ByteOS

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-9.3||HIGH

EPSS-4.11% / 88.72%

7 Day CHG+0.02%

Published-27 May, 2015 | 10:00

Updated-06 May, 2026 | 22:30

The __driver_rfc4106_decrypt function in arch/x86/crypto/aesni-intel_glue.c in the Linux kernel before 3.19.3 does not properly determine the memory locations used for encrypted data, which allows context-dependent attackers to cause a denial of service (buffer overflow and system crash) or possibly execute arbitrary code by triggering a crypto API call, as demonstrated by use of a libkcapi test program with an AF_ALG(aead) socket.

Vendor-n/a Canonical Ltd.Debian GNU/Linux Linux Kernel Organization, Inc

Product-debian_linux ubuntu_linux linux_kernel n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2009-3587

Matching Score-8

Assigner-MITRE Corporation

Vendor-n/a CA Technologies (Broadcom Inc.)Broadcom Inc.Linux Kernel Organization, Inc

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-9.3||HIGH

EPSS-7.39% / 91.80%

7 Day CHG~0.00%

Published-13 Oct, 2009 | 10:00

Updated-23 Apr, 2026 | 00:35

Unspecified vulnerability in the arclib component in the Anti-Virus engine in CA Anti-Virus for the Enterprise (formerly eTrust Antivirus) 7.1 through r8.1; Anti-Virus 2007 (v8) through 2009; eTrust EZ Antivirus r7.1; Internet Security Suite 2007 (v3) through Plus 2009; and other CA products allows remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted RAR archive file that triggers heap corruption, a different vulnerability than CVE-2009-3588.

CVE-2016-4187

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-4.12% / 88.74%

7 Day CHG~0.00%

Published-13 Jul, 2016 | 01:00

Updated-06 May, 2026 | 22:30

Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4172, CVE-2016-4175, CVE-2016-4179, CVE-2016-4180, CVE-2016-4181, CVE-2016-4182, CVE-2016-4183, CVE-2016-4184, CVE-2016-4185, CVE-2016-4186, CVE-2016-4188, CVE-2016-4189, CVE-2016-4190, CVE-2016-4217, CVE-2016-4218, CVE-2016-4219, CVE-2016-4220, CVE-2016-4221, CVE-2016-4233, CVE-2016-4234, CVE-2016-4235, CVE-2016-4236, CVE-2016-4237, CVE-2016-4238, CVE-2016-4239, CVE-2016-4240, CVE-2016-4241, CVE-2016-4242, CVE-2016-4243, CVE-2016-4244, CVE-2016-4245, and CVE-2016-4246.

Vendor-n/a Apple Inc.Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-windows_10 mac_os_x windows_8.1 windows flash_player linux_kernel flash_player_desktop_runtime chrome_os n/a

CWE ID-CWE-787

Out-of-bounds Write

CVE-2016-4182

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-11.54% / 93.70%

7 Day CHG~0.00%

Published-13 Jul, 2016 | 01:00

Updated-06 May, 2026 | 22:30

Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4172, CVE-2016-4175, CVE-2016-4179, CVE-2016-4180, CVE-2016-4181, CVE-2016-4183, CVE-2016-4184, CVE-2016-4185, CVE-2016-4186, CVE-2016-4187, CVE-2016-4188, CVE-2016-4189, CVE-2016-4190, CVE-2016-4217, CVE-2016-4218, CVE-2016-4219, CVE-2016-4220, CVE-2016-4221, CVE-2016-4233, CVE-2016-4234, CVE-2016-4235, CVE-2016-4236, CVE-2016-4237, CVE-2016-4238, CVE-2016-4239, CVE-2016-4240, CVE-2016-4241, CVE-2016-4242, CVE-2016-4243, CVE-2016-4244, CVE-2016-4245, and CVE-2016-4246.

Vendor-n/a Apple Inc.Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-windows_10 mac_os_x windows_8.1 windows flash_player linux_kernel flash_player_desktop_runtime chrome_os n/a

CWE ID-CWE-787

Out-of-bounds Write

CVE-2016-4141

Matching Score-8

Matching Score-8

Product-linux_enterprise_desktop windows_8.1 enterprise_linux_desktop macos flash_player_desktop_runtime linux_kernel linux_enterprise_workstation_extension windows_server_2012 chrome_os windows_10 enterprise_linux_workstation enterprise_linux_server windows flash_player windows_rt_8.1 opensuse n/a

CVSS Score-8.8||HIGH

EPSS-2.92% / 86.56%

7 Day CHG~0.00%

Published-16 Jun, 2016 | 14:00

Updated-06 May, 2026 | 22:30

Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, has unknown impact and attack vectors, a different vulnerability than other CVEs listed in MS16-083.

Vendor-n/a Apple Inc.openSUSE Google LLC Linux Kernel Organization, Inc SUSE Red Hat, Inc.Microsoft Corporation Adobe Inc.

