2021

Due to improper input sanitization, specially crafted LDAP queries can be injected by an unauthenticated user. This coul

Improper Authentication vulnerability in the cookie parameter of Circutor SGE-PLC1000 firmware version 0.9.2b allows an

Reachable assertion is possible while processing peer association WLAN message from host and nonstandard incoming packet

Possible use after free in Display due to race condition while creating an external display in Snapdragon Auto, Snapdrag

Possible integer overflow in RPMB counter due to lack of length check on user provided data in Snapdragon Auto, Snapdrag

Possible out of bound read in DRM due to improper buffer length check. in Snapdragon Auto, Snapdragon Compute, Snapdrago

While waiting for a response to a callback or listener request, non-secure clients can change permissions to shared memo

Possible buffer overflow in voice service due to lack of input validation of parameters in QMI Voice API in Snapdragon A

Stack out-of-bounds write occurs while setting up a cipher device if the provided IV length exceeds the max limit value

A race between command submission and destroying the context can cause an invalid context being added to the list leads

Memory corruption due to improper check to return error when user application requests memory allocation of a huge size

An improper free of uninitialized memory can occur in DIAG services in Snapdragon Compute, Snapdragon Industrial IOT, Sn

Memory corruption due to lack of validation of pointer arguments passed to Trustzone BSP in Snapdragon Wired Infrastruct

Memory corruption due to lack of validation of pointer arguments passed to Trustzone BSP in Snapdragon Wired Infrastruct

Memory corruption due to lack of validation of pointer arguments passed to TrustZone BSP in Snapdragon Wired Infrastruct

Memory corruption due to lack of check of validation of pointer to buffer passed to trustzone in Snapdragon Wired Infras

Use after free due to race condition when reopening the device driver repeatedly in Snapdragon Auto, Snapdragon Compute,

Out of bound read will happen if EAPOL Key length is less than expected while processing NAN shared key descriptor attri

Memory corruption due to ioctl command size was incorrectly set to the size of a pointer and not enough storage is alloc

Use after free issue when importing a DMA buffer by using the CPU address of the buffer due to attachment is not cleaned

Possible Buffer over-read in ARP/NS parsing due to lack of check of packet length received in Snapdragon Auto, Snapdrago

Buffer overflow might occur while parsing unified command due to lack of check of input data received in Snapdragon Auto

Time-of-check time-of-use race condition While processing partition entries due to newly created buffer was read again f

Trusted APPS to overwrite the CPZ memory of another use-case as TZ only checks the physical address not overlapping with

Memory corruption due to buffer overflow while copying the message provided by HLOS into buffer without validating the l

Out-of-bounds memory access can occur while calculating alignment requirements for a negative width from external compon

WSR-1166DHP3 firmware Ver.1.16 and prior and WSR-1166DHP4 firmware Ver.1.02 and prior allow an attacker to execute arbit

Windows MSHTML Platform Remote Code Execution Vulnerability

Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

Microsoft DWM Core Library Elevation of Privilege Vulnerability

Microsoft Defender Remote Code Execution Vulnerability

Paint 3D Remote Code Execution Vulnerability

Microsoft Intune Management Extension Remote Code Execution Vulnerability

Windows Hyper-V Denial of Service Vulnerability

Server for NFS Information Disclosure Vulnerability

Server for NFS Information Disclosure Vulnerability

Server for NFS Denial of Service Vulnerability

Windows GPSVC Elevation of Privilege Vulnerability

Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

Windows Remote Desktop Services Denial of Service Vulnerability

VP9 Video Extensions Remote Code Execution Vulnerability

Microsoft SharePoint Server Remote Code Execution Vulnerability

Microsoft SharePoint Server Spoofing Vulnerability

Microsoft SharePoint Server Remote Code Execution Vulnerability

Windows NTLM Elevation of Privilege Vulnerability

Windows NTFS Elevation of Privilege Vulnerability

Windows Common Log File System Driver Elevation of Privilege Vulnerability

Windows Filter Manager Elevation of Privilege Vulnerability

Windows Kernel-Mode Driver Elevation of Privilege Vulnerability

Windows Kernel Elevation of Privilege Vulnerability