CVE-2016-9842 | ByteOS Network

Vulnerability Details :

CVE-2016-9842

Assigner-microfocus

Assigner Org ID-f81092c5-7f14-476d-80dc-24857f90be84

Published At-23 May, 2017 | 03:56

Updated At-06 Aug, 2024 | 02:59

The inflateMark function in inflate.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact via vectors involving left shifts of negative integers.

EPSS History

Score

Latest Score

-

N/A

Percentile

Latest Percentile

-

N/A

▼Common Vulnerabilities and Exposures (CVE)

Assigner:microfocus

Assigner Org ID:f81092c5-7f14-476d-80dc-24857f90be84

Published At:23 May, 2017 | 03:56

Updated At:06 Aug, 2024 | 02:59

▼CVE Numbering Authority (CNA)

The inflateMark function in inflate.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact via vectors involving left shifts of negative integers.

Affected Products

Vendor

Product

Versions

Affected

n/a

Problem Types

Type	CWE ID	Description
text	N/A	n/a

Type: text

CWE ID: N/A

Description: n/a

References

Hyperlink	Resource
https://access.redhat.com/errata/RHSA-2017:1221	vendor-advisory x_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2017:1220	vendor-advisory x_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2017:3047	vendor-advisory x_refsource_REDHAT
http://www.openwall.com/lists/oss-security/2016/12/05/21	mailing-list x_refsource_MLIST
http://www.securityfocus.com/bid/95131	vdb-entry x_refsource_BID
https://access.redhat.com/errata/RHSA-2017:3046	vendor-advisory x_refsource_REDHAT
http://lists.opensuse.org/opensuse-updates/2017-01/msg00050.html	vendor-advisory x_refsource_SUSE
https://security.gentoo.org/glsa/201701-56	vendor-advisory x_refsource_GENTOO
http://www.securitytracker.com/id/1039427	vdb-entry x_refsource_SECTRACK
https://access.redhat.com/errata/RHSA-2017:1222	vendor-advisory x_refsource_REDHAT
http://lists.opensuse.org/opensuse-updates/2017-01/msg00053.html	vendor-advisory x_refsource_SUSE
https://access.redhat.com/errata/RHSA-2017:3453	vendor-advisory x_refsource_REDHAT
http://lists.opensuse.org/opensuse-updates/2016-12/msg00127.html	vendor-advisory x_refsource_SUSE
https://access.redhat.com/errata/RHSA-2017:2999	vendor-advisory x_refsource_REDHAT
https://lists.debian.org/debian-lts-announce/2019/03/msg00027.html	mailing-list x_refsource_MLIST
https://usn.ubuntu.com/4246-1/	vendor-advisory x_refsource_UBUNTU
https://lists.debian.org/debian-lts-announce/2020/01/msg00030.html	mailing-list x_refsource_MLIST
https://usn.ubuntu.com/4292-1/	vendor-advisory x_refsource_UBUNTU
http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html	x_refsource_CONFIRM
https://www.oracle.com/security-alerts/cpujul2020.html	x_refsource_MISC
http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html	x_refsource_CONFIRM
https://support.apple.com/HT208144	x_refsource_CONFIRM
https://wiki.mozilla.org/MOSS/Secure_Open_Source/Completed#zlib	x_refsource_MISC
https://support.apple.com/HT208113	x_refsource_CONFIRM
https://support.apple.com/HT208112	x_refsource_CONFIRM
https://support.apple.com/HT208115	x_refsource_CONFIRM
https://wiki.mozilla.org/images/0/09/Zlib-report.pdf	x_refsource_MISC
https://bugzilla.redhat.com/show_bug.cgi?id=1402348	x_refsource_CONFIRM
https://github.com/madler/zlib/commit/e54e1299404101a5a9d0cf5e45512b543967f958	x_refsource_CONFIRM
https://security.gentoo.org/glsa/202007-54	vendor-advisory x_refsource_GENTOO

Hyperlink: https://access.redhat.com/errata/RHSA-2017:1221

Resource:

vendor-advisory

x_refsource_REDHAT

Hyperlink: https://access.redhat.com/errata/RHSA-2017:1220

Resource:

vendor-advisory

x_refsource_REDHAT

Hyperlink: https://access.redhat.com/errata/RHSA-2017:3047

Resource:

vendor-advisory

x_refsource_REDHAT

Hyperlink: http://www.openwall.com/lists/oss-security/2016/12/05/21

Resource:

mailing-list

x_refsource_MLIST

Hyperlink: http://www.securityfocus.com/bid/95131

Resource:

vdb-entry

x_refsource_BID

Hyperlink: https://access.redhat.com/errata/RHSA-2017:3046

Resource:

vendor-advisory

x_refsource_REDHAT

Hyperlink: http://lists.opensuse.org/opensuse-updates/2017-01/msg00050.html

Resource:

vendor-advisory

x_refsource_SUSE

Hyperlink: https://security.gentoo.org/glsa/201701-56

Resource:

vendor-advisory

x_refsource_GENTOO

Hyperlink: http://www.securitytracker.com/id/1039427

Resource:

vdb-entry

x_refsource_SECTRACK

Hyperlink: https://access.redhat.com/errata/RHSA-2017:1222

Resource:

vendor-advisory

x_refsource_REDHAT

Hyperlink: http://lists.opensuse.org/opensuse-updates/2017-01/msg00053.html

Resource:

vendor-advisory

x_refsource_SUSE

Hyperlink: https://access.redhat.com/errata/RHSA-2017:3453

Resource:

vendor-advisory

x_refsource_REDHAT

Hyperlink: http://lists.opensuse.org/opensuse-updates/2016-12/msg00127.html

Resource:

vendor-advisory

x_refsource_SUSE

Hyperlink: https://access.redhat.com/errata/RHSA-2017:2999

Resource:

vendor-advisory

x_refsource_REDHAT

Hyperlink: https://lists.debian.org/debian-lts-announce/2019/03/msg00027.html

Resource:

mailing-list

x_refsource_MLIST

Hyperlink: https://usn.ubuntu.com/4246-1/

Resource:

vendor-advisory

x_refsource_UBUNTU

Hyperlink: https://lists.debian.org/debian-lts-announce/2020/01/msg00030.html

Resource:

mailing-list

x_refsource_MLIST

Hyperlink: https://usn.ubuntu.com/4292-1/

Resource:

vendor-advisory

x_refsource_UBUNTU

Hyperlink: http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html

Resource:

x_refsource_CONFIRM

Hyperlink: https://www.oracle.com/security-alerts/cpujul2020.html

Resource:

x_refsource_MISC

Hyperlink: http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html

Resource:

x_refsource_CONFIRM

Hyperlink: https://support.apple.com/HT208144

Resource:

x_refsource_CONFIRM

Hyperlink: https://wiki.mozilla.org/MOSS/Secure_Open_Source/Completed#zlib

Resource:

x_refsource_MISC

Hyperlink: https://support.apple.com/HT208113

Resource:

x_refsource_CONFIRM

Hyperlink: https://support.apple.com/HT208112

Resource:

x_refsource_CONFIRM

Hyperlink: https://support.apple.com/HT208115

Resource:

x_refsource_CONFIRM

Hyperlink: https://wiki.mozilla.org/images/0/09/Zlib-report.pdf

Resource:

x_refsource_MISC

Hyperlink: https://bugzilla.redhat.com/show_bug.cgi?id=1402348

Resource:

x_refsource_CONFIRM

Hyperlink: https://github.com/madler/zlib/commit/e54e1299404101a5a9d0cf5e45512b543967f958

Resource:

x_refsource_CONFIRM

Hyperlink: https://security.gentoo.org/glsa/202007-54

Resource:

vendor-advisory

x_refsource_GENTOO

▼Authorized Data Publishers (ADP)

