Vulnerabilities > High

DATE CVE VULNERABILITY TITLE RISK
2018-04-03 CVE-2017-13853 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Apple mac OS X
An issue was discovered in certain Apple products.
local
low complexity
apple CWE-119
7.8
2018-04-03 CVE-2017-13850 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Apple mac OS X
An issue was discovered in certain Apple products.
local
low complexity
apple CWE-119
7.1
2018-04-03 CVE-2017-13837 Unspecified vulnerability in Apple mac OS X 10.13.0
An issue was discovered in certain Apple products.
network
low complexity
apple
7.5
2018-04-03 CVE-2017-13827 Unspecified vulnerability in Apple mac OS X 10.13.0
An issue was discovered in certain Apple products.
local
low complexity
apple
7.8
2018-04-02 CVE-2018-6251 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Nvidia GPU Driver
NVIDIA Windows GPU Display Driver contains a vulnerability in the DirectX 10 Usermode driver, where a specially crafted pixel shader can cause writing to unallocated memory, leading to denial of service or potential code execution.
local
low complexity
nvidia CWE-119
7.8
2018-04-02 CVE-2018-6250 NULL Pointer Dereference vulnerability in Nvidia GPU Driver
NVIDIA Windows GPU Display Driver contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape where a NULL pointer dereference occurs which may lead to denial of service or possible escalation of privileges.
local
low complexity
nvidia CWE-476
8.8
2018-04-02 CVE-2018-6249 NULL Pointer Dereference vulnerability in Nvidia GPU Driver
NVIDIA GPU Display Driver contains a vulnerability in kernel mode layer handler where a NULL pointer dereference may lead to denial of service or potential escalation of privileges.
local
low complexity
nvidia CWE-476
8.8
2018-04-02 CVE-2018-6248 Out-of-bounds Read vulnerability in Nvidia GPU Driver
NVIDIA Windows GPU Display Driver contains a vulnerability in the kernel mode layer handler for DxgkDdiEscape where the software uses a sequential operation to read or write a buffer, but it uses an incorrect length value that causes it to access memory that is outside of the bounds of the buffer which may lead to denial of service or possible escalation of privileges.
local
low complexity
nvidia CWE-125
8.8
2018-04-02 CVE-2018-6247 NULL Pointer Dereference vulnerability in Nvidia GPU Driver
NVIDIA Windows GPU Display Driver contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape where a NULL pointer dereference may lead to denial of service or possible escalation of privileges.
local
low complexity
nvidia CWE-476
8.8
2018-04-02 CVE-2018-0194 OS Command Injection vulnerability in Cisco IOS XE
Multiple vulnerabilities in the CLI parser of Cisco IOS XE Software could allow an authenticated, local attacker to inject arbitrary commands into the CLI of the affected software, which could allow the attacker to gain access to the underlying Linux shell of an affected device and execute commands with root privileges on the device.
local
low complexity
cisco CWE-78
7.8