CVE-2016-4234

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-3.90% / 88.40%

7 Day CHG~0.00%

Published-13 Jul, 2016 | 01:00

Updated-06 May, 2026 | 22:30

Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4172, CVE-2016-4175, CVE-2016-4179, CVE-2016-4180, CVE-2016-4181, CVE-2016-4182, CVE-2016-4183, CVE-2016-4184, CVE-2016-4185, CVE-2016-4186, CVE-2016-4187, CVE-2016-4188, CVE-2016-4189, CVE-2016-4190, CVE-2016-4217, CVE-2016-4218, CVE-2016-4219, CVE-2016-4220, CVE-2016-4221, CVE-2016-4233, CVE-2016-4235, CVE-2016-4236, CVE-2016-4237, CVE-2016-4238, CVE-2016-4239, CVE-2016-4240, CVE-2016-4241, CVE-2016-4242, CVE-2016-4243, CVE-2016-4244, CVE-2016-4245, and CVE-2016-4246.

Vendor-n/a Apple Inc.Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-windows_10 mac_os_x windows_8.1 windows flash_player linux_kernel flash_player_desktop_runtime chrome_os n/a

CWE ID-CWE-787

Out-of-bounds Write

CVE-2016-4133

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-2.92% / 86.56%

7 Day CHG~0.00%

Published-16 Jun, 2016 | 14:00

Updated-06 May, 2026 | 22:30

Vendor-n/a Apple Inc.openSUSE Google LLC Linux Kernel Organization, Inc SUSE Red Hat, Inc.Microsoft Corporation Adobe Inc.

CVE-2016-4153

Matching Score-8

Matching Score-8

Product-windows_10 linux_enterprise_desktop mac_os_x enterprise_linux_workstation enterprise_linux_server windows_8.1 linux_enterprise_workstation_extension enterprise_linux_desktop windows flash_player linux_kernel flash_player_desktop_runtime chrome_os opensuse n/a

CVSS Score-8.8||HIGH

EPSS-4.25% / 88.90%

7 Day CHG~0.00%

Published-16 Jun, 2016 | 14:00

Updated-06 May, 2026 | 22:30

Vendor-n/a Apple Inc.openSUSE Google LLC Linux Kernel Organization, Inc SUSE Red Hat, Inc.Microsoft Corporation Adobe Inc.

CWE ID-CWE-787

Out-of-bounds Write

CVE-2016-1032

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-4.12% / 88.74%

7 Day CHG~0.00%

Published-09 Apr, 2016 | 01:00

Updated-06 May, 2026 | 22:30

Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.616 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-1012, CVE-2016-1020, CVE-2016-1021, CVE-2016-1022, CVE-2016-1023, CVE-2016-1024, CVE-2016-1025, CVE-2016-1026, CVE-2016-1027, CVE-2016-1028, CVE-2016-1029, and CVE-2016-1033.

Vendor-n/a Apple Inc.Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-windows_10 mac_os_x windows_8.1 air_sdk_\&_compiler windows flash_player iphone_os air_sdk android air_desktop_runtime linux_kernel flash_player_desktop_runtime chrome_os n/a

CWE ID-CWE-787

Out-of-bounds Write

CVE-2016-0985

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-58.64% / 98.23%

7 Day CHG~0.00%

Published-10 Feb, 2016 | 20:00

Updated-06 May, 2026 | 22:30

Vendor-n/a Apple Inc.Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-windows_10 mac_os_x windows_8.1 air_sdk_\&_compiler windows flash_player iphone_os air_sdk android air_desktop_runtime linux_kernel flash_player_desktop_runtime chrome_os n/a

CWE ID-CWE-843

Access of Resource Using Incompatible Type ('Type Confusion')

CVE-2016-0968

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-4.59% / 89.35%

7 Day CHG~0.00%

Published-10 Feb, 2016 | 20:00

Updated-06 May, 2026 | 22:30

Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and before 11.2.202.569 on Linux, Adobe AIR before 20.0.0.260, Adobe AIR SDK before 20.0.0.260, and Adobe AIR SDK & Compiler before 20.0.0.260 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-0964, CVE-2016-0965, CVE-2016-0966, CVE-2016-0967, CVE-2016-0969, CVE-2016-0970, CVE-2016-0972, CVE-2016-0976, CVE-2016-0977, CVE-2016-0978, CVE-2016-0979, CVE-2016-0980, and CVE-2016-0981.

Vendor-n/a Apple Inc.Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-windows_10 mac_os_x windows_8.1 air_sdk_\&_compiler windows flash_player iphone_os air_sdk android air_desktop_runtime linux_kernel flash_player_desktop_runtime chrome_os n/a

CWE ID-CWE-787

Out-of-bounds Write

CVE-2016-0971

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-64.53% / 98.47%

7 Day CHG~0.00%

Published-10 Feb, 2016 | 20:00

Updated-06 May, 2026 | 22:30

Heap-based buffer overflow in Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and before 11.2.202.569 on Linux, Adobe AIR before 20.0.0.260, Adobe AIR SDK before 20.0.0.260, and Adobe AIR SDK & Compiler before 20.0.0.260 allows attackers to execute arbitrary code via unspecified vectors.

