Base de CVEs

CVE-2022-0847 Alta · 7.8 KEV Urgente · 86 Exploit público CWE-665 10/03/2022

Linux Kernel Privilege Escalation Vulnerability

A flaw was found in the way the "flags" member of the new pipe buffer structure was lacking proper initialization in copy_page_to_iter_pipe and push_pipe functions in the Linux kernel and could thus contain stale values. An unprivileged local user could use this flaw to write to pages in the page cache backed by read only files and as such escalate their privileges on the system.

CVE-2021-0095 Média · 4.4 CWE-665 09/06/2021

Improper Initialization em Intel Bios

Improper initialization in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable a denial of service via local access.

CVE-2020-12357 Média · 6.7 CWE-665 09/06/2021

Improper initialization in the firmware for some Intel(R) Processors may allow a privileged user...

Improper initialization in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access.

CVE-2020-27950 Média · 5.5 KEV Alta · 59 Exploit público CWE-665 08/12/2020

Apple Multiple Products Memory Initialization Vulnerability

A memory initialization issue was addressed. This issue is fixed in macOS Big Sur 11.0.1, watchOS 7.1, iOS 12.4.9, watchOS 6.2.9, Security Update 2020-006 High Sierra, Security Update 2020-006 Mojave, iOS 14.2 and iPadOS 14.2, watchOS 5.3.9, macOS Catalina 10.15.7 Supplemental Update, macOS Catalina 10.15.7 Update. A malicious application may be able to disclose kernel memory.

CVE-2020-11655 Alta · 7.5 CWE-665 09/04/2020

SQLite through 3.31.1 allows attackers to cause a denial of service (segmentation fault) via a...

SQLite through 3.31.1 allows attackers to cause a denial of service (segmentation fault) via a malformed window-function query because the AggInfo object's initialization is mishandled.

CVE-2019-19126 Baixa · 3.3 CWE-665 19/11/2019

On the x86-64 architecture, the GNU C Library (aka glibc) before 2.31 fails to ignore the...

On the x86-64 architecture, the GNU C Library (aka glibc) before 2.31 fails to ignore the LD_PREFER_MAP_32BIT_EXEC environment variable during program execution after a security transition, allowing local attackers to restrict the possible mapping addresses for loaded libraries and thus bypass ASLR for a setuid program.

CVE-2019-14565 Alta · 7.8 CWE-665 14/11/2019

Improper Initialization em Intel Software Guard Extensions Sdk

Insufficient initialization in Intel(R) SGX SDK Windows versions 2.4.100.51291 and earlier, and Linux versions 2.6.100.51363 and earlier, may allow an authenticated user to enable information disclosure, escalation of privilege or denial of service via local access.

CVE-2013-1675 Média · 6.5 KEV Alta · 52 CWE-665 16/05/2013

Mozilla Firefox Information Disclosure Vulnerability

Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and Thunderbird ESR 17.x before 17.0.6 do not properly initialize data structures for the nsDOMSVGZoomEvent::mPreviousScale and nsDOMSVGZoomEvent::mNewScale functions, which allows remote attackers to obtain sensitive information from process memory via a crafted web site.