora, redhat enterprise linux desktop +2 more In ImageMagick versions before 7.0.9-0, there are outside the range of representable values of... CVE-2020-27769 Fix available 3.3 LowJanuary 15, 2021
• icu-project international components for unicode, canonical ubuntu linux, debian linux +11 more +13 more An issue was discovered in International Components for Unicode (ICU) for C/C++ through 66.1. An... CVE-2020-10531 Fix available 8.8 HighMarch 12, 2020
• google chrome, debian linux, fedoraproject fedora +3 more +5 more Use after free in speech in Google Chrome prior to 80.0.3987.116 allowed a remote attacker to... CVE-2020-6386 Fix available 8.8 HighFebruary 27, 2020
• google chrome, debian linux, fedoraproject fedora +3 more +5 more Use after free in WebAudio in Google Chrome prior to 80.0.3987.116 allowed a remote attacker to... CVE-2020-6384 Fix available 8.8 HighFebruary 27, 2020
• google chrome, debian linux, fedoraproject fedora +3 more +5 more Type confusion in V8 in Google Chrome prior to 80.0.3987.116 allowed a remote attacker to... CVE-2020-6383 Fix available 8.8 HighFebruary 27, 2020
• google chrome, debian linux, fedoraproject fedora +4 more +6 more Type confusion in V8 in Google Chrome prior to 80.0.3987.122 allowed a remote attacker to... CVE-2020-6418 In KEVPublic exploitFix available EPSS 78.8% 8.8 HighFebruary 26, 2020
• apple icloud, icloud for windows, ipados +9 more +11 more A logic issue was addressed with improved validation. This issue is fixed in iCloud for Windows 7... CVE-2020-3864 Fix available 7.8 HighFebruary 14, 2020
• adobe flash player, redhat enterprise linux desktop, enterprise linux server +1 more +3 more Adobe Flash Player versions 32.0.0.321 and earlier, 32.0.0.314 and earlier, 32.0.0.321 and... CVE-2020-3757 Fix available EPSS 10.2% 8.8 HighFebruary 13, 2020
• google chrome, debian linux, fedoraproject fedora +5 more +7 more Insufficient data validation in streams in Google Chrome prior to 80.0.3987.87 allowed a remote... CVE-2020-6416 Fix available 8.8 HighFebruary 8, 2020
• google chrome, debian linux, fedoraproject fedora +5 more +7 more Inappropriate implementation in JavaScript in Google Chrome prior to 80.0.3987.87 allowed a... CVE-2020-6415 Fix available 8.8 HighFebruary 8, 2020
• google chrome, debian linux, fedoraproject fedora +5 more +7 more Insufficient policy enforcement in CORS in Google Chrome prior to 80.0.3987.87 allowed a local... CVE-2020-6408 Fix available 6.5 MediumFebruary 8, 2020
• google chrome, debian linux, fedoraproject fedora +4 more +6 more Use after free in audio in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to... CVE-2020-6406 Fix available 8.8 HighFebruary 8, 2020
• google chrome, debian linux, fedoraproject fedora +5 more +7 more Inappropriate implementation in Blink in Google Chrome prior to 80.0.3987.87 allowed a local... CVE-2020-6404 Fix available 8.8 HighFebruary 8, 2020
• google chrome, debian linux, fedoraproject fedora +5 more +7 more Incorrect implementation in Omnibox in Google Chrome on iOS prior to 80.0.3987.87 allowed a... CVE-2020-6403 Fix available 4.3 MediumFebruary 8, 2020
• google chrome, debian linux, fedoraproject fedora +5 more +7 more Insufficient policy enforcement in downloads in Google Chrome on OS X prior to 80.0.3987.87... CVE-2020-6402 Fix available 8.8 HighFebruary 8, 2020