Vendor-n/a Apple Inc.Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-windows_10 mac_os_x windows_8.1 air_sdk_\&_compiler windows flash_player iphone_os air_sdk android air_desktop_runtime linux_kernel flash_player_desktop_runtime chrome_os n/a

CWE ID-CWE-787

Out-of-bounds Write

CVE-2016-0986

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-4.44% / 89.16%

7 Day CHG~0.00%

Published-12 Mar, 2016 | 15:00

Updated-06 May, 2026 | 22:30

Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows and OS X and before 11.2.202.577 on Linux, Adobe AIR before 21.0.0.176, Adobe AIR SDK before 21.0.0.176, and Adobe AIR SDK & Compiler before 21.0.0.176 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-0960, CVE-2016-0961, CVE-2016-0962, CVE-2016-0989, CVE-2016-0992, CVE-2016-1002, and CVE-2016-1005.

Vendor-n/a Apple Inc.Samsung Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-windows_10 x14j_firmware mac_os_x windows_8.1 air air_sdk_\&_compiler windows flash_player iphone_os air_sdk android air_desktop_runtime linux_kernel flash_player_desktop_runtime chrome_os n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2015-8822

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-1.78% / 82.90%

7 Day CHG+0.91%

Published-04 Mar, 2016 | 23:00

Updated-06 May, 2026 | 22:30

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before 20.0.0.204, Adobe AIR SDK before 20.0.0.204, and Adobe AIR SDK & Compiler before 20.0.0.204 allows attackers to execute arbitrary code via crafted MPEG-4 data, a different vulnerability than CVE-2015-8048, CVE-2015-8049, CVE-2015-8050, CVE-2015-8055, CVE-2015-8056, CVE-2015-8057, CVE-2015-8058, CVE-2015-8059, CVE-2015-8061, CVE-2015-8062, CVE-2015-8063, CVE-2015-8064, CVE-2015-8065, CVE-2015-8066, CVE-2015-8067, CVE-2015-8068, CVE-2015-8069, CVE-2015-8070, CVE-2015-8071, CVE-2015-8401, CVE-2015-8402, CVE-2015-8403, CVE-2015-8404, CVE-2015-8405, CVE-2015-8406, CVE-2015-8410, CVE-2015-8411, CVE-2015-8412, CVE-2015-8413, CVE-2015-8414, CVE-2015-8420, CVE-2015-8421, CVE-2015-8422, CVE-2015-8423, CVE-2015-8424, CVE-2015-8425, CVE-2015-8426, CVE-2015-8427, CVE-2015-8428, CVE-2015-8429, CVE-2015-8430, CVE-2015-8431, CVE-2015-8432, CVE-2015-8433, CVE-2015-8434, CVE-2015-8435, CVE-2015-8436, CVE-2015-8437, CVE-2015-8441, CVE-2015-8442, CVE-2015-8447, CVE-2015-8448, CVE-2015-8449, CVE-2015-8450, CVE-2015-8452, CVE-2015-8454, CVE-2015-8653, CVE-2015-8655, and CVE-2015-8821.

Vendor-n/a Apple Inc.Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-windows_10 mac_os_x windows_8.1 air air_sdk_\&_compiler windows flash_player windows_8 air_sdk iphone_os android air_desktop_runtime linux_kernel flash_player_desktop_runtime chrome_os n/a

CWE ID-CWE-416

Use After Free

CVE-2015-8641

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-5.04% / 89.85%

7 Day CHG~0.00%

Published-28 Dec, 2015 | 23:00

Updated-06 May, 2026 | 22:30

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.324 and 19.x and 20.x before 20.0.0.267 on Windows and OS X and before 11.2.202.559 on Linux, Adobe AIR before 20.0.0.233, Adobe AIR SDK before 20.0.0.233, and Adobe AIR SDK & Compiler before 20.0.0.233 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-8634, CVE-2015-8635, CVE-2015-8638, CVE-2015-8639, CVE-2015-8640, CVE-2015-8642, CVE-2015-8643, CVE-2015-8646, CVE-2015-8647, CVE-2015-8648, CVE-2015-8649, and CVE-2015-8650.

Vendor-n/a Apple Inc.Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-mac_os_x air windows iphone_os flash_player air_sdk android linux_kernel air_sdk_\&_compiler n/a

CVE-2015-8436

Matching Score-8

Matching Score-8

CVSS Score-9.3||HIGH

EPSS-7.47% / 91.85%

7 Day CHG+1.47%

Published-10 Dec, 2015 | 02:00

Updated-06 May, 2026 | 22:30

Use-after-free vulnerability in the PrintJob object implementation in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before 20.0.0.204, Adobe AIR SDK before 20.0.0.204, and Adobe AIR SDK & Compiler before 20.0.0.204 allows attackers to execute arbitrary code via crafted addPage arguments, a different vulnerability than CVE-2015-8048, CVE-2015-8049, CVE-2015-8050, CVE-2015-8055, CVE-2015-8056, CVE-2015-8057, CVE-2015-8058, CVE-2015-8059, CVE-2015-8061, CVE-2015-8062, CVE-2015-8063, CVE-2015-8064, CVE-2015-8065, CVE-2015-8066, CVE-2015-8067, CVE-2015-8068, CVE-2015-8069, CVE-2015-8070, CVE-2015-8071, CVE-2015-8401, CVE-2015-8402, CVE-2015-8403, CVE-2015-8404, CVE-2015-8405, CVE-2015-8406, CVE-2015-8410, CVE-2015-8411, CVE-2015-8412, CVE-2015-8413, CVE-2015-8414, CVE-2015-8420, CVE-2015-8421, CVE-2015-8422, CVE-2015-8423, CVE-2015-8424, CVE-2015-8425, CVE-2015-8426, CVE-2015-8427, CVE-2015-8428, CVE-2015-8429, CVE-2015-8430, CVE-2015-8431, CVE-2015-8432, CVE-2015-8433, CVE-2015-8434, CVE-2015-8435, CVE-2015-8437, CVE-2015-8441, CVE-2015-8442, CVE-2015-8447, CVE-2015-8448, CVE-2015-8449, CVE-2015-8450, CVE-2015-8452, and CVE-2015-8454.