CVE Program Container

References

Hyperlink	Resource
https://access.redhat.com/errata/RHSA-2017:1221	vendor-advisory x_refsource_REDHAT x_transferred
https://access.redhat.com/errata/RHSA-2017:1220	vendor-advisory x_refsource_REDHAT x_transferred
https://access.redhat.com/errata/RHSA-2017:3047	vendor-advisory x_refsource_REDHAT x_transferred
http://www.openwall.com/lists/oss-security/2016/12/05/21	mailing-list x_refsource_MLIST x_transferred
http://www.securityfocus.com/bid/95131	vdb-entry x_refsource_BID x_transferred
https://access.redhat.com/errata/RHSA-2017:3046	vendor-advisory x_refsource_REDHAT x_transferred
http://lists.opensuse.org/opensuse-updates/2017-01/msg00050.html	vendor-advisory x_refsource_SUSE x_transferred
https://security.gentoo.org/glsa/201701-56	vendor-advisory x_refsource_GENTOO x_transferred
http://www.securitytracker.com/id/1039427	vdb-entry x_refsource_SECTRACK x_transferred
https://access.redhat.com/errata/RHSA-2017:1222	vendor-advisory x_refsource_REDHAT x_transferred
http://lists.opensuse.org/opensuse-updates/2017-01/msg00053.html	vendor-advisory x_refsource_SUSE x_transferred
https://access.redhat.com/errata/RHSA-2017:3453	vendor-advisory x_refsource_REDHAT x_transferred
http://lists.opensuse.org/opensuse-updates/2016-12/msg00127.html	vendor-advisory x_refsource_SUSE x_transferred
https://access.redhat.com/errata/RHSA-2017:2999	vendor-advisory x_refsource_REDHAT x_transferred
https://lists.debian.org/debian-lts-announce/2019/03/msg00027.html	mailing-list x_refsource_MLIST x_transferred
https://usn.ubuntu.com/4246-1/	vendor-advisory x_refsource_UBUNTU x_transferred
https://lists.debian.org/debian-lts-announce/2020/01/msg00030.html	mailing-list x_refsource_MLIST x_transferred
https://usn.ubuntu.com/4292-1/	vendor-advisory x_refsource_UBUNTU x_transferred
http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html	x_refsource_CONFIRM x_transferred
https://www.oracle.com/security-alerts/cpujul2020.html	x_refsource_MISC x_transferred
http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html	x_refsource_CONFIRM x_transferred
https://support.apple.com/HT208144	x_refsource_CONFIRM x_transferred
https://wiki.mozilla.org/MOSS/Secure_Open_Source/Completed#zlib	x_refsource_MISC x_transferred
https://support.apple.com/HT208113	x_refsource_CONFIRM x_transferred
https://support.apple.com/HT208112	x_refsource_CONFIRM x_transferred
https://support.apple.com/HT208115	x_refsource_CONFIRM x_transferred
https://wiki.mozilla.org/images/0/09/Zlib-report.pdf	x_refsource_MISC x_transferred
https://bugzilla.redhat.com/show_bug.cgi?id=1402348	x_refsource_CONFIRM x_transferred
https://github.com/madler/zlib/commit/e54e1299404101a5a9d0cf5e45512b543967f958	x_refsource_CONFIRM x_transferred
https://security.gentoo.org/glsa/202007-54	vendor-advisory x_refsource_GENTOO x_transferred

Hyperlink: https://access.redhat.com/errata/RHSA-2017:1221

Resource:

vendor-advisory

x_refsource_REDHAT

x_transferred

Hyperlink: https://access.redhat.com/errata/RHSA-2017:1220

Resource:

vendor-advisory

x_refsource_REDHAT

x_transferred

Hyperlink: https://access.redhat.com/errata/RHSA-2017:3047

Resource:

vendor-advisory

x_refsource_REDHAT

x_transferred

Hyperlink: http://www.openwall.com/lists/oss-security/2016/12/05/21

Resource:

mailing-list

x_refsource_MLIST

x_transferred

Hyperlink: http://www.securityfocus.com/bid/95131

Resource:

vdb-entry

x_refsource_BID

x_transferred

Hyperlink: https://access.redhat.com/errata/RHSA-2017:3046

Resource:

vendor-advisory

x_refsource_REDHAT

x_transferred

Hyperlink: http://lists.opensuse.org/opensuse-updates/2017-01/msg00050.html

Resource:

vendor-advisory

x_refsource_SUSE

x_transferred

Hyperlink: https://security.gentoo.org/glsa/201701-56

Resource:

vendor-advisory

x_refsource_GENTOO

x_transferred

Hyperlink: http://www.securitytracker.com/id/1039427

Resource:

vdb-entry

x_refsource_SECTRACK

x_transferred

Hyperlink: https://access.redhat.com/errata/RHSA-2017:1222

Resource:

vendor-advisory

x_refsource_REDHAT

x_transferred

Hyperlink: http://lists.opensuse.org/opensuse-updates/2017-01/msg00053.html

Resource:

vendor-advisory

x_refsource_SUSE

x_transferred

Hyperlink: https://access.redhat.com/errata/RHSA-2017:3453

Resource:

vendor-advisory

x_refsource_REDHAT

x_transferred

Hyperlink: http://lists.opensuse.org/opensuse-updates/2016-12/msg00127.html

Resource:

vendor-advisory

x_refsource_SUSE

x_transferred

Hyperlink: https://access.redhat.com/errata/RHSA-2017:2999

Resource:

vendor-advisory

x_refsource_REDHAT

x_transferred

Hyperlink: https://lists.debian.org/debian-lts-announce/2019/03/msg00027.html

Resource:

mailing-list

x_refsource_MLIST

x_transferred

Hyperlink: https://usn.ubuntu.com/4246-1/

Resource:

vendor-advisory

x_refsource_UBUNTU

x_transferred

Hyperlink: https://lists.debian.org/debian-lts-announce/2020/01/msg00030.html

Resource:

mailing-list

x_refsource_MLIST

x_transferred

Hyperlink: https://usn.ubuntu.com/4292-1/

Resource:

vendor-advisory

x_refsource_UBUNTU

x_transferred

Hyperlink: http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html

Resource:

x_refsource_CONFIRM

x_transferred

Hyperlink: https://www.oracle.com/security-alerts/cpujul2020.html

Resource:

x_refsource_MISC

x_transferred

Hyperlink: http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html

Resource:

x_refsource_CONFIRM

x_transferred

Hyperlink: https://support.apple.com/HT208144

Resource:

x_refsource_CONFIRM

x_transferred

Hyperlink: https://wiki.mozilla.org/MOSS/Secure_Open_Source/Completed#zlib

Resource:

x_refsource_MISC

x_transferred

Hyperlink: https://support.apple.com/HT208113

Resource:

x_refsource_CONFIRM

x_transferred

Hyperlink: https://support.apple.com/HT208112

Resource:

x_refsource_CONFIRM

x_transferred

Hyperlink: https://support.apple.com/HT208115

Resource:

x_refsource_CONFIRM

x_transferred

Hyperlink: https://wiki.mozilla.org/images/0/09/Zlib-report.pdf

Resource:

x_refsource_MISC

x_transferred

Hyperlink: https://bugzilla.redhat.com/show_bug.cgi?id=1402348

Resource:

x_refsource_CONFIRM

x_transferred

Hyperlink: https://github.com/madler/zlib/commit/e54e1299404101a5a9d0cf5e45512b543967f958

Resource:

x_refsource_CONFIRM

x_transferred

Hyperlink: https://security.gentoo.org/glsa/202007-54

Resource:

vendor-advisory

x_refsource_GENTOO

x_transferred

▼National Vulnerability Database (NVD)

Source:security@opentext.com

Published At:23 May, 2017 | 04:29

Updated At:20 Apr, 2025 | 01:37

The inflateMark function in inflate.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact via vectors involving left shifts of negative integers.

