Week: 2024-W11

.NET Framework Information Disclosure Vulnerability

2024-03-12 CVE-2024-29059

An attacker could have leveraged the Windows Error Reporter to run arbitrary code on the system escaping the sandbox. Note: This issue only affected Windows operating systems. Ot

2024-03-12 CVE-2024-2605

An attacker was able to perform an out-of-bounds read or write on a JavaScript object by fooling range-based bounds check elimination. This vulnerability affects Firefox < 124.0

2024-03-12 CVE-2024-29943

criticalMicrosoft MSRC 2024-W11

arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved

2024-03-12 CVE-2023-52561

Azure C SDK Integer Wraparound Vulnerability

2024-03-12 CVE-2024-29195

Azure Data Studio Elevation of Privilege Vulnerability

2024-03-12 CVE-2024-26203

Azure SDK Spoofing Vulnerability

2024-03-12 CVE-2024-21421

bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers

2024-03-12 CVE-2023-52621

btrfs: remove BUG() after failure to insert delayed dir index item

2024-03-12 CVE-2023-52569

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') in Wireshark

2024-03-12 CVE-2023-6175

cifs: Fix UAF in cifs_demultiplex_thread()

2024-03-12 CVE-2023-52572

Comments in display names are incorrectly handled in net/mail

2024-03-12 CVE-2024-24784

drm/amd/display: Fix variable deferencing before NULL check in edp_setup_replay()

2024-03-12 CVE-2024-26648

drm/amd/display: Refactor DMCUB enter/exit idle interface

2024-03-12 CVE-2023-52625

drm/amd/display: Wake DMCUB before executing GPINT commands

2024-03-12 CVE-2023-52624

drm/amdgpu: Fix possible NULL dereference in amdgpu_ras_query_error_status_helper()

2024-03-12 CVE-2023-52585

drm/msm/dpu: Add mutex lock in control vblank irq

2024-03-12 CVE-2023-52586

Errors returned from JSON marshaling may break template escaping in html/template

2024-03-12 CVE-2024-24785

Hypervisor-Protected Code Integrity (HVCI) Security Feature Bypass Vulnerability

2024-03-12 CVE-2024-21431

If an attacker could find a way to trigger a particular code path in `SafeRefPtr`, it could have triggered a crash or potentially be leveraged to achieve code execution. This vulne

2024-03-12 CVE-2024-2612

If kernel headers need to be extracted bpftrace will attempt to load them from a temporary directory. An unprivileged attacker could use this to force bcc to load compromised linux

2024-03-12 CVE-2024-2313

If kernel headers need to be extracted, bcc will attempt to load them from a temporary directory. An unprivileged attacker could use this to force bcc to load compromised linux hea

2024-03-12 CVE-2024-2314

In Emacs before 29.3, LaTeX preview is enabled by default for e-mail attachments.

2024-03-12 CVE-2024-30204

In Fluent Bit 2.1.8 through 2.2.1 a NULL pointer dereference can be caused via an invalid HTTP payload with the content type of x-www-form-urlencoded. It crashes and does not resta

2024-03-12 CVE-2024-23722

In Qt 6.5.4, 6.5.5, and 6.6.2, QNetworkReply header data might be accessed via a dangling pointer in Qt for WebAssembly (wasm). (Earlier and later versions are unaffected.)

2024-03-12 CVE-2024-30161

Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

2024-03-12 CVE-2023-45289

jfs: fix array-index-out-of-bounds in dbAdjTree

2024-03-12 CVE-2023-52601

latchset jose through version 11 allows attackers to cause a denial of service (CPU consumption) via a large p2c (aka PBES2 Count) value.

2024-03-12 CVE-2023-50967

Libdwarf: crashes randomly on fuzzed object

2024-03-12 CVE-2024-2002

libexpat through 2.6.1 allows an XML Entity Expansion attack when there is isolated use of external parsers (created via XML_ExternalEntityParserCreate).

2024-03-12 CVE-2024-28757

Libvirt: null pointer dereference in udevconnectlistallinterfaces()

2024-03-12 CVE-2024-2496

Mariner

2024-03-12 CVE-2023-52160

Mariner

2024-03-12 CVE-2023-52434

Mariner

2024-03-12 CVE-2023-52435

Mariner

2024-03-12 CVE-2024-26587

Mariner

2024-03-12 CVE-2024-26588

Mariner

2024-03-12 CVE-2024-26594

media: rkisp1: Fix IRQ disable race issue

2024-03-12 CVE-2023-52589

Memory exhaustion in multipart form parsing in net/textproto and net/http

2024-03-12 CVE-2023-45290

Memory safety bugs present in Firefox 123, Firefox ESR 115.8, and Thunderbird 115.8. Some of these bugs showed evidence of memory corruption and we presume that with enough effort

2024-03-12 CVE-2024-2614

Microsoft AllJoyn API Denial of Service Vulnerability

2024-03-12 CVE-2024-21438

Microsoft Authenticator Elevation of Privilege Vulnerability

2024-03-12 CVE-2024-21390

Microsoft Azure Kubernetes Service Confidential Container Elevation of Privilege Vulnerability

2024-03-12 CVE-2024-21400

criticalMicrosoft MSRC 2024-W11

Microsoft Defender Security Feature Bypass Vulnerability

2024-03-12 CVE-2024-20671

Microsoft Django Backend for SQL Server Remote Code Execution Vulnerability

2024-03-12 CVE-2024-26164

Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability

2024-03-12 CVE-2024-21419

Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability

2024-03-12 CVE-2024-26163

Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability

2024-03-12 CVE-2024-26246

Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability

2024-03-12 CVE-2024-26247

Microsoft Edge (Chromium-based) Spoofing Vulnerability

2024-03-12 CVE-2024-29057

Microsoft Edge for Android Spoofing Vulnerability

2024-03-12 CVE-2024-26167

Microsoft Exchange Server Remote Code Execution Vulnerability

2024-03-12 CVE-2024-26198

Microsoft Intune Linux Agent Elevation of Privilege Vulnerability

2024-03-12 CVE-2024-26201

Microsoft ODBC Driver Remote Code Execution Vulnerability

2024-03-12 CVE-2024-21440

Microsoft ODBC Driver Remote Code Execution Vulnerability

2024-03-12 CVE-2024-21451

Microsoft ODBC Driver Remote Code Execution Vulnerability

2024-03-12 CVE-2024-26159

Microsoft ODBC Driver Remote Code Execution Vulnerability

2024-03-12 CVE-2024-26162

Microsoft Office Elevation of Privilege Vulnerability

2024-03-12 CVE-2024-26199

Microsoft QUIC Denial of Service Vulnerability

2024-03-12 CVE-2024-26190