Vendor-n/a Apple Inc.Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-mac_os_x air windows flash_player iphone_os air_sdk android linux_kernel air_sdk_\&_compiler n/a

CVE-2015-8460

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-4.71% / 89.48%

7 Day CHG~0.00%

Published-28 Dec, 2015 | 23:00

Updated-06 May, 2026 | 22:30

Adobe Flash Player before 18.0.0.324 and 19.x and 20.x before 20.0.0.267 on Windows and OS X and before 11.2.202.559 on Linux, Adobe AIR before 20.0.0.233, Adobe AIR SDK before 20.0.0.233, and Adobe AIR SDK & Compiler before 20.0.0.233 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-8459, CVE-2015-8636, and CVE-2015-8645.

Vendor-n/a Apple Inc.Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-mac_os_x air windows flash_player iphone_os air_sdk android linux_kernel air_sdk_\&_compiler n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2015-8820

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-8.56% / 92.48%

7 Day CHG~0.00%

Published-04 Mar, 2016 | 23:00

Updated-06 May, 2026 | 22:30

Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before 20.0.0.204, Adobe AIR SDK before 20.0.0.204, and Adobe AIR SDK & Compiler before 20.0.0.204 allow attackers to execute arbitrary code or cause a denial of service (out-of-bounds read and memory corruption) via crafted MPEG-4 data, a different vulnerability than CVE-2015-8045, CVE-2015-8047, CVE-2015-8060, CVE-2015-8408, CVE-2015-8416, CVE-2015-8417, CVE-2015-8418, CVE-2015-8419, CVE-2015-8443, CVE-2015-8444, CVE-2015-8451, CVE-2015-8455, CVE-2015-8652, CVE-2015-8654, CVE-2015-8656, CVE-2015-8657, and CVE-2015-8658.

Vendor-n/a Apple Inc.Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-windows_10 mac_os_x windows_8.1 air air_sdk_\&_compiler windows flash_player windows_8 air_sdk iphone_os android air_desktop_runtime linux_kernel flash_player_desktop_runtime chrome_os n/a

CWE ID-CWE-787

Out-of-bounds Write

CVE-2015-0334

Matching Score-8

Matching Score-8

CVSS Score-9.3||HIGH

EPSS-5.02% / 89.82%

7 Day CHG~0.00%

Published-13 Mar, 2015 | 17:00

Updated-06 May, 2026 | 22:30

Adobe Flash Player before 13.0.0.277 and 14.x through 17.x before 17.0.0.134 on Windows and OS X and before 11.2.202.451 on Linux allows attackers to execute arbitrary code by leveraging an unspecified "type confusion," a different vulnerability than CVE-2015-0336.

Vendor-n/a Apple Inc.Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-flash_player windows linux_kernel mac_os_x n/a

CVE-2015-7651

Matching Score-8

Matching Score-8

CVSS Score-9.3||HIGH

EPSS-4.38% / 89.08%

7 Day CHG~0.00%

Published-11 Nov, 2015 | 11:00

Updated-06 May, 2026 | 22:30

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.261 and 19.x before 19.0.0.245 on Windows and OS X and before 11.2.202.548 on Linux, Adobe AIR before 19.0.0.241, Adobe AIR SDK before 19.0.0.241, and Adobe AIR SDK & Compiler before 19.0.0.241 allows attackers to execute arbitrary code via crafted DefineFunction atoms, a different vulnerability than CVE-2015-7652, CVE-2015-7653, CVE-2015-7654, CVE-2015-7655, CVE-2015-7656, CVE-2015-7657, CVE-2015-7658, CVE-2015-7660, CVE-2015-7661, CVE-2015-7663, CVE-2015-8042, CVE-2015-8043, CVE-2015-8044, and CVE-2015-8046.

Vendor-n/a Apple Inc.Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-mac_os_x air_sdk_\&_compiler windows flash_player iphone_os air_sdk android air linux_kernel n/a

CVE-2015-7653

Matching Score-8

Matching Score-8

CVSS Score-9.3||HIGH

EPSS-4.38% / 89.08%

7 Day CHG~0.00%

Published-11 Nov, 2015 | 11:00

Updated-06 May, 2026 | 22:30

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.261 and 19.x before 19.0.0.245 on Windows and OS X and before 11.2.202.548 on Linux, Adobe AIR before 19.0.0.241, Adobe AIR SDK before 19.0.0.241, and Adobe AIR SDK & Compiler before 19.0.0.241 allows attackers to execute arbitrary code via crafted globalToLocal arguments, a different vulnerability than CVE-2015-7651, CVE-2015-7652, CVE-2015-7654, CVE-2015-7655, CVE-2015-7656, CVE-2015-7657, CVE-2015-7658, CVE-2015-7660, CVE-2015-7661, CVE-2015-7663, CVE-2015-8042, CVE-2015-8043, CVE-2015-8044, and CVE-2015-8046.