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.1	8.8	HIGH	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Primary	2.0	6.8	MEDIUM	AV:N/AC:M/Au:N/C:P/I:P/A:P

Type: Primary

Version: 3.1

Base score: 8.8

Base severity: HIGH

Vector:

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Type: Primary

Version: 2.0

Base score: 6.8

Base severity: MEDIUM

Vector:

AV:N/AC:M/Au:N/C:P/I:P/A:P

CPE Matches

zlib>>zlib>>Versions from 1.2.3.4(inclusive) to 1.2.9(exclusive)

cpe:2.3:a:zlib:zlib:*:*:*:*:*:*:*:*

>>leap>>42.1

cpe:2.3:o:opensuse:leap:42.1:*:*:*:*:*:*:*

>>leap>>42.2

cpe:2.3:o:opensuse:leap:42.2:*:*:*:*:*:*:*

>>opensuse>>13.2

cpe:2.3:o:opensuse:opensuse:13.2:*:*:*:*:*:*:*

Debian GNU/Linux

>>debian_linux>>8.0

cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*

>>ubuntu_linux>>16.04

cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:esm:*:*:*

>>ubuntu_linux>>18.04

cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:esm:*:*:*

Oracle Corporation

>>database_server>>18c

cpe:2.3:a:oracle:database_server:18c:*:*:*:*:*:*:*

Oracle Corporation

>>jdk>>1.6.0

cpe:2.3:a:oracle:jdk:1.6.0:update161:*:*:*:*:*:*

Oracle Corporation

>>jdk>>1.7.0

cpe:2.3:a:oracle:jdk:1.7.0:update151:*:*:*:*:*:*

Oracle Corporation

>>jdk>>1.8.0

cpe:2.3:a:oracle:jdk:1.8.0:update144:*:*:*:*:*:*

Oracle Corporation

>>jre>>1.6.0

cpe:2.3:a:oracle:jre:1.6.0:update161:*:*:*:*:*:*

Oracle Corporation

>>jre>>1.7.0

cpe:2.3:a:oracle:jre:1.7.0:update151:*:*:*:*:*:*

Oracle Corporation

>>jre>>1.8.0

cpe:2.3:a:oracle:jre:1.8.0:update144:*:*:*:*:*:*

Oracle Corporation

>>mysql>>Versions from 5.5.0(inclusive) to 5.5.61(inclusive)

cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*

Oracle Corporation

>>mysql>>Versions from 5.6.0(inclusive) to 5.6.41(inclusive)

cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*

Oracle Corporation

>>mysql>>Versions from 5.7.0(inclusive) to 5.7.23(inclusive)

cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*

Oracle Corporation

>>mysql>>Versions from 8.0.0(inclusive) to 8.0.12(inclusive)

cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*

>>satellite>>5.8

cpe:2.3:a:redhat:satellite:5.8:*:*:*:*:*:*:*

>>enterprise_linux_desktop>>6.0

cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*

>>enterprise_linux_desktop>>7.0

cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*

>>enterprise_linux_eus>>7.4

cpe:2.3:o:redhat:enterprise_linux_eus:7.4:*:*:*:*:*:*:*

>>enterprise_linux_eus>>7.5

cpe:2.3:o:redhat:enterprise_linux_eus:7.5:*:*:*:*:*:*:*

>>enterprise_linux_server>>6.0

cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*

>>enterprise_linux_server>>7.0

cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*

>>enterprise_linux_workstation>>6.0

cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*

>>enterprise_linux_workstation>>7.0

cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*

>>iphone_os>>Versions before 11(exclusive)

cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*

>>mac_os_x>>Versions from 10.0.0(inclusive) to 10.13.0(exclusive)

cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*

>>tvos>>Versions before 11.0(exclusive)

cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*

>>watchos>>Versions before 4(exclusive)

cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*

Node.js (OpenJS Foundation)

>>node.js>>Versions from 4.0.0(inclusive) to 4.1.2(inclusive)

cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:*

Node.js (OpenJS Foundation)

>>node.js>>Versions from 4.2.0(inclusive) to 4.8.2(exclusive)

cpe:2.3:a:nodejs:node.js:*:*:*:*:lts:*:*:*

Node.js (OpenJS Foundation)

>>node.js>>Versions from 6.0.0(inclusive) to 6.8.1(inclusive)

cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:*

Node.js (OpenJS Foundation)

>>node.js>>Versions from 6.9.0(inclusive) to 6.10.2(exclusive)

cpe:2.3:a:nodejs:node.js:*:*:*:*:lts:*:*:*

Node.js (OpenJS Foundation)

>>node.js>>Versions from 7.0.0(inclusive) to 7.6.0(exclusive)

cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:*

Weaknesses

CWE ID	Type	Source
NVD-CWE-noinfo	Primary	nvd@nist.gov

CWE ID: NVD-CWE-noinfo

Type: Primary

Source: nvd@nist.gov

References

Hyperlink	Source	Resource
http://lists.opensuse.org/opensuse-updates/2016-12/msg00127.html	security@opentext.com	Broken Link
http://lists.opensuse.org/opensuse-updates/2017-01/msg00050.html	security@opentext.com	Broken Link
http://lists.opensuse.org/opensuse-updates/2017-01/msg00053.html	security@opentext.com	Broken Link
http://www.openwall.com/lists/oss-security/2016/12/05/21	security@opentext.com	Mailing List Patch
http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html	security@opentext.com	Third Party Advisory
http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html	security@opentext.com	Third Party Advisory
http://www.securityfocus.com/bid/95131	security@opentext.com	Broken Link Third Party Advisory VDB Entry
http://www.securitytracker.com/id/1039427	security@opentext.com	Broken Link Third Party Advisory VDB Entry
https://access.redhat.com/errata/RHSA-2017:1220	security@opentext.com	Third Party Advisory
https://access.redhat.com/errata/RHSA-2017:1221	security@opentext.com	Third Party Advisory
https://access.redhat.com/errata/RHSA-2017:1222	security@opentext.com	Third Party Advisory
https://access.redhat.com/errata/RHSA-2017:2999	security@opentext.com	Third Party Advisory
https://access.redhat.com/errata/RHSA-2017:3046	security@opentext.com	Third Party Advisory
https://access.redhat.com/errata/RHSA-2017:3047	security@opentext.com	Third Party Advisory
https://access.redhat.com/errata/RHSA-2017:3453	security@opentext.com	Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1402348	security@opentext.com	Issue Tracking Patch
https://github.com/madler/zlib/commit/e54e1299404101a5a9d0cf5e45512b543967f958	security@opentext.com	Patch
https://lists.debian.org/debian-lts-announce/2019/03/msg00027.html	security@opentext.com	Mailing List Third Party Advisory
https://lists.debian.org/debian-lts-announce/2020/01/msg00030.html	security@opentext.com	Mailing List Third Party Advisory
https://security.gentoo.org/glsa/201701-56	security@opentext.com	Third Party Advisory
https://security.gentoo.org/glsa/202007-54	security@opentext.com	Third Party Advisory
https://support.apple.com/HT208112	security@opentext.com	Third Party Advisory
https://support.apple.com/HT208113	security@opentext.com	Third Party Advisory
https://support.apple.com/HT208115	security@opentext.com	Third Party Advisory
https://support.apple.com/HT208144	security@opentext.com	Third Party Advisory
https://usn.ubuntu.com/4246-1/	security@opentext.com	Third Party Advisory
https://usn.ubuntu.com/4292-1/	security@opentext.com	Third Party Advisory
https://wiki.mozilla.org/MOSS/Secure_Open_Source/Completed#zlib	security@opentext.com	Third Party Advisory
https://wiki.mozilla.org/images/0/09/Zlib-report.pdf	security@opentext.com	Third Party Advisory
https://www.oracle.com/security-alerts/cpujul2020.html	security@opentext.com	Third Party Advisory
http://lists.opensuse.org/opensuse-updates/2016-12/msg00127.html	af854a3a-2127-422b-91ae-364da2661108	Broken Link
http://lists.opensuse.org/opensuse-updates/2017-01/msg00050.html	af854a3a-2127-422b-91ae-364da2661108	Broken Link
http://lists.opensuse.org/opensuse-updates/2017-01/msg00053.html	af854a3a-2127-422b-91ae-364da2661108	Broken Link
http://www.openwall.com/lists/oss-security/2016/12/05/21	af854a3a-2127-422b-91ae-364da2661108	Mailing List Patch
http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory
http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory
http://www.securityfocus.com/bid/95131	af854a3a-2127-422b-91ae-364da2661108	Broken Link Third Party Advisory VDB Entry
http://www.securitytracker.com/id/1039427	af854a3a-2127-422b-91ae-364da2661108	Broken Link Third Party Advisory VDB Entry
https://access.redhat.com/errata/RHSA-2017:1220	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory
https://access.redhat.com/errata/RHSA-2017:1221	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory
https://access.redhat.com/errata/RHSA-2017:1222	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory
https://access.redhat.com/errata/RHSA-2017:2999	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory
https://access.redhat.com/errata/RHSA-2017:3046	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory
https://access.redhat.com/errata/RHSA-2017:3047	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory
https://access.redhat.com/errata/RHSA-2017:3453	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1402348	af854a3a-2127-422b-91ae-364da2661108	Issue Tracking Patch
https://github.com/madler/zlib/commit/e54e1299404101a5a9d0cf5e45512b543967f958	af854a3a-2127-422b-91ae-364da2661108	Patch
https://lists.debian.org/debian-lts-announce/2019/03/msg00027.html	af854a3a-2127-422b-91ae-364da2661108	Mailing List Third Party Advisory
https://lists.debian.org/debian-lts-announce/2020/01/msg00030.html	af854a3a-2127-422b-91ae-364da2661108	Mailing List Third Party Advisory
https://security.gentoo.org/glsa/201701-56	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory
https://security.gentoo.org/glsa/202007-54	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory
https://support.apple.com/HT208112	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory
https://support.apple.com/HT208113	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory
https://support.apple.com/HT208115	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory
https://support.apple.com/HT208144	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory
https://usn.ubuntu.com/4246-1/	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory
https://usn.ubuntu.com/4292-1/	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory
https://wiki.mozilla.org/MOSS/Secure_Open_Source/Completed#zlib	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory
https://wiki.mozilla.org/images/0/09/Zlib-report.pdf	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory
https://www.oracle.com/security-alerts/cpujul2020.html	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory

