VendorsFedora Projectfedora36
Vulnerabilities

Fedora Project Fedora 36

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

711CVEs
CVE-2022-46340
A vulnerability was found in X.Org. This security flaw occurs becuase the swap handler for the XTestFakeInput request of the XTest extension may corrupt the stack if GenericEvents with lengths larger than 32 bytes are sent through a the XTestFakeInput request. This issue can lead to local privileges elevation on systems where the X server is running privileged and remote code execution for ssh X forwarding sessions. This issue does not affect systems where client and server use the same byte order.
Published 2022-12-14 · Modified
8.8EPSS 0.026
CVE-2022-46343
A vulnerability was found in X.Org. This security flaw occurs because the handler for the ScreenSaverSetAttributes request may write to memory after it has been freed. This issue can lead to local privileges elevation on systems where the X server is running privileged and remote code execution for ssh X forwarding sessions.
Published 2022-12-14 · Modified
8.8EPSS 0.025
CVE-2021-33621
The cgi gem before 0.1.0.2, 0.2.x before 0.2.2, and 0.3.x before 0.3.5 for Ruby allows HTTP response splitting. This is relevant to applications that use untrusted user input either to generate an HTTP response or to create a CGI::Cookie object.
Published 2022-11-18 · Modified
8.8EPSS 0.024
CVE-2018-20545
There is an illegal WRITE memory access at common-image.c (function load_image) in libcaca 0.99.beta19 for 4bpp data.
Published 2018-12-28 · Modified
8.8EPSS 0.024
CVE-2022-21703
Cross Site Request Forgery in Grafana
Published 2022-02-08 · Modified
8.8EPSS 0.023
CVE-2021-21408
Access to restricted PHP code by dynamic static class access in smarty
Published 2022-01-10 · Modified
8.8EPSS 0.022
CVE-2023-27534
A path traversal vulnerability exists in curl <8.0.0 SFTP implementation causes the tilde (~) character to be wrongly replaced when used as a prefix in the first path element, in addition to its intended use as the first element to indicate a path relative to the user's home directory. Attackers can exploit this flaw to bypass filtering or execute arbitrary code by crafting a path like /~2/foo while accessing a server with a specific user.
Published 2023-03-30 · Modified
8.8EPSS 0.022
CVE-2021-29454
Sandbox Escape by math function in smarty
Published 2022-01-10 · Modified
8.8EPSS 0.019
CVE-2022-24828
Missing input validation can lead to command execution in composer
Published 2022-04-13 · Modified
8.8EPSS 0.019
CVE-2022-32886
A buffer overflow issue was addressed with improved memory handling. This issue is fixed in Safari 16, iOS 16, iOS 15.7 and iPadOS 15.7. Processing maliciously crafted web content may lead to arbitrary code execution.
Published 2022-09-20 · Modified
8.8EPSS 0.019
CVE-2018-20549
There is an illegal WRITE memory access at caca/file.c (function caca_file_read) in libcaca 0.99.beta19.
Published 2018-12-28 · Modified
8.8EPSS 0.018
CVE-2018-20548
There is an illegal WRITE memory access at common-image.c (function load_image) in libcaca 0.99.beta19 for 1bpp data.
Published 2018-12-28 · Modified
8.8EPSS 0.018
CVE-2022-28042
stb_image.h v2.27 was discovered to contain an heap-based use-after-free via the function stbi__jpeg_huff_decode.
Published 2022-04-15 · Modified
8.8EPSS 0.016
CVE-2022-28048
STB v2.27 was discovered to contain an integer shift of invalid size in the component stbi__jpeg_decode_block_prog_ac.
Published 2022-04-15 · Modified
8.8EPSS 0.016
CVE-2022-3550
X.org Server xkb.c _GetCountedString buffer overflow
Published 2022-10-17 · Modified
8.8EPSS 0.016
CVE-2022-42823
A type confusion issue was addressed with improved memory handling. This issue is fixed in tvOS 16.1, macOS Ventura 13, watchOS 9.1, Safari 16.1, iOS 16.1 and iPadOS 16. Processing maliciously crafted web content may lead to arbitrary code execution.
Published 2022-11-01 · Modified
8.8EPSS 0.015
CVE-2022-44638
In libpixman in Pixman before 0.42.2, there is an out-of-bounds write (aka heap-based buffer overflow) in rasterize_edges_8 due to an integer overflow in pixman_sample_floor_y.
Published 2022-11-03 · Modified
8.8EPSS 0.015
CVE-2022-2295
Type confusion in V8 in Google Chrome prior to 103.0.5060.114 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
Published 2022-07-28 · Modified
8.8EPSS 0.015
CVE-2022-0100