Vendor-n/a Apple Inc.Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-mac_os_x air_sdk_\&_compiler windows flash_player iphone_os air_sdk android air linux_kernel n/a

CVE-2010-3644

Matching Score-8

Matching Score-8

Vendor-n/a Apple Inc.Sun Microsystems (Oracle Corporation)Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

CVSS Score-9.3||HIGH

EPSS-2.96% / 86.63%

7 Day CHG~0.00%

Published-07 Nov, 2010 | 21:00

Updated-29 Apr, 2026 | 01:13

Unspecified vulnerability in Adobe Flash Player before 9.0.289.0 and 10.x before 10.1.102.64 on Windows, Mac OS X, Linux, and Solaris, and 10.1.95.1 on Android, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unknown vectors, a different vulnerability than CVE-2010-3640, CVE-2010-3641, CVE-2010-3642, CVE-2010-3643, CVE-2010-3645, CVE-2010-3646, CVE-2010-3647, CVE-2010-3648, CVE-2010-3649, CVE-2010-3650, and CVE-2010-3652.

Product-mac_os_x solaris windows flash_player android linux_kernel n/a

CVE-2015-0305

Matching Score-8

Matching Score-8

CVSS Score-9.3||HIGH

EPSS-2.83% / 86.33%

7 Day CHG-0.02%

Published-13 Jan, 2015 | 23:00

Updated-06 May, 2026 | 22:30

Adobe Flash Player before 13.0.0.260 and 14.x through 16.x before 16.0.0.257 on Windows and OS X and before 11.2.202.429 on Linux, Adobe AIR before 16.0.0.245 on Windows and OS X and before 16.0.0.272 on Android, Adobe AIR SDK before 16.0.0.272, and Adobe AIR SDK & Compiler before 16.0.0.272 allow attackers to execute arbitrary code by leveraging an unspecified "type confusion."

Vendor-n/a Apple Inc.Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-adobe_air mac_os_x adobe_air_sdk windows flash_player linux_kernel adobe_air_sdk_and_compiler n/a

CVE-2015-0569

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-7.8||HIGH

EPSS-0.45% / 63.65%

7 Day CHG~0.00%

Published-09 May, 2016 | 10:00

Updated-06 May, 2026 | 22:30

Heap-based buffer overflow in the private wireless extensions IOCTL implementation in wlan_hdd_wext.c in the WLAN (aka Wi-Fi) driver for the Linux kernel 3.x and 4.x, as used in Qualcomm Innovation Center (QuIC) Android contributions for MSM devices and other products, allows attackers to gain privileges via a crafted application that establishes a packet filter.

Product-linux_kernel n/a

CWE ID-CWE-787

Out-of-bounds Write

CVE-2015-0571

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-7.8||HIGH

EPSS-0.10% / 27.32%

7 Day CHG~0.00%

Published-09 May, 2016 | 10:00

Updated-06 May, 2026 | 22:30

The WLAN (aka Wi-Fi) driver for the Linux kernel 3.x and 4.x, as used in Qualcomm Innovation Center (QuIC) Android contributions for MSM devices and other products, does not verify authorization for private SET IOCTL calls, which allows attackers to gain privileges via a crafted application, related to wlan_hdd_hostapd.c and wlan_hdd_wext.c.

Product-linux_kernel n/a

CWE ID-CWE-862

Missing Authorization

CVE-2015-0570

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-7.8||HIGH

EPSS-0.06% / 19.03%

7 Day CHG~0.00%

Published-09 May, 2016 | 10:00

Updated-06 May, 2026 | 22:30

Stack-based buffer overflow in the SET_WPS_IE IOCTL implementation in wlan_hdd_hostapd.c in the WLAN (aka Wi-Fi) driver for the Linux kernel 3.x and 4.x, as used in Qualcomm Innovation Center (QuIC) Android contributions for MSM devices and other products, allows attackers to gain privileges via a crafted application that uses a long WPS IE element.

Product-linux_kernel n/a

CWE ID-CWE-787

Out-of-bounds Write

CVE-2014-9922

Matching Score-8

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

Matching Score-8

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

CVSS Score-7.8||HIGH

EPSS-0.07% / 22.14%

7 Day CHG~0.00%

Published-04 Apr, 2017 | 04:54

Updated-13 May, 2026 | 00:24

The eCryptfs subsystem in the Linux kernel before 3.18 allows local users to gain privileges via a large filesystem stack that includes an overlayfs layer, related to fs/ecryptfs/main.c and fs/overlayfs/super.c.

Vendor-n/a Google LLC Linux Kernel Organization, Inc

Product-android linux_kernel n/a

CVE-2014-9870

Matching Score-8

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

Matching Score-8

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

CVSS Score-7.8||HIGH

EPSS-0.07% / 22.46%

7 Day CHG~0.00%

Published-06 Aug, 2016 | 10:00

Updated-06 May, 2026 | 22:30

The Linux kernel before 3.11 on ARM platforms, as used in Android before 2016-08-05 on Nexus 5 and 7 (2013) devices, does not properly consider user-space access to the TPIDRURW register, which allows local users to gain privileges via a crafted application, aka Android internal bug 28749743 and Qualcomm internal bug CR561044.