Hyperlink: http://lists.opensuse.org/opensuse-updates/2016-12/msg00127.html

Source: security@opentext.com

Resource:

Broken Link

Hyperlink: http://lists.opensuse.org/opensuse-updates/2017-01/msg00050.html

Source: security@opentext.com

Resource:

Broken Link

Hyperlink: http://lists.opensuse.org/opensuse-updates/2017-01/msg00053.html

Source: security@opentext.com

Resource:

Broken Link

Hyperlink: http://www.openwall.com/lists/oss-security/2016/12/05/21

Source: security@opentext.com

Resource:

Mailing List

Patch

Hyperlink: http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html

Source: security@opentext.com

Resource:

Third Party Advisory

Hyperlink: http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html

Source: security@opentext.com

Resource:

Third Party Advisory

Hyperlink: http://www.securityfocus.com/bid/95131

Source: security@opentext.com

Resource:

Broken Link

Third Party Advisory

VDB Entry

Hyperlink: http://www.securitytracker.com/id/1039427

Source: security@opentext.com

Resource:

Broken Link

Third Party Advisory

VDB Entry

Hyperlink: https://access.redhat.com/errata/RHSA-2017:1220

Source: security@opentext.com

Resource:

Third Party Advisory

Hyperlink: https://access.redhat.com/errata/RHSA-2017:1221

Source: security@opentext.com

Resource:

Third Party Advisory

Hyperlink: https://access.redhat.com/errata/RHSA-2017:1222

Source: security@opentext.com

Resource:

Third Party Advisory

Hyperlink: https://access.redhat.com/errata/RHSA-2017:2999

Source: security@opentext.com

Resource:

Third Party Advisory

Hyperlink: https://access.redhat.com/errata/RHSA-2017:3046

Source: security@opentext.com

Resource:

Third Party Advisory

Hyperlink: https://access.redhat.com/errata/RHSA-2017:3047

Source: security@opentext.com

Resource:

Third Party Advisory

Hyperlink: https://access.redhat.com/errata/RHSA-2017:3453

Source: security@opentext.com

Resource:

Third Party Advisory

Hyperlink: https://bugzilla.redhat.com/show_bug.cgi?id=1402348

Source: security@opentext.com

Resource:

Issue Tracking

Patch

Hyperlink: https://github.com/madler/zlib/commit/e54e1299404101a5a9d0cf5e45512b543967f958

Source: security@opentext.com

Resource:

Patch

Hyperlink: https://lists.debian.org/debian-lts-announce/2019/03/msg00027.html

Source: security@opentext.com

Resource:

Mailing List

Third Party Advisory

Hyperlink: https://lists.debian.org/debian-lts-announce/2020/01/msg00030.html

Source: security@opentext.com

Resource:

Mailing List

Third Party Advisory

Hyperlink: https://security.gentoo.org/glsa/201701-56

Source: security@opentext.com

Resource:

Third Party Advisory

Hyperlink: https://security.gentoo.org/glsa/202007-54

Source: security@opentext.com

Resource:

Third Party Advisory

Hyperlink: https://support.apple.com/HT208112

Source: security@opentext.com

Resource:

Third Party Advisory

Hyperlink: https://support.apple.com/HT208113

Source: security@opentext.com

Resource:

Third Party Advisory

Hyperlink: https://support.apple.com/HT208115

Source: security@opentext.com

Resource:

Third Party Advisory

Hyperlink: https://support.apple.com/HT208144

Source: security@opentext.com

Resource:

Third Party Advisory

Hyperlink: https://usn.ubuntu.com/4246-1/

Source: security@opentext.com

Resource:

Third Party Advisory

Hyperlink: https://usn.ubuntu.com/4292-1/

Source: security@opentext.com

Resource:

Third Party Advisory

Hyperlink: https://wiki.mozilla.org/MOSS/Secure_Open_Source/Completed#zlib

Source: security@opentext.com

Resource:

Third Party Advisory

Hyperlink: https://wiki.mozilla.org/images/0/09/Zlib-report.pdf

Source: security@opentext.com

Resource:

Third Party Advisory

Hyperlink: https://www.oracle.com/security-alerts/cpujul2020.html

Source: security@opentext.com

Resource:

Third Party Advisory

Hyperlink: http://lists.opensuse.org/opensuse-updates/2016-12/msg00127.html

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Broken Link

Hyperlink: http://lists.opensuse.org/opensuse-updates/2017-01/msg00050.html

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Broken Link

Hyperlink: http://lists.opensuse.org/opensuse-updates/2017-01/msg00053.html

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Broken Link

Hyperlink: http://www.openwall.com/lists/oss-security/2016/12/05/21

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Mailing List

Patch

Hyperlink: http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Third Party Advisory

Hyperlink: http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Third Party Advisory

Hyperlink: http://www.securityfocus.com/bid/95131

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Broken Link

Third Party Advisory

VDB Entry

Hyperlink: http://www.securitytracker.com/id/1039427

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Broken Link

Third Party Advisory

VDB Entry

Hyperlink: https://access.redhat.com/errata/RHSA-2017:1220

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Third Party Advisory

Hyperlink: https://access.redhat.com/errata/RHSA-2017:1221

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Third Party Advisory

Hyperlink: https://access.redhat.com/errata/RHSA-2017:1222

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Third Party Advisory

Hyperlink: https://access.redhat.com/errata/RHSA-2017:2999

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Third Party Advisory

Hyperlink: https://access.redhat.com/errata/RHSA-2017:3046

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Third Party Advisory

Hyperlink: https://access.redhat.com/errata/RHSA-2017:3047

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Third Party Advisory

Hyperlink: https://access.redhat.com/errata/RHSA-2017:3453

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Third Party Advisory

Hyperlink: https://bugzilla.redhat.com/show_bug.cgi?id=1402348

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Issue Tracking

Patch

Hyperlink: https://github.com/madler/zlib/commit/e54e1299404101a5a9d0cf5e45512b543967f958

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Patch

Hyperlink: https://lists.debian.org/debian-lts-announce/2019/03/msg00027.html

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Mailing List

Third Party Advisory

Hyperlink: https://lists.debian.org/debian-lts-announce/2020/01/msg00030.html

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Mailing List

Third Party Advisory

Hyperlink: https://security.gentoo.org/glsa/201701-56

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Third Party Advisory

Hyperlink: https://security.gentoo.org/glsa/202007-54

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Third Party Advisory

Hyperlink: https://support.apple.com/HT208112

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Third Party Advisory

Hyperlink: https://support.apple.com/HT208113

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Third Party Advisory

Hyperlink: https://support.apple.com/HT208115

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Third Party Advisory

Hyperlink: https://support.apple.com/HT208144

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Third Party Advisory

Hyperlink: https://usn.ubuntu.com/4246-1/

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Third Party Advisory

Hyperlink: https://usn.ubuntu.com/4292-1/

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Third Party Advisory

Hyperlink: https://wiki.mozilla.org/MOSS/Secure_Open_Source/Completed#zlib

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Third Party Advisory

Hyperlink: https://wiki.mozilla.org/images/0/09/Zlib-report.pdf

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Third Party Advisory

Hyperlink: https://www.oracle.com/security-alerts/cpujul2020.html

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Third Party Advisory

Similar CVEs

4224Records found

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-6.8||MEDIUM

EPSS-3.55% / 87.24%

||

7 Day CHG~0.00%

Published-22 Mar, 2012 | 16:00

Updated-11 Apr, 2025 | 00:51

Use-after-free vulnerability in the Cascading Style Sheets (CSS) implementation in Google Chrome before 17.0.963.83 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the cross-fade function.

