Debian Security Vulnerabilities (CVEs)

This vulnerability is a heap buffer overflow in WebRTC within Google Chrome that allows remote attackers to potentially exploit heap corruption via a ...

CVE-2023-6873 is a memory corruption vulnerability in Firefox that could allow an attacker to execute arbitrary code on a victim's system. It affects ...

This CVE-2023-6932 is a use-after-free vulnerability in the Linux kernel's IGMP (Internet Group Management Protocol) component that allows local attac...

This CVE describes a heap buffer overflow vulnerability in Firefox's WebGL DrawElementsInstanced method when used with Mesa VM driver. An attacker cou...

CVE-2023-6858 is a heap buffer overflow vulnerability in Firefox's nsTextFragment component caused by insufficient out-of-memory handling. Attackers c...

This vulnerability allows remote attackers to execute arbitrary code via a heap buffer overflow in Firefox's nsWindow::PickerOpen method when running ...

This vulnerability in Firefox, Firefox ESR, and Thunderbird involves undefined behavior in the ShutdownObserver() function due to missing virtual dest...

This vulnerability in xorg-server allows out-of-bounds memory reads and writes when querying or changing XKB button actions, such as switching from to...

This vulnerability in LibreOffice allows attackers to execute built-in macros without user warnings by exploiting insufficient permission validation i...

This is a use-after-free vulnerability in Google Chrome's Media Stream component that allows remote attackers to potentially exploit heap corruption v...

This is a use-after-free vulnerability in Google Chrome's Media Capture component that could allow heap corruption. Attackers can exploit it by tricki...

This vulnerability in Sierra Wireless ALEOS ACEManager allows unauthenticated attackers to cause a temporary denial of service by sending malformed au...

This is a memory corruption vulnerability in Apple's WebKit browser engine that allows arbitrary code execution when processing malicious web content....

This is a use-after-free vulnerability in Chrome's Mojo IPC system that allows remote attackers to potentially exploit heap corruption. Attackers can ...

This is a use-after-free vulnerability in Chrome's libavif library that allows remote attackers to potentially exploit heap corruption via crafted AVI...

This CVE describes memory safety bugs in Firefox, Firefox ESR, and Thunderbird that could lead to memory corruption. With sufficient effort, attackers...

This vulnerability is a use-after-free memory corruption flaw in Firefox, Firefox ESR, and Thunderbird's ReadableByteStreams implementation. It allows...

This is a use-after-free vulnerability in Google Chrome's garbage collection that allows remote attackers to potentially exploit heap corruption. Atta...

CVE-2023-23583 is a hardware vulnerability in certain Intel processors where specific instruction sequences can cause unexpected behavior, potentially...

This is a use-after-free vulnerability in Chrome's WebAudio component that allows remote attackers to potentially exploit heap corruption. Attackers c...

This CVE describes an integer overflow vulnerability in Chrome's USB component that could allow heap corruption. Attackers could exploit this via a ma...

This is a use-after-free vulnerability in Google Chrome's printing component that allows heap corruption when users perform specific UI gestures. Atta...

This is a use-after-free vulnerability in Google Chrome's Profiles feature that could allow heap corruption. Attackers can exploit it by tricking user...

This is a use-after-free vulnerability in Google Chrome's Side Panel feature that could allow remote attackers to exploit heap corruption. Attackers c...

This vulnerability allows remote attackers to perform out-of-bounds memory access in Google Chrome's USB component via a crafted HTML page. Attackers ...

CVE-2023-34059 is a file descriptor hijack vulnerability in open-vm-tools' vmware-user-suid-wrapper that allows non-root users to hijack the /dev/uinp...

This CVE-2023-5367 is an out-of-bounds write vulnerability in xorg-x11-server that allows attackers to write beyond allocated heap buffers. It could l...

This is a logic vulnerability in Apple's WebKit browser engine that allows arbitrary code execution when processing malicious web content. Attackers c...

This vulnerability in Mozilla graphics drivers allows attackers to cause denial of service through large draw calls. It affects Firefox versions befor...

A use-after-free vulnerability in Firefox, Firefox ESR, and Thunderbird garbage collection could allow attackers to cause a crash or potentially execu...

This is a use-after-free vulnerability in Google Chrome's Profiles component that allows remote attackers to potentially exploit heap corruption. Atta...

An out-of-bounds read vulnerability in the mod_macro module of Apache HTTP Server allows attackers to read memory beyond allocated buffers. This affec...

A buffer overflow vulnerability exists in the Intel IGB Ethernet driver in Linux kernels before 6.5.3. When processing frames larger than the configur...

This critical vulnerability in Google Chrome's Site Isolation feature allows remote attackers to trigger use-after-free conditions via crafted HTML pa...

A heap buffer overflow vulnerability in Chrome's PDF renderer allows remote attackers to potentially exploit heap corruption via a crafted PDF file. U...

This is a use-after-free vulnerability in Chrome's Blink History component that allows remote attackers to potentially exploit heap corruption via a c...

This CVE describes an integer overflow vulnerability in Eclipse Jetty's HTTP/2 HPACK header processing. Attackers can send specially crafted HTTP/2 re...

CVE-2023-44487 is an HTTP/2 protocol vulnerability that allows attackers to cause denial of service by rapidly resetting streams, consuming server res...

CVE-2023-43641 is a critical out-of-bounds array access vulnerability in libcue that allows remote code execution. Attackers can exploit this by trick...

This vulnerability in MediaWiki's ApiPageSet.php allows attackers to trigger an infinite loop when querying pages with specific redirect and title con...

A use-after-free vulnerability in WebKitGTK's MediaRecorder API allows memory corruption when processing malicious web content. This could lead to arb...

CVE-2023-4911 is a buffer overflow vulnerability in the GNU C Library's dynamic loader (ld.so) that allows local attackers to exploit SUID binaries. B...

This is a use-after-free vulnerability in Chrome's extension system that allows heap corruption. Attackers can exploit it by tricking users into insta...

This CVE describes a use-after-free vulnerability in the Linux kernel's netfilter nf_tables component. It allows local attackers to escalate privilege...