FU
Product
Fuchsia
5
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 1Medium 3Low 0
Watch
Add Fuchsia to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-22566 | 9.8 | Jan 18 | An incorrect setting of UXN bits within mmu_flags_to_s1_pte_attr lead to privileged executable pages being mapped as executable from an unprivileged context Affected: All versions, or not specified |
| CVE-2021-22556 | 7.8 | May 3 | The Security Team discovered an integer overflow bug that allows an attacker with code execution to issue memory cache invalidation operations on pages that they don’t own,… Affected: before 4.1 |
| CVE-2022-0882 | 5.5 | May 3 | A bug exists where an attacker can read the kernel log through exposed Zircon kernel addresses without the required capability ZX_RSRC_KIND_ROOT Affected: before 4.1.1 |
| CVE-2022-0247 | 5.5 | Feb 25 | An issue exists in Fuchsia where VMO data can be modified through access to copy-on-write snapshots Affected: before 2022-01-03 |
| CVE-2024-10604 | 5.3 | Jan 30 | Vulnerabilities in the algorithms used by Fuchsia to populate network protocol header fields, specifically the TCP ISN, TCP timestamp, TCP and UDP source ports, and IPv4/IPv6… Affected: before f16; f17 before f20 |
Showing 5