Vendor-n/a openSUSE Google LLC

Product-opensuse chrome n/a

CWE ID-CWE-416

Use After Free

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-8.8||HIGH

EPSS-0.47% / 63.49%

||

7 Day CHG+0.03%

Published-01 Nov, 2022 | 00:00

Updated-06 May, 2025 | 15:15

A use after free issue was addressed with improved memory management. This issue is fixed in tvOS 15.5, watchOS 8.6, iOS 15.5 and iPadOS 15.5, macOS Monterey 12.4, Safari 15.5, iTunes 12.12.4 for Windows. Processing maliciously crafted web content may lead to arbitrary code execution.

Vendor-Apple Inc.

Product-watchos tvos macos ipados itunes safari iphone_os macOS watchOS

CWE ID-CWE-416

Use After Free

Matching Score-8

Assigner-Adobe Systems Incorporated

Matching Score-8

Assigner-Adobe Systems Incorporated

CVSS Score-8.8||HIGH

EPSS-2.46% / 84.64%

||

7 Day CHG~0.00%

Published-13 Jul, 2016 | 01:00

Updated-12 Apr, 2025 | 10:46

Adobe Reader and Acrobat before 11.0.17, Acrobat and Acrobat Reader DC Classic before 15.006.30198, and Acrobat and Acrobat Reader DC Continuous before 15.017.20050 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4191, CVE-2016-4192, CVE-2016-4193, CVE-2016-4194, CVE-2016-4196, CVE-2016-4197, CVE-2016-4198, CVE-2016-4199, CVE-2016-4200, CVE-2016-4201, CVE-2016-4202, CVE-2016-4203, CVE-2016-4204, CVE-2016-4205, CVE-2016-4206, CVE-2016-4207, CVE-2016-4208, CVE-2016-4211, CVE-2016-4212, CVE-2016-4213, CVE-2016-4214, CVE-2016-4250, CVE-2016-4251, CVE-2016-4252, and CVE-2016-4254.

Vendor-n/a Apple Inc.Adobe Inc.Microsoft Corporation

Product-acrobat_reader_dc acrobat_dc reader windows acrobat mac_os_x n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-8

Assigner-Adobe Systems Incorporated

Matching Score-8

Assigner-Adobe Systems Incorporated

CVSS Score-8.8||HIGH

EPSS-23.60% / 95.77%

||

7 Day CHG~0.00%

Published-13 Jul, 2016 | 01:00

Updated-12 Apr, 2025 | 10:46

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-4173, CVE-2016-4174, CVE-2016-4226, CVE-2016-4227, CVE-2016-4228, CVE-2016-4229, CVE-2016-4230, CVE-2016-4231, and CVE-2016-4248.

Vendor-n/a Adobe Inc.Linux Kernel Organization, Inc Google LLC Apple Inc.Microsoft Corporation

Product-flash_player chrome_os linux_kernel flash_player_desktop_runtime windows windows_8.1 mac_os_x windows_10 n/a

CWE ID-CWE-416

Use After Free

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-6.8||MEDIUM

EPSS-2.36% / 84.33%

||

7 Day CHG~0.00%

Published-05 Mar, 2012 | 19:00

Updated-11 Apr, 2025 | 00:51

Use-after-free vulnerability in Google Chrome before 17.0.963.65 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving SVG animation elements.

Vendor-n/a openSUSE Apple Inc.Google LLC

Product-opensuse iphone_os itunes safari chrome n/a

CWE ID-CWE-416

Use After Free

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-7.8||HIGH

EPSS-0.33% / 54.93%

||

7 Day CHG~0.00%

Published-13 Mar, 2022 | 00:00

Updated-03 Aug, 2024 | 05:18

Liblouis through 3.21.0 has a buffer overflow in compilePassOpcode in compileTranslationTable.c (called, indirectly, by tools/lou_checktable.c).

Vendor-liblouis n/a Fedora Project Apple Inc.

Product-iphone_os liblouis watchos ipados tvos fedora macos n/a

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-8.8||HIGH

EPSS-0.15% / 36.73%

||

7 Day CHG+0.01%

Published-01 Nov, 2022 | 00:00

Updated-06 May, 2025 | 15:15

A memory corruption issue was addressed with improved state management. This issue is fixed in tvOS 15.5, iOS 15.5 and iPadOS 15.5, watchOS 8.6, macOS Monterey 12.4, Safari 15.5. Processing maliciously crafted web content may lead to arbitrary code execution.

Vendor-Apple Inc.

Product-watchos tvos macos ipados safari iphone_os macOS watchOS

CWE ID-CWE-787

Out-of-bounds Write

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-6.8||MEDIUM

EPSS-4.45% / 88.63%

||

7 Day CHG~0.00%

Published-22 Mar, 2012 | 16:00

Updated-11 Apr, 2025 | 00:51

Use-after-free vulnerability in Google Chrome before 17.0.963.83 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to block splitting.

Vendor-n/a openSUSE Google LLC Apple Inc.

Product-iphone_os safari chrome itunes opensuse n/a

CWE ID-CWE-416

Use After Free

Matching Score-8

Assigner-Adobe Systems Incorporated

Matching Score-8

Assigner-Adobe Systems Incorporated

CVSS Score-8.8||HIGH

EPSS-2.18% / 83.69%

||

7 Day CHG~0.00%

Published-16 Jun, 2016 | 14:00

Updated-12 Apr, 2025 | 10:46

Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, has unknown impact and attack vectors, a different vulnerability than other CVEs listed in MS16-083.

Vendor-n/a Adobe Inc.openSUSE Linux Kernel Organization, Inc SUSE Red Hat, Inc.Google LLC Apple Inc.Microsoft Corporation

Product-flash_player enterprise_linux_server chrome_os linux_kernel linux_enterprise_workstation_extension opensuse flash_player_desktop_runtime enterprise_linux_desktop enterprise_linux_workstation linux_enterprise_desktop windows windows_8.1 mac_os_x windows_10 n/a

CWE ID-CWE-787

Out-of-bounds Write

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-6.8||MEDIUM

EPSS-7.35% / 91.34%

||

7 Day CHG~0.00%

Published-01 May, 2012 | 10:00

Updated-11 Apr, 2025 | 00:51

Use-after-free vulnerability in Google Chrome before 18.0.1025.168 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the floating of elements, a different vulnerability than CVE-2011-3081.

Vendor-n/a Apple Inc.Google LLC

Product-itunes iphone_os safari chrome n/a

CWE ID-CWE-416

Use After Free

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-6.8||MEDIUM

EPSS-2.36% / 84.33%

||

7 Day CHG~0.00%

Published-05 Mar, 2012 | 19:00

Updated-11 Apr, 2025 | 00:51

Use-after-free vulnerability in Google Chrome before 17.0.963.65 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving an SVG document.

Vendor-n/a openSUSE Apple Inc.Google LLC

Product-opensuse iphone_os itunes safari chrome n/a

CWE ID-CWE-416

Use After Free

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-6.8||MEDIUM

EPSS-2.36% / 84.33%

||

7 Day CHG~0.00%

Published-05 Mar, 2012 | 19:00

Updated-11 Apr, 2025 | 00:51

Use-after-free vulnerability in Google Chrome before 17.0.963.65 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the handling of table sections.

Vendor-n/a openSUSE Apple Inc.Google LLC

Product-opensuse iphone_os itunes safari chrome n/a

CWE ID-CWE-416

Use After Free

Matching Score-8

Assigner-Adobe Systems Incorporated

Matching Score-8

Assigner-Adobe Systems Incorporated

CVSS Score-8.8||HIGH

EPSS-4.04% / 88.05%

||

7 Day CHG~0.00%

Published-13 Jul, 2016 | 01:00

Updated-12 Apr, 2025 | 10:46

Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4172, CVE-2016-4175, CVE-2016-4179, CVE-2016-4180, CVE-2016-4181, CVE-2016-4182, CVE-2016-4183, CVE-2016-4184, CVE-2016-4185, CVE-2016-4186, CVE-2016-4187, CVE-2016-4188, CVE-2016-4189, CVE-2016-4190, CVE-2016-4217, CVE-2016-4218, CVE-2016-4219, CVE-2016-4220, CVE-2016-4221, CVE-2016-4233, CVE-2016-4234, CVE-2016-4235, CVE-2016-4236, CVE-2016-4237, CVE-2016-4239, CVE-2016-4240, CVE-2016-4241, CVE-2016-4242, CVE-2016-4243, CVE-2016-4244, CVE-2016-4245, and CVE-2016-4246.