Vendor-n/a Google LLC Linux Kernel Organization, Inc

Product-android linux_kernel n/a

CVE-2014-9909

Matching Score-8

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

Matching Score-8

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

CVSS Score-7||HIGH

EPSS-0.04% / 12.31%

7 Day CHG~0.00%

Published-18 Jan, 2017 | 17:00

Updated-13 May, 2026 | 00:24

An elevation of privilege vulnerability in the Broadcom Wi-Fi driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: N/A. Android ID: A-31676542. References: B-RB#26684.

Vendor-Google LLC

Product-android Android

CVE-2014-9803

Matching Score-8

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

Matching Score-8

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

CVSS Score-7.8||HIGH

EPSS-0.14% / 33.95%

7 Day CHG~0.00%

Published-11 Jul, 2016 | 01:00

Updated-06 May, 2026 | 22:30

arch/arm64/include/asm/pgtable.h in the Linux kernel before 3.15-rc5-next-20140519, as used in Android before 2016-07-05 on Nexus 5X and 6P devices, mishandles execute-only pages, which allows attackers to gain privileges via a crafted application, aka Android internal bug 28557020.

Vendor-n/a Google LLC Linux Kernel Organization, Inc

Product-android linux_kernel n/a

CVE-2015-0336

Matching Score-8

Matching Score-8

CVSS Score-9.3||HIGH

EPSS-88.66% / 99.52%

7 Day CHG~0.00%

Published-13 Mar, 2015 | 17:00

Updated-06 May, 2026 | 22:30

Vendor-n/a Apple Inc.Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-flash_player windows linux_kernel mac_os_x n/a

CVE-2015-0312

Matching Score-8

Matching Score-8

CVSS Score-9.3||HIGH

EPSS-4.75% / 89.53%

7 Day CHG~0.00%

Published-28 Jan, 2015 | 22:00

Updated-06 May, 2026 | 22:30

Double free vulnerability in Adobe Flash Player before 13.0.0.264 and 14.x through 16.x before 16.0.0.296 on Windows and OS X and before 11.2.202.440 on Linux allows attackers to execute arbitrary code via unspecified vectors.

Vendor-n/a Apple Inc.Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-internet_explorer windows_8.1 windows_8 flash_player macos windows linux_kernel flash_player_desktop_runtime n/a

CWE ID-CWE-415

Double Free

CVE-2017-0510

Matching Score-8

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

Matching Score-8

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

CVSS Score-7.8||HIGH

EPSS-0.28% / 51.55%

7 Day CHG~0.00%

Published-08 Mar, 2017 | 01:00

Updated-13 May, 2026 | 00:24

An elevation of privilege vulnerability in the kernel FIQ debugger could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise, which may require reflashing the operating system to repair the device. Product: Android. Versions: Kernel-3.10. Android ID: A-32402555.

Vendor-Google LLC Linux Kernel Organization, Inc

Product-linux_kernel Android

CVE-2017-0430

Matching Score-8

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

Matching Score-8

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

CVSS Score-7.8||HIGH

EPSS-0.08% / 23.08%

7 Day CHG~0.00%

Published-08 Feb, 2017 | 15:00

Updated-13 May, 2026 | 00:24

An elevation of privilege vulnerability in the Broadcom Wi-Fi driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise, which may require reflashing the operating system to repair the device. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-32838767. References: B-RB#107459.

Vendor-Google LLC Linux Kernel Organization, Inc

Product-android linux_kernel Android

CVE-2019-7837

Matching Score-8

Matching Score-8

Vendor-Google LLC Adobe Inc.Red Hat, Inc.Apple Inc.Microsoft Corporation Linux Kernel Organization, Inc

CVSS Score-8.8||HIGH

EPSS-2.21% / 84.64%

7 Day CHG~0.00%

Published-22 May, 2019 | 18:08

Updated-04 Aug, 2024 | 21:02

Adobe Flash Player versions 32.0.0.171 and earlier, 32.0.0.171 and earlier, and 32.0.0.171 and earlier have a use after free vulnerability. Successful exploitation could lead to arbitrary code execution.

Product-enterprise_linux_server linux_kernel windows_8.1 enterprise_linux_workstation chrome_os mac_os_x windows flash_player_desktop_runtime windows_10 enterprise_linux_desktop flash_player Adobe Flash Player

CWE ID-CWE-416

Use After Free

CVE-2014-0507

Matching Score-8

Matching Score-8

CVSS Score-9.3||HIGH

EPSS-3.98% / 88.52%

7 Day CHG~0.00%

Published-08 Apr, 2014 | 21:00

Updated-06 May, 2026 | 22:30

Buffer overflow in Adobe Flash Player before 11.7.700.275 and 11.8.x through 13.0.x before 13.0.0.182 on Windows and OS X and before 11.2.202.350 on Linux, Adobe AIR before 13.0.0.83 on Android, Adobe AIR SDK before 13.0.0.83, and Adobe AIR SDK & Compiler before 13.0.0.83 allows attackers to execute arbitrary code via unspecified vectors.

