Security Warnings — Week: 2024-W24

AMD Prozessoren: Mehrere Schwachstellen ermöglichen Offenlegung von Informationen

2024-06-13 CVE-2023-20594

lowBSI 2024-W24

Android Pixel Privilege Escalation Vulnerability

2024-06-13 CVE-2024-32896

highAndroid CVE 2024-W24

Dell BIOS: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriff

2024-06-13 CVE-2023-39251

highBSI 2024-W24

Microsoft Windows Error Reporting Service Improper Privilege Management Vulnerability

2024-06-13 CVE-2024-26169

criticalMicrosoft CVE 2024-W24

Progress Telerik Report Server Authentication Bypass by Spoofing Vulnerability

2024-06-13 CVE-2024-4358

highProgress CVE 2024-W24

Arm Mali GPU Kernel Driver Use-After-Free Vulnerability

2024-06-12 CVE-2024-4610

highArm CVE 2024-W24

PHP-CGI OS Command Injection Vulnerability

2024-06-12 CVE-2024-4577

criticalPHP Group CVE 2024-W24

9p: add missing locking around taking dentry fid list

2024-06-11 CVE-2024-39463

highMicrosoft MSRC 2024-W24

A Stack Buffer Overflow vulnerability in zziplibv 0.13.77 allows attackers to cause a denial of service via the __zzip_fetch_disk_trailer() function at /zzip/zip.c.

2024-06-11 CVE-2024-39134

highMicrosoft MSRC 2024-W24

af_unix: Update unix_sk(sk)->oob_skb under sk_receive_queue lock.

2024-06-11 CVE-2024-36972

highMicrosoft MSRC 2024-W24

An attacker could have caused a use-after-free in the JavaScript engine to read memory in the JavaScript string section of the heap. This vulnerability affects Firefox < 127.

2024-06-11 CVE-2024-5694

highMicrosoft MSRC 2024-W24

An issue in htop-dev htop v.2.20 allows a local attacker to cause an out-of-bounds access in the Header_populateFromSettings function.

2024-06-11 CVE-2024-37676

highMicrosoft MSRC 2024-W24

Arbitrary File Overwrite in download_model_with_test_data in onnx/onnx

2024-06-11 CVE-2024-5187

highMicrosoft MSRC 2024-W24

Argument Injection in PHP-CGI

2024-06-11 CVE-2024-4577

criticalMicrosoft MSRC 2024-W24

Azure Identity Libraries and Microsoft Authentication Library Elevation of Privilege Vulnerability

2024-06-11 CVE-2024-35255

mediumMicrosoft MSRC 2024-W24

Azure Monitor Agent Elevation of Privilege Vulnerability

2024-06-11 CVE-2024-35254

highMicrosoft MSRC 2024-W24

Azure Science Virtual Machine (DSVM) Elevation of Privilege Vulnerability

2024-06-11 CVE-2024-37325

highMicrosoft MSRC 2024-W24

Azure Storage Movement Client Library Denial of Service Vulnerability

2024-06-11 CVE-2024-35252

highMicrosoft MSRC 2024-W24

Bluetooth: HCI: Remove HCI_AMP support

2024-06-11 CVE-2024-38620

mediumMicrosoft MSRC 2024-W24

bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq

2024-06-11 CVE-2024-38540

mediumMicrosoft MSRC 2024-W24

bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE

2024-06-11 CVE-2024-38564

mediumMicrosoft MSRC 2024-W24

bpf: Allow delete from sockmap/sockhash only if update is allowed

2024-06-11 CVE-2024-38662

mediumMicrosoft MSRC 2024-W24

btrfs: fix crash on racing fsync and size-extending write into prealloc

2024-06-11 CVE-2024-37354

mediumMicrosoft MSRC 2024-W24

Buffer overread when using an empty list with SSLContext.set_npn_protocols()

2024-06-11 CVE-2024-5642

mediumMicrosoft MSRC 2024-W24

By monitoring the time certain operations take, an attacker could have guessed which external protocol handlers were functional on a user's system. This vulnerability affects Firef

2024-06-11 CVE-2024-5690

mediumMicrosoft MSRC 2024-W24

Command injection via array-ish $command parameter of proc_open() (bypass CVE-2024-1874 fix)