Vendor-n/a Adobe Inc.Linux Kernel Organization, Inc Google LLC Apple Inc.Microsoft Corporation

Product-flash_player chrome_os linux_kernel flash_player_desktop_runtime windows windows_8.1 mac_os_x windows_10 n/a

CWE ID-CWE-787

Out-of-bounds Write

Matching Score-8

Assigner-Red Hat, Inc.

Matching Score-8

Assigner-Red Hat, Inc.

CVSS Score-8.8||HIGH

EPSS-7.10% / 91.16%

||

7 Day CHG~0.00%

Published-17 Jul, 2011 | 20:00

Updated-11 Apr, 2025 | 00:51

The png_handle_sCAL function in pngrutil.c in libpng 1.0.x before 1.0.55, 1.2.x before 1.2.45, 1.4.x before 1.4.8, and 1.5.x before 1.5.4 does not properly handle invalid sCAL chunks, which allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly have unspecified other impact via a crafted PNG image that triggers the reading of uninitialized memory.

Vendor-libpng n/a Fedora Project Debian GNU/Linux Canonical Ltd.

Product-ubuntu_linux fedora debian_linux libpng n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-9.8||CRITICAL

EPSS-14.68% / 94.22%

||

7 Day CHG+1.54%

Published-17 Jan, 2020 | 01:16

Updated-05 Aug, 2024 | 01:40

In SaltStack Salt through 2019.2.0, the salt-api NET API with the ssh client enabled is vulnerable to command injection. This allows an unauthenticated attacker with network access to the API endpoint to execute arbitrary code on the salt-api host.

Vendor-saltstack n/a Canonical Ltd.openSUSE Debian GNU/Linux

Product-ubuntu_linux salt debian_linux leap n/a

CWE ID-CWE-77

Improper Neutralization of Special Elements used in a Command ('Command Injection')

Matching Score-8

Assigner-Red Hat, Inc.

Matching Score-8

Assigner-Red Hat, Inc.

CVSS Score-6.8||MEDIUM

EPSS-1.21% / 78.21%

||

7 Day CHG~0.00%

Published-27 Jul, 2011 | 01:29

Updated-11 Apr, 2025 | 00:51

jboss-seam.jar in the JBoss Seam 2 framework 2.2.x and earlier, as distributed in Red Hat JBoss Enterprise SOA Platform 4.3.0.CP05 and 5.1.0; JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.3.0, 4.3.0.CP09, and 5.1.1; and JBoss Enterprise Web Platform 5.1.1, does not properly restrict use of Expression Language (EL) statements in FacesMessages during page exception handling, which allows remote attackers to execute arbitrary Java code via a crafted URL to an application. NOTE: this vulnerability exists because of an incomplete fix for CVE-2011-1484.

Vendor-n/a Red Hat, Inc.

Product-jboss_enterprise_soa_platform jboss_enterprise_application_platform jboss_enterprise_web_platform jboss_seam_2_framework n/a

Matching Score-8

Assigner-Adobe Systems Incorporated

Matching Score-8

Assigner-Adobe Systems Incorporated

CVSS Score-8.8||HIGH

EPSS-2.18% / 83.69%

||

7 Day CHG~0.00%

Published-16 Jun, 2016 | 14:00

Updated-12 Apr, 2025 | 10:46

Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, has unknown impact and attack vectors, a different vulnerability than other CVEs listed in MS16-083.

Vendor-n/a Adobe Inc.openSUSE Linux Kernel Organization, Inc SUSE Red Hat, Inc.Google LLC Apple Inc.Microsoft Corporation

Product-flash_player enterprise_linux_server chrome_os linux_kernel linux_enterprise_workstation_extension opensuse flash_player_desktop_runtime enterprise_linux_desktop enterprise_linux_workstation linux_enterprise_desktop windows windows_8.1 mac_os_x windows_10 n/a

CWE ID-CWE-787

Out-of-bounds Write

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-6.8||MEDIUM

EPSS-1.57% / 80.82%

||

7 Day CHG~0.00%

Published-05 Mar, 2012 | 19:00

Updated-11 Apr, 2025 | 00:51

Use-after-free vulnerability in Google Chrome before 17.0.963.65 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the handling of SVG values.

Vendor-n/a openSUSE Apple Inc.Google LLC

Product-opensuse iphone_os itunes safari chrome n/a

CWE ID-CWE-416

Use After Free

Matching Score-8

Assigner-Chrome

Matching Score-8

Assigner-Chrome

CVSS Score-6.8||MEDIUM

EPSS-2.10% / 83.39%

||

7 Day CHG~0.00%

Published-17 Sep, 2011 | 10:00

Updated-11 Apr, 2025 | 00:51

Use-after-free vulnerability in Google Chrome before 14.0.835.163 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the focus controller.

Vendor-n/a Google LLC Apple Inc.

Product-iphone_os itunes safari chrome n/a

CWE ID-CWE-416

Use After Free

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-6.8||MEDIUM

EPSS-34.69% / 96.88%

||

7 Day CHG~0.00%

Published-16 Feb, 2012 | 20:00

Updated-11 Apr, 2025 | 00:51

Integer overflow in libpng, as used in Google Chrome before 17.0.963.56, allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that trigger an integer truncation.

Vendor-n/a SUSE Google LLC openSUSE Apple Inc.

Product-opensuse mac_os_x suse_linux_enterprise_server linux_enterprise_server iphone_os chrome mac_os_x_server n/a

CWE ID-CWE-190

Integer Overflow or Wraparound

Matching Score-8

Assigner-Chrome

Matching Score-8

Assigner-Chrome

CVSS Score-6.8||MEDIUM

EPSS-2.96% / 85.96%

||

7 Day CHG~0.00%

Published-03 Aug, 2011 | 00:00

Updated-11 Apr, 2025 | 00:51

Use-after-free vulnerability in Google Chrome before 13.0.782.107 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to display box rendering.

Vendor-n/a Apple Inc.Debian GNU/Linux Google LLC

Product-debian_linux iphone_os itunes safari chrome n/a

CWE ID-CWE-416

Use After Free

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-8.8||HIGH

EPSS-0.46% / 63.26%

||

7 Day CHG~0.00%

Published-14 Oct, 2019 | 01:09

Updated-05 Aug, 2024 | 01:40

ImageMagick before 7.0.8-54 has a heap-based buffer overflow in ReadPSInfo in coders/ps.c.

Vendor-n/a Debian GNU/Linux ImageMagick Studio LLC

Product-debian_linux imagemagick n/a

CWE ID-CWE-787

Out-of-bounds Write

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-7.8||HIGH

EPSS-0.63% / 69.30%

||

7 Day CHG~0.00%

Published-26 May, 2022 | 19:12

Updated-03 Aug, 2024 | 05:11

A memory corruption issue was addressed with improved input validation. This issue is fixed in iTunes 12.12.4 for Windows, iOS 15.5 and iPadOS 15.5, Security Update 2022-004 Catalina, macOS Big Sur 11.6.6, macOS Monterey 12.4. Processing a maliciously crafted image may lead to arbitrary code execution.

Vendor-Apple Inc.

Product-itunes iphone_os ipados mac_os_x macos Security Update - Catalina macOS

CWE ID-CWE-787

Out-of-bounds Write

Matching Score-8

Assigner-Chrome

Matching Score-8

Assigner-Chrome

CVSS Score-6.8||MEDIUM

EPSS-3.75% / 87.57%

||

7 Day CHG~0.00%

Published-17 Sep, 2011 | 10:00

Updated-11 Apr, 2025 | 00:51

Double free vulnerability in libxml2, as used in Google Chrome before 14.0.835.163, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to XPath handling.

Vendor-n/a Debian GNU/Linux Google LLC Red Hat, Inc.Apple Inc.