Vendor-n/a Apple Inc.Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-adobe_air mac_os_x adobe_air_sdk windows flash_player linux_kernel n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2014-0569

Matching Score-8

Matching Score-8

CVSS Score-9.3||HIGH

EPSS-89.01% / 99.54%

7 Day CHG~0.00%

Published-15 Oct, 2014 | 10:00

Updated-06 May, 2026 | 22:30

Integer overflow in Adobe Flash Player before 13.0.0.250 and 14.x and 15.x before 15.0.0.189 on Windows and OS X and before 11.2.202.411 on Linux, Adobe AIR before 15.0.0.293, Adobe AIR SDK before 15.0.0.302, and Adobe AIR SDK & Compiler before 15.0.0.302 allows attackers to execute arbitrary code via unspecified vectors.

Vendor-n/a Apple Inc.openSUSE Google LLC Linux Kernel Organization, Inc SUSE Microsoft Corporation Adobe Inc.

Product-evergreen linux_enterprise_desktop windows_8.1 windows_8 windows flash_player macos air_sdk iphone_os android air_desktop_runtime linux_kernel flash_player_desktop_runtime opensuse n/a

CWE ID-CWE-190

Integer Overflow or Wraparound

CVE-2014-0100

Matching Score-8

Assigner-Red Hat, Inc.

Matching Score-8

Assigner-Red Hat, Inc.

CVSS Score-9.3||HIGH

EPSS-0.50% / 66.00%

7 Day CHG~0.00%

Published-11 Mar, 2014 | 01:00

Updated-06 May, 2026 | 22:30

Race condition in the inet_frag_intern function in net/ipv4/inet_fragment.c in the Linux kernel through 3.13.6 allows remote attackers to cause a denial of service (use-after-free error) or possibly have unspecified other impact via a large series of fragmented ICMP Echo Request packets to a system with a heavy CPU load.

Product-linux_kernel n/a

CWE ID-CWE-362

Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

CWE ID-CWE-416

Use After Free

CVE-2017-0671

Matching Score-8

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

Matching Score-8

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

CVSS Score-7.8||HIGH

EPSS-0.22% / 45.12%

7 Day CHG~0.00%

Published-06 Jul, 2017 | 20:00

Updated-13 May, 2026 | 00:24

A remote code execution vulnerability in the Android libraries. Product: Android. Versions: 4.4.4. Android ID: A-34514762.

Vendor-Google LLC

Product-android Android

CVE-2013-5331

Matching Score-8

Matching Score-8

CVSS Score-9.3||HIGH

EPSS-87.37% / 99.47%

7 Day CHG~0.00%

Published-11 Dec, 2013 | 15:00

Updated-29 Apr, 2026 | 01:13

Adobe Flash Player before 11.7.700.257 and 11.8.x and 11.9.x before 11.9.900.170 on Windows and Mac OS X and before 11.2.202.332 on Linux, Adobe AIR before 3.9.0.1380, Adobe AIR SDK before 3.9.0.1380, and Adobe AIR SDK & Compiler before 3.9.0.1380 allow remote attackers to execute arbitrary code via crafted .swf content that leverages an unspecified "type confusion," as exploited in the wild in December 2013.

Vendor-n/a Apple Inc.Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-mac_os_x windows flash_player air_sdk air linux_kernel n/a

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2013-0633

Matching Score-8

Matching Score-8

CVSS Score-9.3||HIGH

EPSS-58.93% / 98.24%

7 Day CHG~0.00%

Published-08 Feb, 2013 | 11:00

Updated-29 Apr, 2026 | 01:13

Buffer overflow in Adobe Flash Player before 10.3.183.51 and 11.x before 11.5.502.149 on Windows and Mac OS X, before 10.3.183.51 and 11.x before 11.2.202.262 on Linux, before 11.1.111.32 on Android 2.x and 3.x, and before 11.1.115.37 on Android 4.x allows remote attackers to execute arbitrary code via crafted SWF content, as exploited in the wild in February 2013.

Vendor-n/a Apple Inc.Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-mac_os_x windows flash_player android linux_kernel n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2013-0640

Matching Score-8

Matching Score-8

Product-acrobat acrobat_reader linux_enterprise_desktop mac_os_x enterprise_linux_server enterprise_linux_workstation enterprise_linux_desktop windows enterprise_linux_server_aus enterprise_linux_eus linux_kernel opensuse n/a Reader and Acrobat

CVSS Score-7.8||HIGH

EPSS-92.36% / 99.73%

7 Day CHG~0.00%

Published-14 Feb, 2013 | 01:00

Updated-21 Apr, 2026 | 21:01

Known KEV||Action Due Date - 2022-03-24||Apply updates per vendor instructions.

Adobe Reader and Acrobat 9.x before 9.5.4, 10.x before 10.1.6, and 11.x before 11.0.02 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted PDF document, as exploited in the wild in February 2013.

Vendor-n/a Apple Inc.openSUSE Linux Kernel Organization, Inc SUSE Red Hat, Inc.Microsoft Corporation Adobe Inc.

