Fedora

CVEs (5,359)

• CVE-2023-3215HigJun 13, 2023
  Google

  Chrome
  risk 0.58cvss 8.8epss 0.14

  Use after free in WebRTC in Google Chrome prior to 114.0.5735.133 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

• CVE-2023-2723HigMay 16, 2023
  Google

  Chrome
  risk 0.58cvss 8.8epss 0.15

  Use after free in DevTools in Google Chrome prior to 113.0.5672.126 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

• CVE-2023-22809HigJan 18, 2023
  Sudo Project

  Sudo
  risk 0.58cvss 7.8epss 0.55

  In Sudo before 1.9.12p2, the sudoedit (aka -e) feature mishandles extra arguments passed in the user-provided environment variables (SUDO_EDITOR, VISUAL, and EDITOR), allowing a local attacker to append arbitrary entries to the list of files to process. This can lead to…

• CVE-2021-41556CriJul 28, 2022
  Squirrel Lang

  Squirrel
  risk 0.58cvss 10.0epss 0.03

  sqclass.cpp in Squirrel through 2.2.5 and 3.x through 3.1 allows an out-of-bounds read (in the core interpreter) that can lead to Code Execution. If a victim executes an attacker-controlled squirrel script, it is possible for the attacker to break out of the squirrel script…

• CVE-2022-24724HigMar 3, 2022
  GitHub

  Cmark Gfm
  risk 0.58cvss 8.8epss 0.05

  cmark-gfm is GitHub's extended version of the C reference implementation of CommonMark. Prior to versions 0.29.0.gfm.3 and 0.28.3.gfm.21, an integer overflow in cmark-gfm's table row parsing `table.c:row_from_string` may lead to heap memory corruption when parsing tables who's…

• CVE-2022-24407HigFeb 24, 2022
  Cyrus

  Sasl
  risk 0.58cvss 8.8epss 0.04

  In Cyrus SASL 2.1.17 through 2.1.27 before 2.1.28, plugins/sql.c does not escape the password for a SQL INSERT or UPDATE statement.

• CVE-2021-45341HigJan 25, 2022
  Librecad

  Librecad
  risk 0.58cvss 8.8epss 0.07

  A buffer overflow vulnerability in CDataMoji of the jwwlib component of LibreCAD 2.2.0-rc3 and older allows an attacker to achieve Remote Code Execution using a crafted JWW document.

• CVE-2021-30625HigOct 8, 2021
  Google

  Chrome
  risk 0.58cvss 8.8epss 0.10

  Use after free in Selection API in Google Chrome prior to 93.0.4577.82 allowed a remote attacker who convinced the user the visit a malicious website to potentially exploit heap corruption via a crafted HTML page.

• CVE-2021-30624HigSep 3, 2021
  Chromium

  Chromium
  risk 0.58cvss 8.8epss 0.04

  Chromium: CVE-2021-30624 Use after free in Autofill

• CVE-2021-30623HigSep 3, 2021
  Chromium

  Chromium
  risk 0.58cvss 8.8epss 0.04

  Chromium: CVE-2021-30623 Use after free in Bookmarks

• CVE-2021-30622HigSep 3, 2021
  Chromium

  Chromium
  risk 0.58cvss 8.8epss 0.04

  Chromium: CVE-2021-30622 Use after free in WebApp Installs

• CVE-2021-30620HigSep 3, 2021
  Chromium

  Chromium
  risk 0.58cvss 8.8epss 0.04

  Chromium: CVE-2021-30620 Insufficient policy enforcement in Blink

• CVE-2021-30618HigSep 3, 2021
  Chromium

  Chromium
  risk 0.58cvss 8.8epss 0.04

  Chromium: CVE-2021-30618 Inappropriate implementation in DevTools

• CVE-2021-30616HigSep 3, 2021
  Chromium

  Chromium
  risk 0.58cvss 8.8epss 0.04

  Chromium: CVE-2021-30616 Use after free in Media

• CVE-2021-30614HigSep 3, 2021
  Chromium

  Chromium
  risk 0.58cvss 8.8epss 0.04

  Chromium: CVE-2021-30614 Heap buffer overflow in TabStrip

• CVE-2021-30613HigSep 3, 2021
  Chromium

  Chromium
  risk 0.58cvss 8.8epss 0.04

  Chromium: CVE-2021-30613 Use after free in Base internals

• CVE-2021-30610HigSep 3, 2021
  Chromium

  Chromium
  risk 0.58cvss 8.8epss 0.04

  Chromium: CVE-2021-30610 Use after free in Extensions API

• CVE-2021-30609HigSep 3, 2021
  Chromium

  Chromium
  risk 0.58cvss 8.8epss 0.04

  Chromium: CVE-2021-30609 Use after free in Sign-In

• CVE-2021-30608HigSep 3, 2021
  Chromium

  Chromium
  risk 0.58cvss 8.8epss 0.04

  Chromium: CVE-2021-30608 Use after free in Web Share

• CVE-2021-30607HigSep 3, 2021
  Chromium

  Chromium
  risk 0.58cvss 8.8epss 0.04

  Chromium: CVE-2021-30607 Use after free in Permissions