Security Warnings — Week: 2024-W46

Palo Alto Networks Expedition OS Command Injection Vulnerability

2024-11-14 CVE-2024-9463

highPalo Alto Networks CVE 2024-W46

Palo Alto Networks Expedition SQL Injection Vulnerability

2024-11-14 CVE-2024-9465

highPalo Alto Networks CVE 2024-W46

Red Hat OpenShift: Mehrere Schwachstellen

2024-11-13 CVE-2023-45142

mediumBSI 2024-W46

.NET and Visual Studio Denial of Service Vulnerability

2024-11-12 CVE-2024-43499

highMicrosoft MSRC 2024-W46

.NET and Visual Studio Remote Code Execution Vulnerability

2024-11-12 CVE-2024-43498

criticalMicrosoft MSRC 2024-W46

A heap-buffer-overflow vulnerability has been identified in ntopng 6.2 in the Flow::dissectMDNS function.

2024-11-12 CVE-2024-53426

mediumMicrosoft MSRC 2024-W46

Active Directory Certificate Services Elevation of Privilege Vulnerability

2024-11-12 CVE-2024-49019

highMicrosoft MSRC 2024-W46

afs: Fix lock recursion

2024-11-12 CVE-2024-53090

mediumMicrosoft MSRC 2024-W46

Airlift.microsoft.com Elevation of Privilege Vulnerability

2024-11-12 CVE-2024-49056

highMicrosoft MSRC 2024-W46

ALSA: hda/cs8409: Fix possible NULL dereference

2024-11-12 CVE-2024-50160

mediumMicrosoft MSRC 2024-W46

An issue in bytecodealliance wasm-micro-runtime before v.b3f728c and fixed in commit 06df58f allows a remote attacker to escalate privileges via a crafted file to the check_was_abi

2024-11-12 CVE-2024-25431

highMicrosoft MSRC 2024-W46

Ansible-core: ansible-core user may read/write unauthorized content

2024-11-12 CVE-2024-9902

mediumMicrosoft MSRC 2024-W46

Apache Arrow R package: Arbitrary code execution when loading a malicious data file

2024-11-12 CVE-2024-52338

criticalMicrosoft MSRC 2024-W46

Arbitrary command execution through gitRepo volume

2024-11-12 CVE-2024-10220

highMicrosoft MSRC 2024-W46

arm64/sve: Discard stale CPU state when handling SVE traps

2024-11-12 CVE-2024-50275

highMicrosoft MSRC 2024-W46

ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe()

2024-11-12 CVE-2024-50103

mediumMicrosoft MSRC 2024-W46

ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove

2024-11-12 CVE-2024-50292

mediumMicrosoft MSRC 2024-W46

Atlassian Jira Server and Data Center Path Traversal Vulnerability

2024-11-12 CVE-2021-26086

highAtlassian CVE 2024-W46

Avahi: avahi wide-area dns predictable transaction ids

2024-11-12 CVE-2024-52616

mediumMicrosoft MSRC 2024-W46

Azure CycleCloud Remote Code Execution Vulnerability

2024-11-12 CVE-2024-43602

criticalMicrosoft MSRC 2024-W46

Azure Database for PostgreSQL Flexible Server Extension Elevation of Privilege Vulnerability

2024-11-12 CVE-2024-43613

highMicrosoft MSRC 2024-W46

Azure Database for PostgreSQL Flexible Server Extension Elevation of Privilege Vulnerability

2024-11-12 CVE-2024-49042

highMicrosoft MSRC 2024-W46

Azure Stack HCI Elevation of Privilege Vulnerability

2024-11-12 CVE-2024-49060

highMicrosoft MSRC 2024-W46

Bad documentation of error handling in ParseWithClaims can lead to potentially dangerous situations in golang-jwt

2024-11-12 CVE-2024-51744

lowMicrosoft MSRC 2024-W46

Bluetooth: bnep: fix wild-memory-access in proto_unregister

2024-11-12 CVE-2024-50148

mediumMicrosoft MSRC 2024-W46

Bluetooth: hci: fix null-ptr-deref in hci_read_supported_codecs

2024-11-12 CVE-2024-50255

mediumMicrosoft MSRC 2024-W46

Bluetooth: ISO: Fix UAF on iso_sock_timeout

2024-11-12 CVE-2024-50124

highMicrosoft MSRC 2024-W46

Bluetooth: SCO: Fix UAF on sco_sock_timeout

2024-11-12 CVE-2024-50125

highMicrosoft MSRC 2024-W46

bpf: Add sk_is_inet and IS_ICSK check in tls_sw_has_ctx_tx/rx

2024-11-12 CVE-2024-53091

mediumMicrosoft MSRC 2024-W46

bpf: Check validity of link->type in bpf_link_show_fdinfo()

