Fedoraproject

Fedora

5357 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
8.8

CVE-2023-24805

Exploit
  • EPSS 3.7%
  • Veröffentlicht 17.05.2023 18:15:09
  • Zuletzt bearbeitet 21.11.2024 07:48:25

cups-filters contains backends, filters, and other software required to get the cups printing service working on operating systems other than macos. If you use the Backend Error Handler (beh) to create an accessible network printer, this security vul...

8.8

CVE-2023-2721

  • EPSS 0.87%
  • Veröffentlicht 16.05.2023 19:15:09
  • Zuletzt bearbeitet 05.05.2025 16:15:35

Use after free in Navigation in Google Chrome prior to 113.0.5672.126 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Critical)

8.8

CVE-2023-2722

  • EPSS 0.85%
  • Veröffentlicht 16.05.2023 19:15:09
  • Zuletzt bearbeitet 05.05.2025 16:15:35

Use after free in Autofill UI in Google Chrome on Android prior to 113.0.5672.126 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

8.8

CVE-2023-2723

  • EPSS 15.43%
  • Veröffentlicht 16.05.2023 19:15:09
  • Zuletzt bearbeitet 05.05.2025 16:15:36

Use after free in DevTools in Google Chrome prior to 113.0.5672.126 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

8.8

CVE-2023-2724

  • EPSS 29.14%
  • Veröffentlicht 16.05.2023 19:15:09
  • Zuletzt bearbeitet 05.05.2025 16:15:36

Type confusion in V8 in Google Chrome prior to 113.0.5672.126 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

8.8

CVE-2023-2725

  • EPSS 24.66%
  • Veröffentlicht 16.05.2023 19:15:09
  • Zuletzt bearbeitet 05.05.2025 16:15:36

Use after free in Guest View in Google Chrome prior to 113.0.5672.126 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

8.8

CVE-2023-2726

  • EPSS 0.68%
  • Veröffentlicht 16.05.2023 19:15:09
  • Zuletzt bearbeitet 05.05.2025 16:15:36

Inappropriate implementation in WebApp Installs in Google Chrome prior to 113.0.5672.126 allowed an attacker who convinced a user to install a malicious web app to bypass install dialog via a crafted HTML page. (Chromium security severity: Medium)

5.5

CVE-2023-2700

  • EPSS 0.3%
  • Veröffentlicht 15.05.2023 22:15:12
  • Zuletzt bearbeitet 28.01.2025 17:15:14

A vulnerability was found in libvirt. This security flaw ouccers due to repeatedly querying an SR-IOV PCI device's capabilities that exposes a memory leak caused by a failure to free the virPCIVirtualFunction array within the parent struct's g_autopt...

6.5

CVE-2023-1729

Exploit
  • EPSS 1.29%
  • Veröffentlicht 15.05.2023 22:15:10
  • Zuletzt bearbeitet 20.03.2025 17:01:00

A flaw was found in LibRaw. A heap-buffer-overflow in raw2image_ex() caused by a maliciously crafted file may lead to an application crash.

5.9

CVE-2023-32570

  • EPSS 0.74%
  • Veröffentlicht 10.05.2023 05:15:12
  • Zuletzt bearbeitet 28.01.2025 16:15:36

VideoLAN dav1d before 1.2.0 has a thread_task.c race condition that can lead to an application crash, related to dav1d_decode_frame_exit.