2024-06-11 CVE-2024-5585

highMicrosoft MSRC 2024-W24

Cupsd Listen arbitrary chmod 0140777

2024-06-11 CVE-2024-35235

mediumMicrosoft MSRC 2024-W24

DHCP Server Service Denial of Service Vulnerability

2024-06-11 CVE-2024-30070

highMicrosoft MSRC 2024-W24

dma-buf/sw-sync: don't enable IRQ from sync_print_obj()

2024-06-11 CVE-2024-38780

mediumMicrosoft MSRC 2024-W24

dma-mapping: benchmark: handle NUMA_NO_NODE correctly

2024-06-11 CVE-2024-39277

highMicrosoft MSRC 2024-W24

drm: zynqmp_dpsub: Always register bridge

2024-06-11 CVE-2024-38664

highMicrosoft MSRC 2024-W24

drm/amd/display: Wrap dcn301_calculate_wm_and_dlg for FPU.

2024-06-11 CVE-2022-48766

mediumMicrosoft MSRC 2024-W24

drm/amdgpu: Fix buffer size in gfx_v9_4_3_init_ cp_compute_microcode() and rlc_microcode()

2024-06-11 CVE-2024-39291

highMicrosoft MSRC 2024-W24

Filter bypass in filter_var (FILTER_VALIDATE_URL)

2024-06-11 CVE-2024-5458

mediumMicrosoft MSRC 2024-W24

GitHub: CVE-2024-29187 WiX Burn-based bundles are vulnerable to binary hijack when run as SYSTEM

2024-06-11 CVE-2024-29187

highMicrosoft MSRC 2024-W24

HashiCorp go-getter Vulnerable to Code Execution On Git Update Via Git Config Manipulation

2024-06-11 CVE-2024-6257

highMicrosoft MSRC 2024-W24

Heap Buffer Overflow vulnerability in zziplib v0.13.77 allows attackers to cause a denial of service via the __zzip_parse_root_directory() function at /zzip/zip.c.

2024-06-11 CVE-2024-39133

mediumMicrosoft MSRC 2024-W24

In violation of spec, cookie prefixes such as `__Secure` were being ignored if they were not correctly capitalized - by spec they should be checked with a case-insensitive comparis

2024-06-11 CVE-2024-5699

criticalMicrosoft MSRC 2024-W24

lib/test_hmm.c: handle src_pfns and dst_pfns allocation failure

2024-06-11 CVE-2024-38543

mediumMicrosoft MSRC 2024-W24

Mariner

2024-06-11 CVE-2014-8139

highMicrosoft MSRC 2024-W24

Mariner

2024-06-11 CVE-2014-8140

highMicrosoft MSRC 2024-W24

Mariner

2024-06-11 CVE-2014-8141

highMicrosoft MSRC 2024-W24

Mariner

2024-06-11 CVE-2014-9913

mediumMicrosoft MSRC 2024-W24

Mariner

2024-06-11 CVE-2016-7567

criticalMicrosoft MSRC 2024-W24

Mariner

2024-06-11 CVE-2016-9296

highMicrosoft MSRC 2024-W24

Mariner

2024-06-11 CVE-2016-9844

mediumMicrosoft MSRC 2024-W24

Mariner

2024-06-11 CVE-2017-16844

criticalMicrosoft MSRC 2024-W24

Mariner

2024-06-11 CVE-2017-17969

highMicrosoft MSRC 2024-W24

Mariner

2024-06-11 CVE-2017-3604

highMicrosoft MSRC 2024-W24

Mariner

2024-06-11 CVE-2017-3605

highMicrosoft MSRC 2024-W24

Mariner

2024-06-11 CVE-2017-3606

highMicrosoft MSRC 2024-W24

Mariner

2024-06-11 CVE-2017-3607

highMicrosoft MSRC 2024-W24

Mariner

2024-06-11 CVE-2017-3608

highMicrosoft MSRC 2024-W24

Mariner

2024-06-11 CVE-2017-3609

highMicrosoft MSRC 2024-W24

Mariner

2024-06-11 CVE-2017-3610

highMicrosoft MSRC 2024-W24

Mariner

2024-06-11 CVE-2017-3611

highMicrosoft MSRC 2024-W24

Mariner

2024-06-11 CVE-2017-3612

highMicrosoft MSRC 2024-W24

Mariner

2024-06-11 CVE-2017-3613

highMicrosoft MSRC 2024-W24

Mariner

2024-06-11 CVE-2017-3614

highMicrosoft MSRC 2024-W24

Mariner

2024-06-11 CVE-2017-3615

highMicrosoft MSRC 2024-W24