Vulnerabilities (CVE)

Filtered by CWE-126
Total 223 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2024-30071 1 Microsoft 12 Windows 10 1507, Windows 10 1607, Windows 10 1809 and 9 more 2024-07-17 N/A 4.7 MEDIUM
Windows Remote Access Connection Manager Information Disclosure Vulnerability
CVE-2024-30079 1 Microsoft 13 Windows 10 1507, Windows 10 1607, Windows 10 1809 and 10 more 2024-07-17 N/A 7.8 HIGH
Windows Remote Access Connection Manager Elevation of Privilege Vulnerability
CVE-2024-31082 2024-07-14 N/A 7.3 HIGH
A heap-based buffer over-read vulnerability was found in the X.org server's ProcAppleDRICreatePixmap() function. This issue occurs when byte-swapped length values are used in replies, potentially leading to memory leakage and segmentation faults, particularly when triggered by a client with a different endianness. This vulnerability could be exploited by an attacker to cause the X server to read heap memory values and then transmit them back to the client until encountering an unmapped page, resulting in a crash. Despite the attacker's inability to control the specific memory copied into the replies, the small length values typically stored in a 32-bit integer can result in significant attempted out-of-bounds reads.
CVE-2023-45919 2024-07-11 N/A 5.3 MEDIUM
Mesa 23.0.4 was discovered to contain a buffer over-read in glXQueryServerString(). NOTE: this is disputed because there are no common situations in which users require uninterrupted operation with an attacker-controller server.
CVE-2024-38071 1 Microsoft 6 Windows Server 2008, Windows Server 2012, Windows Server 2016 and 3 more 2024-07-11 N/A 7.5 HIGH
Windows Remote Desktop Licensing Service Denial of Service Vulnerability
CVE-2024-21458 1 Qualcomm 222 Ar8035, Ar8035 Firmware, Csr8811 and 219 more 2024-07-02 N/A 7.5 HIGH
Information disclosure while handling SA query action frame.
CVE-2024-21462 1 Qualcomm 622 315 5g Iot Modem, 315 5g Iot Modem Firmware, 9205 Lte Modem and 619 more 2024-07-02 N/A 5.5 MEDIUM
Transient DOS while loading the TA ELF file.
CVE-2024-21465 1 Qualcomm 518 9205 Lte Modem, 9205 Lte Modem Firmware, Aqt1000 and 515 more 2024-07-02 N/A 7.8 HIGH
Memory corruption while processing key blob passed by the user.
CVE-2024-21457 1 Qualcomm 222 Ar8035, Ar8035 Firmware, Csr8811 and 219 more 2024-07-02 N/A 7.5 HIGH
INformation disclosure while handling Multi-link IE in beacon frame.
CVE-2024-21456 2024-07-01 N/A 6.5 MEDIUM
Information Disclosure while parsing beacon frame in STA.
CVE-2024-38373 1 Amazon 1 Freertos-plus-tcp 2024-06-26 N/A 8.1 HIGH
FreeRTOS-Plus-TCP is a lightweight TCP/IP stack for FreeRTOS. FreeRTOS-Plus-TCP versions 4.0.0 through 4.1.0 contain a buffer over-read issue in the DNS Response Parser when parsing domain names in a DNS response. A carefully crafted DNS response with domain name length value greater than the actual domain name length, could cause the parser to read beyond the DNS response buffer. This issue affects applications using DNS functionality of the FreeRTOS-Plus-TCP stack. Applications that do not use DNS functionality are not affected, even when the DNS functionality is enabled. This vulnerability has been patched in version 4.1.1.
CVE-2024-30069 1 Microsoft 12 Windows 10 1507, Windows 10 1607, Windows 10 1809 and 9 more 2024-06-24 N/A 4.7 MEDIUM
Windows Remote Access Connection Manager Information Disclosure Vulnerability
CVE-2023-43537 2024-06-03 N/A 6.5 MEDIUM
Information disclosure while handling T2LM Action Frame in WLAN Host.
CVE-2024-23363 2024-06-03 N/A 7.5 HIGH
Transient DOS while processing an improperly formatted Fine Time Measurement (FTM) management frame.
CVE-2023-43555 2024-06-03 N/A 8.2 HIGH
Information disclosure in Video while parsing mp2 clip with invalid section length.
CVE-2023-24870 1 Microsoft 12 Windows 10 1507, Windows 10 1607, Windows 10 1809 and 9 more 2024-05-29 N/A 6.5 MEDIUM
Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability
CVE-2023-24858 1 Microsoft 12 Windows 10, Windows 10 1607, Windows 10 1809 and 9 more 2024-05-29 N/A 7.5 HIGH
Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability
CVE-2023-24857 1 Microsoft 12 Windows 10, Windows 10 1607, Windows 10 1809 and 9 more 2024-05-29 N/A 6.5 MEDIUM
Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability
CVE-2023-38152 1 Microsoft 5 Windows Server 2008, Windows Server 2012, Windows Server 2016 and 2 more 2024-05-29 N/A 5.3 MEDIUM
DHCP Server Service Information Disclosure Vulnerability
CVE-2023-38144 1 Microsoft 12 Windows 10 1507, Windows 10 1607, Windows 10 1809 and 9 more 2024-05-29 N/A 7.8 HIGH
Windows Common Log File System Driver Elevation of Privilege Vulnerability