Product-debian_linux enterprise_linux_server_eus enterprise_linux_workstation enterprise_linux_server iphone_os enterprise_linux_desktop chrome mac_os_x n/a

CWE ID-CWE-415

Double Free

Matching Score-8

Assigner-Red Hat, Inc.

Matching Score-8

Assigner-Red Hat, Inc.

CVSS Score-6.8||MEDIUM

EPSS-0.34% / 56.18%

||

7 Day CHG~0.00%

Published-08 Jun, 2013 | 10:00

Updated-11 Apr, 2025 | 00:51

A certain Red Hat patch to the __br_deliver function in net/bridge/br_forward.c in the Linux kernel 2.6.18 on Red Hat Enterprise Linux (RHEL) 5 allows remote attackers to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact by leveraging connectivity to a network interface that uses an Ethernet bridge device.

Vendor-n/a Red Hat, Inc.Linux Kernel Organization, Inc

Product-enterprise_linux linux_kernel n/a

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-6.8||MEDIUM

EPSS-2.51% / 84.77%

||

7 Day CHG~0.00%

Published-05 Apr, 2012 | 20:00

Updated-11 Apr, 2025 | 00:51

Use-after-free vulnerability in the Cascading Style Sheets (CSS) implementation in Google Chrome before 18.0.1025.151 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to run-in boxes.

Vendor-n/a Apple Inc.Google LLC

Product-itunes iphone_os safari chrome n/a

CWE ID-CWE-416

Use After Free

Matching Score-8

Assigner-Chrome

Matching Score-8

Assigner-Chrome

CVSS Score-6.8||MEDIUM

EPSS-3.15% / 86.38%

||

7 Day CHG~0.00%

Published-03 Aug, 2011 | 00:00

Updated-11 Apr, 2025 | 00:51

Buffer overflow in the inspector serialization functionality in Google Chrome before 13.0.782.107 allows user-assisted remote attackers to have an unspecified impact via unknown vectors.

Vendor-n/a Google LLC Apple Inc.

Product-iphone_os itunes safari chrome n/a

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-6.8||MEDIUM

EPSS-2.35% / 84.29%

||

7 Day CHG~0.00%

Published-30 Mar, 2012 | 22:00

Updated-11 Apr, 2025 | 00:51

Google Chrome before 18.0.1025.142 does not properly handle text fragments, which allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.

Vendor-n/a Apple Inc.Google LLC

Product-itunes iphone_os safari chrome n/a

CWE ID-CWE-125

Out-of-bounds Read

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-6.8||MEDIUM

EPSS-1.06% / 76.74%

||

7 Day CHG~0.00%

Published-20 Jul, 2011 | 23:00

Updated-11 Apr, 2025 | 00:51

Unspecified vulnerability in the Oracle Secure Backup component in Oracle Secure Backup 10.3.0.3 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than CVE-2011-2261.

Vendor-n/a Oracle Corporation

Product-secure_backup n/a

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-6.8||MEDIUM

EPSS-2.86% / 85.74%

||

7 Day CHG~0.00%

Published-05 Apr, 2012 | 20:00

Updated-11 Apr, 2025 | 00:51

Use-after-free vulnerability in the Cascading Style Sheets (CSS) implementation in Google Chrome before 18.0.1025.151 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to line boxes.

Vendor-n/a Apple Inc.Google LLC

Product-itunes iphone_os safari chrome n/a

CWE ID-CWE-416

Use After Free

Matching Score-8

Assigner-Chrome

Matching Score-8

Assigner-Chrome

CVSS Score-6.8||MEDIUM

EPSS-0.57% / 67.78%

||

7 Day CHG~0.00%

Published-03 Aug, 2011 | 00:00

Updated-11 Apr, 2025 | 00:51

Google Chrome before 13.0.782.107 allows remote attackers to bypass the Same Origin Policy and conduct script injection attacks via unspecified vectors.

Vendor-n/a Google LLC Apple Inc.

Product-iphone_os safari chrome n/a

CWE ID-CWE-74

Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-6.8||MEDIUM

EPSS-0.48% / 64.33%

||

7 Day CHG~0.00%

Published-20 Jul, 2011 | 23:00

Updated-11 Apr, 2025 | 00:51

Unspecified vulnerability in the Database Target Type Menus component in Oracle Database Server 10.1.0.5, 10.2.0.3, 10.2.0.4, 10.2.0.5, 11.1.0.7, 11.2.0.1, and 11.2.0.2; and Oracle Enterprise Manager Grid Control 10.1.0.6, 10.2.0.5, and 11.1.0.1; allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.

Vendor-n/a Oracle Corporation

Product-database_server enterprise_manager_grid_control n/a

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-6.8||MEDIUM

EPSS-2.86% / 85.74%

||

7 Day CHG~0.00%

Published-05 Apr, 2012 | 20:00

Updated-11 Apr, 2025 | 00:51

Use-after-free vulnerability in the HTMLMediaElement implementation in Google Chrome before 18.0.1025.151 allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.

Vendor-n/a Apple Inc.Google LLC

Product-itunes iphone_os safari chrome n/a

CWE ID-CWE-416

Use After Free

Matching Score-8

Assigner-Adobe Systems Incorporated

Matching Score-8

Assigner-Adobe Systems Incorporated

CVSS Score-8.8||HIGH

EPSS-4.09% / 88.12%

||

7 Day CHG~0.00%

Published-13 Jul, 2016 | 01:00

Updated-12 Apr, 2025 | 10:46

Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4175, CVE-2016-4179, CVE-2016-4180, CVE-2016-4181, CVE-2016-4182, CVE-2016-4183, CVE-2016-4184, CVE-2016-4185, CVE-2016-4186, CVE-2016-4187, CVE-2016-4188, CVE-2016-4189, CVE-2016-4190, CVE-2016-4217, CVE-2016-4218, CVE-2016-4219, CVE-2016-4220, CVE-2016-4221, CVE-2016-4233, CVE-2016-4234, CVE-2016-4235, CVE-2016-4236, CVE-2016-4237, CVE-2016-4238, CVE-2016-4239, CVE-2016-4240, CVE-2016-4241, CVE-2016-4242, CVE-2016-4243, CVE-2016-4244, CVE-2016-4245, and CVE-2016-4246.

Vendor-n/a Adobe Inc.Linux Kernel Organization, Inc Google LLC Apple Inc.Microsoft Corporation

Product-flash_player chrome_os linux_kernel flash_player_desktop_runtime windows windows_8.1 mac_os_x windows_10 n/a

CWE ID-CWE-787

Out-of-bounds Write

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-6.8||MEDIUM

EPSS-0.65% / 69.76%

||

7 Day CHG~0.00%

Published-23 Oct, 2015 | 21:00

Updated-12 Apr, 2025 | 10:46

coreaudiod in Audio in Apple OS X before 10.11.1 does not initialize an unspecified data structure, which allows attackers to execute arbitrary code via a crafted app.

Vendor-n/a Apple Inc.

Product-mac_os_x n/a

Matching Score-8

Assigner-Adobe Systems Incorporated

Matching Score-8

Assigner-Adobe Systems Incorporated

CVSS Score-8.8||HIGH

EPSS-1.90% / 82.48%

||

7 Day CHG~0.00%

Published-14 Sep, 2016 | 18:00

Updated-12 Apr, 2025 | 10:46

Adobe Flash Player before 18.0.0.375 and 19.x through 23.x before 23.0.0.162 on Windows and OS X and before 11.2.202.635 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4274, CVE-2016-4275, CVE-2016-4276, CVE-2016-4280, CVE-2016-4281, CVE-2016-4282, CVE-2016-4283, CVE-2016-4284, CVE-2016-6922, and CVE-2016-6924.

Vendor-n/a Adobe Inc.Linux Kernel Organization, Inc Google LLC Apple Inc.Microsoft Corporation

Product-flash_player chrome_os linux_kernel flash_player_desktop_runtime windows windows_8.1 mac_os_x windows_10 n/a

CWE ID-CWE-787

Out-of-bounds Write

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-6.8||MEDIUM

EPSS-2.13% / 83.48%

||

7 Day CHG~0.00%

Published-05 Apr, 2012 | 20:00

Updated-11 Apr, 2025 | 00:51

Use-after-free vulnerability in Google Chrome before 18.0.1025.151 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to focus handling.

