Skip to contentRedhat Linux Desktop vulnerabilities
- debian linux, arm cortex-a, canonical ubuntu linux +280 more +282 morelinux-4.9 - security updateCVE-2018-3639Public exploitFix availableEPSS 60.4%5.5 Medium
- gnu glibc, canonical ubuntu linux, netapp data ontap edge +7 more +9 moreAn AVX-512-optimized implementation of the mempcpy function in the GNU C Library (aka glibc or...CVE-2018-11237Fix available7.8 High
- gnu glibc, netapp data ontap edge, element software management +6 more +8 morestdlib/canonicalize.c in the GNU C Library (aka glibc or libc6) 2.27 and earlier, when processing...CVE-2018-11236Fix available9.8 Critical
- procps-ng project procps-ng, [unknown] procps-ng, procps, canonical ubuntu linux +8 more +10 moreprocps-ng before version 3.3.15 is vulnerable to an incorrect integer size in proc/alloc.*...CVE-2018-1126Fix available4.8 Medium
- [unknown] procps-ng, canonical ubuntu linux, debian linux +6 more +8 moreprocps-ng before version 3.3.15 is vulnerable to multiple integer overflows leading to a heap...CVE-2018-1124Public exploitFix available7.3 High
- [unknown] kernel, debian linux, canonical ubuntu linux +4 more +6 moreA flaw was found affecting the Linux kernel before version 4.17. By mmap()ing a FUSE-backed file...CVE-2018-1120Public exploitFix available2.8 Low
- fedora dhcp, fedoraproject fedora, redhat enterprise linux +5 more +7 moreDHCP packages in Red Hat Enterprise Linux 6 and 7, Fedora 28, and earlier are vulnerable to a...CVE-2018-1111Public exploitFix availableEPSS 97.9%7.5 High
- ijg libjpeg, canonical ubuntu linux, debian linux +10 more +12 moreAn issue was discovered in libjpeg 9a and 9d. The alloc_sarray function in jmemmgr.c allows...CVE-2018-11212Fix available6.5 Medium
- haxx curl, canonical ubuntu linux, debian linux +6 more +8 morecurl version curl 7.20.0 to and including curl 7.59.0 contains a CWE-126: Buffer Over-read...CVE-2018-1000301Fix available9.1 Critical
- adobe flash player, redhat enterprise linux desktop, enterprise linux server +1 more +3 moreAdobe Flash Player versions 29.0.0.140 and earlier have an exploitable type confusion...CVE-2018-4944Fix available9.8 Critical
- exiv2, canonical ubuntu linux, debian linux +3 more +5 moreAn issue was discovered in Exiv2 0.26. readMetadata in jp2image.cpp allows remote attackers to...CVE-2018-10998Fix available6.5 Medium
- mozilla firefox, firefox esr, thunderbird +9 more +11 moreMozilla developers backported selected changes in the Skia library. These changes correct memory...CVE-2018-5183Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +9 more +11 moreA buffer overflow was found during UTF8 to Unicode string conversion within JavaScript with...CVE-2018-5178Fix available8.1 High
- mozilla firefox, firefox esr, thunderbird +9 more +11 moreSites can bypass security checks on permissions to install lightweight themes by manipulating the...CVE-2018-5168Fix available5.3 Medium
- mozilla firefox, firefox esr, thunderbird +9 more +11 moreAn integer overflow can occur in the Skia library due to 32-bit integer use in an array without...CVE-2018-5159Public exploitFix availableEPSS 20.6%9.8 Critical
- mozilla firefox, firefox esr, canonical ubuntu linux +7 more +9 moreMalicious PDF can inject JavaScript into PDF ViewerCVE-2018-5158Public exploitFix availableEPSS 10.3%8.8 High
- mozilla firefox, firefox esr, canonical ubuntu linux +7 more +9 moreSame-origin protections for the PDF viewer can be bypassed, allowing a malicious site to...CVE-2018-5157Fix available7.5 High
- mozilla firefox, firefox esr, thunderbird +9 more +11 moreA use-after-free vulnerability can occur while adjusting layout during SVG animations with text...CVE-2018-5155Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +9 more +11 moreA use-after-free vulnerability can occur while enumerating attributes during SVG animations with...CVE-2018-5154Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +9 more +11 moreMemory safety bugs were reported in Firefox 59, Firefox ESR 52.7, and Thunderbird 52.7. Some of...CVE-2018-5150Fix available9.8 Critical
- debian linux, linux kernel, canonical ubuntu linux +3 more +5 moreLinux kernel before version 4.16-rc7 is vulnerable to a null pointer dereference in...CVE-2018-1130Fix available5.5 Medium
- debian linux, kernel vhost, linux kernel +5 more +7 moreLinux kernel vhost since version 4.8 does not properly initialize memory in messages passed...CVE-2018-1118Fix available2.3 Low
- freedesktop poppler, canonical ubuntu linux, debian linux +4 more +6 moreThe FoFiType1C::cvtGlyph function in fofi/FoFiType1C.cc in Poppler through 0.64.0 allows remote...CVE-2017-18267Fix available5.5 Medium
- unspecified 389-ds-base, debian linux, fedoraproject 389 directory server +3 more +5 more389-ds-base before versions 1.4.0.9, 1.3.8.1, 1.3.6.15 did not properly handle long search...CVE-2018-1089Fix available7.5 High
- debian linux, kernel kvm, linux kernel +9 more +11 morekernel KVM before versions kernel 4.16, kernel 4.16-rc7, kernel 4.17-rc1, kernel 4.17-rc2 and...CVE-2018-1087Fix available8.0 High