CWE ID-CWE-787

Out-of-bounds Write

CVE-2013-0634

Matching Score-8

Matching Score-8

CVSS Score-9.3||HIGH

EPSS-90.34% / 99.61%

7 Day CHG~0.00%

Published-08 Feb, 2013 | 11:00

Updated-29 Apr, 2026 | 01:13

Adobe Flash Player before 10.3.183.51 and 11.x before 11.5.502.149 on Windows and Mac OS X, before 10.3.183.51 and 11.x before 11.2.202.262 on Linux, before 11.1.111.32 on Android 2.x and 3.x, and before 11.1.115.37 on Android 4.x allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted SWF content, as exploited in the wild in February 2013.

Vendor-n/a Apple Inc.Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-mac_os_x windows flash_player android linux_kernel n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2013-0641

Matching Score-8

Matching Score-8

CVSS Score-7.8||HIGH

EPSS-87.96% / 99.49%

7 Day CHG~0.00%

Published-14 Feb, 2013 | 01:00

Updated-21 Apr, 2026 | 21:01

Known KEV||Action Due Date - 2022-03-24||Apply updates per vendor instructions.

Buffer overflow in Adobe Reader and Acrobat 9.x before 9.5.4, 10.x before 10.1.6, and 11.x before 11.0.02 allows remote attackers to execute arbitrary code via a crafted PDF document, as exploited in the wild in February 2013.

Vendor-n/a Apple Inc.openSUSE Linux Kernel Organization, Inc SUSE Red Hat, Inc.Microsoft Corporation Adobe Inc.

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2021-42631

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-8.1||HIGH

EPSS-20.57% / 95.65%

7 Day CHG~0.00%

Published-31 Jan, 2022 | 17:48

Updated-04 Aug, 2024 | 03:38

PrinterLogic Web Stack versions 19.1.1.13 SP9 and below deserializes attacker controlled leading to pre-auth remote code execution.

Vendor-printerlogic n/a Linux Kernel Organization, Inc Apple Inc.

Product-virtual_appliance macos linux_kernel web_stack n/a

CWE ID-CWE-502

Deserialization of Untrusted Data

CVE-2018-4920

Matching Score-8

Matching Score-8

Product-linux_kernel windows_8.1 chrome_os mac_os_x windows flash_player_desktop_runtime windows_10 flash_player Adobe Flash Player 28.0.0.161 and earlier versions

CVSS Score-8.8||HIGH

EPSS-7.19% / 91.66%

7 Day CHG~0.00%

Published-19 May, 2018 | 17:00

Updated-05 Aug, 2024 | 05:18

Adobe Flash Player versions 28.0.0.161 and earlier have an exploitable type confusion vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the current user.

Vendor-n/a Google LLC Adobe Inc.Apple Inc.Microsoft Corporation Linux Kernel Organization, Inc

CWE ID-CWE-843

Access of Resource Using Incompatible Type ('Type Confusion')

CVE-2003-1327

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-9.3||HIGH

EPSS-1.36% / 80.34%

7 Day CHG~0.00%

Published-15 May, 2007 | 10:00

Updated-16 Apr, 2026 | 00:27

Buffer overflow in the SockPrintf function in wu-ftpd 2.6.2 and earlier, when compiled with MAIL_ADMIN option enabled on a system that supports very long pathnames, might allow remote anonymous users to execute arbitrary code by uploading a file with a long pathname, which triggers the overflow when wu-ftpd constructs a notification message to the administrator.

Vendor-washington_university n/a Linux Kernel Organization, Inc

Product-linux_kernel wu-ftpd n/a

CVE-2007-0653

Matching Score-8

Assigner-Flexera Software LLC

Matching Score-8

Assigner-Flexera Software LLC

CVSS Score-9.3||HIGH

EPSS-20.07% / 95.55%

7 Day CHG~0.00%

Published-21 Mar, 2007 | 22:00

Updated-23 Apr, 2026 | 00:35

Integer overflow in X MultiMedia System (xmms) 1.2.10, and possibly other versions, allows user-assisted remote attackers to execute arbitrary code via crafted header information in a skin bitmap image, which triggers memory corruption.

Vendor-x_multimedia_system n/a Linux Kernel Organization, Inc

Product-x_multimedia_system linux_kernel n/a

CVE-2012-3967

Matching Score-8

Assigner-MITRE Corporation

Product-thunderbird firefox ubuntu_linux seamonkey linux_enterprise_desktop enterprise_linux_server enterprise_linux_workstation thunderbird_esr enterprise_linux_desktop linux_enterprise_server enterprise_linux_eus linux_kernel linux_enterprise_software_development_kit opensuse n/a

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-9.3||HIGH

EPSS-0.59% / 69.46%

7 Day CHG~0.00%

Published-29 Aug, 2012 | 10:00

Updated-29 Apr, 2026 | 01:13

The WebGL implementation in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMonkey before 2.12 on Linux, when a large number of sampler uniforms are used, does not properly interact with Mesa drivers, which allows remote attackers to execute arbitrary code or cause a denial of service (stack memory corruption) via a crafted web site.

Vendor-n/a Canonical Ltd.openSUSE Linux Kernel Organization, Inc SUSE Red Hat, Inc.Mozilla Corporation

CWE ID-CWE-787

Out-of-bounds Write

CVE-2022-1030

Matching Score-8

Assigner-Okta