• google chrome, debian linux, fedoraproject fedora +5 more +7 more Inappropriate implementation in CORS in Google Chrome prior to 80.0.3987.87 allowed a remote... CVE-2020-6400 Fix available 6.5 MediumFebruary 8, 2020
• google chrome, debian linux, fedoraproject fedora +5 more +7 more Use of uninitialized data in PDFium in Google Chrome prior to 80.0.3987.87 allowed a remote... CVE-2020-6398 Fix available 8.8 HighFebruary 8, 2020
• google chrome, debian linux, fedoraproject fedora +5 more +7 more Inappropriate implementation in sharing in Google Chrome prior to 80.0.3987.87 allowed a remote... CVE-2020-6397 Fix available 6.5 MediumFebruary 8, 2020
• google chrome, debian linux, fedoraproject fedora +5 more +7 more Inappropriate implementation in Skia in Google Chrome prior to 80.0.3987.87 allowed a remote... CVE-2020-6396 Fix available 4.3 MediumFebruary 8, 2020
• google chrome, debian linux, fedoraproject fedora +5 more +7 more Insufficient policy enforcement in Blink in Google Chrome prior to 80.0.3987.87 allowed a remote... CVE-2020-6394 Fix available 5.4 MediumFebruary 8, 2020
• google chrome, debian linux, fedoraproject fedora +5 more +7 more Insufficient policy enforcement in Blink in Google Chrome prior to 80.0.3987.87 allowed a remote... CVE-2020-6393 Fix available 6.5 MediumFebruary 8, 2020
• google chrome, debian linux, fedoraproject fedora +5 more +7 more Insufficient policy enforcement in extensions in Google Chrome prior to 80.0.3987.87 allowed an... CVE-2020-6392 Fix available 4.3 MediumFebruary 8, 2020
• google chrome, debian linux, fedoraproject fedora +5 more +7 more Insufficient validation of untrusted input in Blink in Google Chrome prior to 80.0.3987.87... CVE-2020-6391 Fix available 4.3 MediumFebruary 8, 2020
• google chrome, debian linux, fedoraproject fedora +5 more +7 more Out of bounds memory access in streams in Google Chrome prior to 80.0.3987.87 allowed a remote... CVE-2020-6390 Fix available 8.8 HighFebruary 8, 2020
• google chrome, debian linux, fedoraproject fedora +5 more +7 more Insufficient policy enforcement in storage in Google Chrome prior to 80.0.3987.87 allowed a... CVE-2020-6385 Fix available 8.8 HighFebruary 8, 2020
• google chrome, debian linux, fedoraproject fedora +5 more +7 more Type confusion in JavaScript in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to... CVE-2020-6382 Fix available 8.8 HighFebruary 8, 2020
• google chrome, debian linux, fedoraproject fedora +5 more +7 more Integer overflow in JavaScript in Google Chrome on ChromeOS and Android prior to 80.0.3987.87... CVE-2020-6381 Fix available 8.8 HighFebruary 8, 2020
• kde, kde konqueror, redhat enterprise linux +3 more +5 more The CSS parser (khtml/css/cssparser.cpp) in Konqueror in KDE 4.7.3 allows remote attackers to... CVE-2012-4512 Public exploit EPSS 11.7% 8.8 HighFebruary 8, 2020
• nodejs node, node.js, debian linux +11 more +13 more HTTP request smuggling in Node.js 10, 12, and 13 causes malicious payload delivery when transfer... CVE-2019-15605 Public exploitFix available EPSS 57.1% 9.8 CriticalFebruary 7, 2020
• abrt, fedoraproject fedora, redhat automatic bug reporting tool +3 more +5 more ABRT might allow attackers to obtain sensitive information from crash reports. CVE-2011-4088 7.5 HighJanuary 31, 2020
• apple icloud, icloud for windows, ipados +9 more +11 more A use after free issue was addressed with improved memory management. This issue is fixed in tvOS... CVE-2019-8846 Fix available 8.8 HighJanuary 28, 2020
• Show olderLoading…