- gnome libgxps, redhat ansible tower, enterprise linux desktop +2 more +4 moreThere is a stack-based buffer over-read in calling GLib in the function...CVE-2018-10767Fix available6.5 Medium
- freedesktop poppler, canonical ubuntu linux, debian linux +4 more +6 moreThere is a NULL pointer dereference in the AnnotPath::getCoordsLength function in Annot.h in an...CVE-2018-10768Fix available6.5 Medium
- gnu wget, canonical ubuntu linux, debian linux +3 more +5 moreGNU Wget before 1.19.5 is prone to a cookie injection vulnerability in the resp_new function in...CVE-2018-0494Public exploitFix availableEPSS 16.5%6.5 Medium
- gnome libgxps, opensuse leap, redhat ansible tower +3 more +5 moreThere is a heap-based buffer over-read in the function ft_font_face_hash of gxps-fonts.c in...CVE-2018-10733Fix available6.5 Medium
- linux kernel, canonical ubuntu linux, redhat enterprise linux desktop +6 more +8 moreThe do_get_mempolicy function in mm/mempolicy.c in the Linux kernel before 4.12.9 allows local...CVE-2018-10675Fix available7.8 High
- apache openoffice, libreoffice, canonical ubuntu linux +4 more +6 moreAn information disclosure vulnerability occurs when LibreOffice 6.0.3 and Apache OpenOffice...CVE-2018-10583Public exploitFix availableEPSS 79.5%7.5 High
- debian linux, linux kernel, canonical ubuntu linux +7 more +9 moreThe Linux Kernel version 3.18 contains a dangerous feature vulnerability in...CVE-2018-1000199Public exploitFix available5.5 Medium
- gnu binutils, redhat enterprise linux desktop, enterprise linux server +1 more +3 moreThe ignore_section_sym function in elf.c in the Binary File Descriptor (BFD) library (aka libbfd)...CVE-2018-10535Fix available5.5 Medium
- gnu binutils, redhat enterprise linux desktop, enterprise linux server +1 more +3 moreThe _bfd_XX_bfd_copy_private_bfd_data_common function in peXXigen.c in the Binary File Descriptor...CVE-2018-10534Fix available5.5 Medium
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreConfusing settings in Autofill in Google Chrome prior to 66.0.3359.117 allowed a remote attacker...CVE-2018-6117Fix available6.5 Medium
- google chrome, debian linux, redhat linux desktop +2 more +4 moreA nullptr dereference in WebAssembly in Google Chrome prior to 66.0.3359.117 allowed a remote...CVE-2018-6116Fix available6.5 Medium
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreIncorrect enforcement of CSP for <object> tags in Blink in Google Chrome prior to 66.0.3359.117...CVE-2018-6114Fix available6.5 Medium
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreImproper handling of pending navigation entries in Navigation in Google Chrome on iOS prior to 66...CVE-2018-6113Fix available6.5 Medium
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreMaking URLs clickable and allowing them to be styled in DevTools in Google Chrome prior to 66.0...CVE-2018-6112Fix available4.3 Medium
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreAn object lifetime issue in the developer tools network handler in Google Chrome prior to 66.0...CVE-2018-6111Fix available8.8 High
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreParsing documents as HTML in Downloads in Google Chrome prior to 66.0.3359.117 allowed a remote...CVE-2018-6110Fix available5.4 Medium
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 morereadAsText() can indefinitely read the file picked by the user, rather than only once at the time...CVE-2018-6109Fix available6.5 Medium
- google chrome, debian linux, redhat linux desktop +2 more +4 moreIncorrect handling of confusable characters in URL Formatter in Google Chrome prior to 66.0.3359...CVE-2018-6108Fix available6.5 Medium
- google chrome, debian linux, redhat linux desktop +2 more +4 moreIncorrect handling of confusable characters in URL Formatter in Google Chrome prior to 66.0.3359...CVE-2018-6107Fix available6.5 Medium
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreAn asynchronous generator may return an incorrect state in V8 in Google Chrome prior to 66.0.3359...CVE-2018-6106Fix available8.8 High
- google chrome, debian linux, redhat linux desktop +2 more +4 moreIncorrect handling of confusable characters in Omnibox in Google Chrome prior to 66.0.3359.117...CVE-2018-6105Fix available6.5 Medium
- google chrome, debian linux, redhat linux desktop +2 more +4 moreIncorrect handling of confusable characters in URL Formatter in Google Chrome prior to 66.0.3359...CVE-2018-6104Fix available6.5 Medium
- google chrome, debian linux, redhat linux desktop +2 more +4 moreA stagnant permission prompt in Prompts in Google Chrome prior to 66.0.3359.117 allowed a remote...CVE-2018-6103Fix available6.5 Medium
- google chrome, debian linux, redhat linux desktop +2 more +4 moreMissing confusable characters in Internationalization in Google Chrome prior to 66.0.3359.117...CVE-2018-6102Fix available4.3 Medium
- google chrome, debian linux, redhat linux desktop +2 more +4 moreA lack of host validation in DevTools in Google Chrome prior to 66.0.3359.117 allowed a remote...CVE-2018-6101Fix available7.5 High
- Show moreLoading…