Heap buffer overflow in Media streams API in Google Chrome prior to 97.0.4692.71 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
Published 2022-02-11 · Modified
8.8EPSS 0.015
CVE-2022-0115
Uninitialized use in File API in Google Chrome prior to 97.0.4692.71 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page.
Published 2022-02-11 · Modified
8.8EPSS 0.015
CVE-2022-2156
Use after free in Core in Google Chrome prior to 103.0.5060.53 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
Published 2022-07-28 · Modified
8.8EPSS 0.015
CVE-2022-0101
Heap buffer overflow in Bookmarks in Google Chrome prior to 97.0.4692.71 allowed a remote attacker who convinced a user to perform specific user gesture to potentially exploit heap corruption via specific user gesture.
Published 2022-02-11 · Modified
8.8EPSS 0.014
CVE-2022-46342
A vulnerability was found in X.Org. This security flaw occurs because the handler for the XvdiSelectVideoNotify request may write to memory after it has been freed. This issue can lead to local privileges elevation on systems where the X se
Published 2022-12-14 · Modified
8.8EPSS 0.014
CVE-2022-0104
Heap buffer overflow in ANGLE in Google Chrome prior to 97.0.4692.71 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
Published 2022-02-11 · Modified
8.8EPSS 0.013
CVE-2023-1534
Out of bounds read in ANGLE in Google Chrome prior to 111.0.5563.110 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
Published 2023-03-21 · Modified
8.8EPSS 0.013
CVE-2022-0096
Use after free in Storage in Google Chrome prior to 97.0.4692.71 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
Published 2022-02-11 · Modified
8.8EPSS 0.013
CVE-2022-40320
cfg_tilde_expand in confuse.c in libConfuse 3.3 has a heap-based buffer over-read.
Published 2022-09-09 · Modified
8.8EPSS 0.013
CVE-2022-0102
Type confusion in V8 in Google Chrome prior to 97.0.4692.71 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
Published 2022-02-11 · Modified
8.8EPSS 0.013
CVE-2022-0106
Use after free in Autofill in Google Chrome prior to 97.0.4692.71 allowed a remote attacker who convinced a user to perform specific user gesture to potentially exploit heap corruption via a crafted HTML page.
Published 2022-02-11 · Modified
8.8EPSS 0.013
CVE-2022-24805
net-snmp: A buffer overflow in the handling of the INDEX of NET-SNMP-VACM-MIB can cause an out-of-bounds memory access.
Published 2024-04-16 · Analyzed
8.8EPSS 0.013
CVE-2023-1532
Out of bounds read in GPU Video in Google Chrome prior to 111.0.5563.110 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
Published 2023-03-21 · Modified
8.8EPSS 0.013
CVE-2022-0105
Use after free in PDF Accessibility in Google Chrome prior to 97.0.4692.71 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
Published 2022-02-11 · Modified
8.8EPSS 0.013
CVE-2022-42719
A use-after-free in the mac80211 stack when parsing a multi-BSSID element in the Linux kernel 5.2 through 5.19.x before 5.19.16 could be used by attackers (able to inject WLAN frames) to crash the kernel and potentially execute code.
Published 2022-10-13 · Modified
8.8EPSS 0.013
CVE-2022-2162
Insufficient policy enforcement in File System API in Google Chrome on Windows prior to 103.0.5060.53 allowed a remote attacker to bypass file system access via a crafted HTML page.
Published 2022-07-28 · Modified
8.8EPSS 0.013
CVE-2022-0103
Use after free in SwiftShader in Google Chrome prior to 97.0.4692.71 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
Published 2022-02-11 · Modified
8.8EPSS 0.012
CVE-2022-0099
Use after free in Sign-in in Google Chrome prior to 97.0.4692.71 allowed a remote attacker who convinced a user to perform specific user gestures to potentially exploit heap corruption via specific user gesture.
Published 2022-02-11 · Modified
8.8EPSS 0.012
CVE-2022-24810
net-snmp: A malformed OID in a SET to the nsVacmAccessTable can cause a NULL pointer dereference.
Published 2024-04-16 · Analyzed
8.8EPSS 0.011
CVE-2022-39286
Execution with Unnecessary Privileges in JupyterApp
Published 2022-10-26 · Modified
8.8EPSS 0.011
CVE-2022-3640
Linux Kernel Bluetooth l2cap_core.c l2cap_conn_del use after free
Published 2022-10-21 · Modified
8.8EPSS 0.011
CVE-2023-2137
Heap buffer overflow in sqlite in Google Chrome prior to 112.0.5615.137 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)
Published 2023-04-19 · Modified
8.8EPSS 0.011
← Prev3 / 18Next →