Vulnerabilities > Debian
DATE | CVE | VULNERABILITY TITLE | RISK |
---|---|---|---|
2023-04-10 | CVE-2023-1668 | Always-Incorrect Control Flow Implementation vulnerability in multiple products A flaw was found in openvswitch (OVS). | 8.2 |
2023-04-07 | CVE-2020-11935 | It was discovered that aufs improperly managed inode reference counts in the vfsub_dentry_open() method. | 5.5 |
2023-04-06 | CVE-2023-29415 | An issue was discovered in libbzip3.a in bzip3 before 1.3.0. | 6.5 |
2023-04-05 | CVE-2023-1855 | Use After Free vulnerability in multiple products A use-after-free flaw was found in xgene_hwmon_remove in drivers/hwmon/xgene-hwmon.c in the Hardware Monitoring Linux Kernel Driver (xgene-hwmon). | 6.3 |
2023-04-04 | CVE-2023-1810 | Out-of-bounds Write vulnerability in multiple products Heap buffer overflow in Visuals in Google Chrome prior to 112.0.5615.49 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. | 8.8 |
2023-04-04 | CVE-2023-1811 | Use After Free vulnerability in multiple products Use after free in Frames in Google Chrome prior to 112.0.5615.49 allowed a remote attacker who convinced a user to engage in specific UI interaction to potentially exploit heap corruption via a crafted HTML page. | 8.8 |
2023-04-04 | CVE-2023-1812 | Out-of-bounds Write vulnerability in multiple products Out of bounds memory access in DOM Bindings in Google Chrome prior to 112.0.5615.49 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. | 8.8 |
2023-04-04 | CVE-2023-1813 | Inappropriate implementation in Extensions in Google Chrome prior to 112.0.5615.49 allowed an attacker who convinced a user to install a malicious extension to bypass file access restrictions via a crafted HTML page. | 6.5 |
2023-04-04 | CVE-2023-1814 | Insufficient validation of untrusted input in Safe Browsing in Google Chrome prior to 112.0.5615.49 allowed a remote attacker to bypass download checking via a crafted HTML page. | 6.5 |
2023-04-04 | CVE-2023-1815 | Use After Free vulnerability in multiple products Use after free in Networking APIs in Google Chrome prior to 112.0.5615.49 allowed a remote attacker who convinced a user to engage in specific UI interaction to potentially exploit heap corruption via a crafted HTML page. | 8.8 |