2024-11-12 CVE-2024-53099

highMicrosoft MSRC 2024-W46

bpf: devmap: provide rxq after redirect

2024-11-12 CVE-2024-50162

mediumMicrosoft MSRC 2024-W46

bpf: Fix out-of-bounds write in trie_get_next_key()

2024-11-12 CVE-2024-50262

highMicrosoft MSRC 2024-W46

bpf: Fix overloading of MEM_UNINIT's meaning

2024-11-12 CVE-2024-50164

highMicrosoft MSRC 2024-W46

bpf: support non-r10 register spill/fill to/from stack in precision tracking

2024-11-12 CVE-2023-52920

mediumMicrosoft MSRC 2024-W46

bpf: Use raw_spinlock_t in ringbuf

2024-11-12 CVE-2024-50138

mediumMicrosoft MSRC 2024-W46

btrfs: fix use-after-free of block device file in __btrfs_free_extra_devids()

2024-11-12 CVE-2024-50217

highMicrosoft MSRC 2024-W46

btrfs: reinitialize delayed ref list after deleting it from the list

2024-11-12 CVE-2024-50273

mediumMicrosoft MSRC 2024-W46

Cisco Adaptive Security Appliance (ASA) Cross-Site Scripting (XSS) Vulnerability

2024-11-12 CVE-2014-2120

highCisco CVE 2024-W46

Configuring a proxy in a stream context might allow for CRLF injection in URIs

2024-11-12 CVE-2024-11234

highMicrosoft MSRC 2024-W46

Connecting to a malicious Codespaces via GH CLI could allow command execution on the user's computer

2024-11-12 CVE-2024-52308

highMicrosoft MSRC 2024-W46

cxl/port: Fix use-after-free, permit out-of-order decoder shutdown

2024-11-12 CVE-2024-50226

mediumMicrosoft MSRC 2024-W46

Denial of Service through Data corruption in gRPC-C++

2024-11-12 CVE-2024-11407

highMicrosoft MSRC 2024-W46

dm cache: fix flushing uninitialized delayed_work on cache_ctr error

2024-11-12 CVE-2024-50280

highMicrosoft MSRC 2024-W46

dm cache: fix out-of-bounds access to the dirty bitset when resizing

2024-11-12 CVE-2024-50279

highMicrosoft MSRC 2024-W46

dm cache: fix potential out-of-bounds access on the first resume

2024-11-12 CVE-2024-50278

highMicrosoft MSRC 2024-W46

drm/amd/display: Disable PSR-SU on Parade 08-01 TCON too

2024-11-12 CVE-2024-50108

mediumMicrosoft MSRC 2024-W46

drm/amd/display: fix a UBSAN warning in DML2.1

2024-11-12 CVE-2024-50177

mediumMicrosoft MSRC 2024-W46

drm/amdgpu: add missing size check in amdgpu_debugfs_gprwave_read()

2024-11-12 CVE-2024-50282

highMicrosoft MSRC 2024-W46

drm/amdgpu: prevent NULL pointer dereference if ATIF is not supported

2024-11-12 CVE-2024-53060

mediumMicrosoft MSRC 2024-W46

drm/i915/hdcp: Add encoder check in hdcp2_get_capability

2024-11-12 CVE-2024-53050

mediumMicrosoft MSRC 2024-W46

drm/xe/ufence: Prefetch ufence addr to catch bogus address

2024-11-12 CVE-2024-53098

highMicrosoft MSRC 2024-W46

fbdev: sisfb: Fix strbuf array overflow

2024-11-12 CVE-2024-50180

highMicrosoft MSRC 2024-W46

firmware: arm_scmi: Fix slab-use-after-free in scmi_bus_notifier()

2024-11-12 CVE-2024-53068

highMicrosoft MSRC 2024-W46

firmware: arm_scmi: Fix the double free in scmi_debugfs_common_setup()

2024-11-12 CVE-2024-50159

highMicrosoft MSRC 2024-W46

fs: Fix uninitialized value issue in from_kuid and from_kgid

2024-11-12 CVE-2024-53101

mediumMicrosoft MSRC 2024-W46

fs/ntfs3: Add rough attr alloc_size check

2024-11-12 CVE-2024-50246

highMicrosoft MSRC 2024-W46

fs/ntfs3: Additional check in ni_clear()

2024-11-12 CVE-2024-50244

mediumMicrosoft MSRC 2024-W46

fs/ntfs3: Additional check in ntfs_file_release

2024-11-12 CVE-2024-50242

highMicrosoft MSRC 2024-W46

fs/ntfs3: Check if more than chunk-size bytes are written

2024-11-12 CVE-2024-50247

highMicrosoft MSRC 2024-W46

fsdax: dax_unshare_iter needs to copy entire blocks

2024-11-12 CVE-2024-50250

highMicrosoft MSRC 2024-W46