Vendor-n/a Apple Inc.Google LLC

Product-itunes iphone_os safari chrome n/a

CWE ID-CWE-416

Use After Free

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-8.8||HIGH

EPSS-5.81% / 90.17%

||

7 Day CHG~0.00%

Published-22 Mar, 2012 | 16:00

Updated-09 Jun, 2025 | 16:15

Integer signedness error in the png_inflate function in pngrutil.c in libpng before 1.4.10beta01, as used in Google Chrome before 17.0.963.83 and other products, allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted PNG file, a different vulnerability than CVE-2011-3026.

Vendor-libpng n/a Google LLC Fedora Project Debian GNU/Linux openSUSE Red Hat, Inc.

Product-storage debian_linux enterprise_linux_workstation enterprise_linux_server_eus enterprise_linux_server_aus enterprise_linux_desktop gluster_storage opensuse storage_for_public_cloud libpng fedora chrome enterprise_linux n/a

CWE ID-CWE-190

Integer Overflow or Wraparound

CWE ID-CWE-195

Signed to Unsigned Conversion Error

Matching Score-8

Assigner-Mozilla Corporation

Matching Score-8

Assigner-Mozilla Corporation

CVSS Score-8.8||HIGH

EPSS-0.79% / 72.89%

||

7 Day CHG~0.00%

Published-13 Mar, 2016 | 18:00

Updated-12 Apr, 2025 | 10:46

The graphite2::GlyphCache::Loader::Loader function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, allows remote attackers to cause a denial of service (buffer over-read) or possibly have unspecified other impact via a crafted Graphite smart font.

Vendor-sil n/a Mozilla Corporation openSUSE SUSE Oracle Corporation

Product-leap firefox opensuse graphite2 linux linux_enterprise n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-8

Assigner-Adobe Systems Incorporated

Matching Score-8

Assigner-Adobe Systems Incorporated

CVSS Score-8.8||HIGH

EPSS-7.25% / 91.27%

||

7 Day CHG~0.00%

Published-09 Apr, 2016 | 01:00

Updated-12 Apr, 2025 | 10:46

Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.616 on Linux allows attackers to execute arbitrary code by overriding NetConnection object properties to leverage an unspecified "type confusion," a different vulnerability than CVE-2016-1019.

Vendor-n/a Adobe Inc.Linux Kernel Organization, Inc Google LLC Apple Inc.Microsoft Corporation

Product-flash_player chrome_os linux_kernel iphone_os flash_player_desktop_runtime air_desktop_runtime air_sdk air_sdk_\&_compiler windows windows_8.1 mac_os_x android windows_10 n/a

CWE ID-CWE-843

Access of Resource Using Incompatible Type ('Type Confusion')

Matching Score-8

Assigner-Chrome

Matching Score-8

Assigner-Chrome

CVSS Score-6.8||MEDIUM

EPSS-1.61% / 81.03%

||

7 Day CHG~0.00%

Published-04 Oct, 2011 | 20:00

Updated-11 Apr, 2025 | 00:51

Google Chrome before 14.0.835.202 does not properly handle SVG text, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that lead to "stale font."

Vendor-n/a Google LLC Apple Inc.

Product-iphone_os itunes safari chrome n/a

Matching Score-8

Assigner-Red Hat, Inc.

Matching Score-8

Assigner-Red Hat, Inc.

CVSS Score-6.8||MEDIUM

EPSS-0.61% / 68.86%

||

7 Day CHG~0.00%

Published-04 Feb, 2014 | 19:00

Updated-11 Apr, 2025 | 00:51

Directory traversal vulnerability in Ark 4.7.x and earlier allows remote attackers to delete and force the display of arbitrary files via .. (dot dot) sequences in a zip file.

Vendor-n/a openSUSE KDE Canonical Ltd.

Product-opensuse ubuntu_linux kde_sc ark n/a

CWE ID-CWE-22

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

Matching Score-8

Assigner-Chrome

Matching Score-8

Assigner-Chrome

CVSS Score-6.8||MEDIUM

EPSS-0.74% / 71.91%

||

7 Day CHG~0.00%

Published-03 Aug, 2011 | 00:00

Updated-11 Apr, 2025 | 00:51

Google Chrome before 13.0.782.107 allows remote attackers to bypass the Same Origin Policy via vectors related to handling of the base URI.

Vendor-n/a Google LLC Apple Inc.

Product-iphone_os safari chrome n/a

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-6.8||MEDIUM

EPSS-2.76% / 85.45%

||

7 Day CHG~0.00%

Published-05 Mar, 2012 | 19:00

Updated-11 Apr, 2025 | 00:51

Google Chrome before 17.0.963.65 does not properly perform a cast of an unspecified variable during handling of line boxes, which allows remote attackers to cause a denial of service or possibly have unknown other impact via a crafted document.

Vendor-n/a openSUSE Apple Inc.Google LLC

Product-opensuse iphone_os itunes safari chrome n/a

CWE ID-CWE-704

Incorrect Type Conversion or Cast

Matching Score-8

Assigner-Chrome

Matching Score-8

Assigner-Chrome

CVSS Score-6.8||MEDIUM

EPSS-2.10% / 83.39%

||

7 Day CHG~0.00%

Published-17 Sep, 2011 | 10:00

Updated-11 Apr, 2025 | 00:51

Use-after-free vulnerability in Google Chrome before 14.0.835.163 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to unload event handling.

Vendor-n/a Google LLC Apple Inc.

Product-iphone_os itunes safari chrome n/a

CWE ID-CWE-416

Use After Free

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-7.8||HIGH

EPSS-0.27% / 49.95%

||

7 Day CHG~0.00%

Published-02 Mar, 2017 | 21:00

Updated-20 Apr, 2025 | 01:37

Buffer overflow in coders/tiff.c in ImageMagick before 6.9.5-1 allows remote attackers to cause a denial of service (application crash) or have other unspecified impact via a crafted file.

Vendor-n/a openSUSE ImageMagick Studio LLC

Product-leap imagemagick n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-6.8||MEDIUM

EPSS-0.89% / 74.64%

||

7 Day CHG~0.00%

Published-22 Mar, 2012 | 16:00

Updated-11 Apr, 2025 | 00:51

Google Chrome before 17.0.963.83 allows remote attackers to bypass the Same Origin Policy via vectors involving a "magic iframe."

Vendor-n/a openSUSE Google LLC Apple Inc.

Product-opensuse iphone_os safari chrome n/a

CWE ID-CWE-346

Origin Validation Error

Matching Score-8

Assigner-Mozilla Corporation

Matching Score-8

Assigner-Mozilla Corporation

CVSS Score-8.8||HIGH

EPSS-0.49% / 64.39%

||

7 Day CHG~0.00%

Published-05 Jul, 2023 | 08:51

Updated-13 Feb, 2025 | 16:56

An attacker could have triggered a use-after-free condition when creating a WebRTC connection over HTTPS. This vulnerability affects Firefox < 115, Firefox ESR < 102.13, and Thunderbird < 102.13.

Vendor-Debian GNU/Linux Mozilla Corporation

Product-firefox thunderbird debian_linux firefox_esr Firefox ESR Firefox Thunderbird

CWE ID-CWE-416

Use After Free

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-6.8||MEDIUM

EPSS-2.86% / 85.74%

||

7 Day CHG~0.00%

Published-05 Apr, 2012 | 20:00

Updated-11 Apr, 2025 | 00:51

Use-after-free vulnerability in Google Chrome before 18.0.1025.151 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the handling of SVG resources.

Vendor-n/a Apple Inc.Google LLC

Product-itunes iphone_os safari chrome n/a

CWE ID-CWE-416

Use After Free

Matching Score-8

Assigner-Red Hat, Inc.

Matching Score-8

Assigner-Red Hat, Inc.

CVSS Score-6.8||MEDIUM

EPSS-0.88% / 74.41%

||

7 Day CHG~0.00%

Published-14 May, 2014 | 00:00

Updated-12 Apr, 2025 | 10:46

The Java Network Launching Protocol (JNLP) implementation in IcedTea6 1.9.x before 1.9.9 and before 1.8.9, and IcedTea-Web 1.1.x before 1.1.1 and before 1.0.4, allows remote attackers to trick victims into granting access to local files by modifying the content of the Java Web Start Security Warning dialog box to represent a different filename than the file for which access will be granted.

Vendor-n/a Red Hat, Inc.

Product-icedtea6 icedtea-web n/a