BS
Product
Backports Sle
On CISA KEVExploited in the wild
326
CVEs
3
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 27High 169Medium 129Low 1
Watch
Add Backports Sle to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-15967 | 8.8 | Nov 3 | Use after free in payments in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page Affected: 15.0 |
| CVE-2020-6576 | 8.8 | Sep 21 | Use after free in offscreen canvas in Google Chrome prior to 85.0.4183.102 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page Affected: 15.0; 15.0 |
| CVE-2020-6559 | 8.8 | Sep 21 | Use after free in presentation API in Google Chrome prior to 85.0.4183.83 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page Affected: 15.0; 15.0 |
| CVE-2020-15965 | 8.8 | Sep 21 | Type confusion in V8 in Google Chrome prior to 85.0.4183.121 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page Affected: 15.0; 15.0 |
| CVE-2020-15964 | 8.8 | Sep 21 | Insufficient data validation in media in Google Chrome prior to 85.0.4183.121 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page Affected: 15.0; 15.0 |
| CVE-2020-15962 | 8.8 | Sep 21 | Insufficient policy validation in serial in Google Chrome prior to 85.0.4183.121 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML… Affected: 15.0; 15.0 |
| CVE-2020-15960 | 8.8 | Sep 21 | Heap buffer overflow in storage in Google Chrome prior to 85.0.4183.121 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page Affected: 15.0; 15.0 |
| CVE-2020-24972 | 8.8 | Aug 29 | The Kleopatra component before 3.1.12 (and before 20.07.80) for GnuPG allows remote attackers to execute arbitrary code because openpgp4fpr: URLs are supported without safe… Affected: 15.0 |
| CVE-2020-24614 | 8.8 | Aug 25 | Fossil before 2.10.2, 2.11.x before 2.11.2, and 2.12.x before 2.12.1 allows remote authenticated users to execute arbitrary code Affected: 15.0; 15.0 |
| CVE-2020-8233 | 8.8 | Aug 17 | A command injection vulnerability exists in EdgeSwitch firmware <v1.9.0 that allowed an authenticated read-only user to execute arbitrary shell commands over the HTTP interface,… Affected: 15.0; 15.0 |
| CVE-2020-6534 | 8.8 | Jul 22 | Heap buffer overflow in WebRTC in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page Affected: 15.0 |
| CVE-2020-6533 | 8.8 | Jul 22 | Type Confusion in V8 in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page Affected: 15.0 |
| CVE-2020-6530 | 8.8 | Jul 22 | Out of bounds memory access in developer tools in Google Chrome prior to 84.0.4147.89 allowed an attacker who convinced a user to install a malicious extension to potentially… Affected: 15.0; 15.0 |
| CVE-2020-6525 | 8.8 | Jul 22 | Heap buffer overflow in Skia in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page Affected: 15.0; 15.0 |
| CVE-2020-6524 | 8.8 | Jul 22 | Heap buffer overflow in WebAudio in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page Affected: 15.0 |
| CVE-2020-6523 | 8.8 | Jul 22 | Out of bounds write in Skia in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page Affected: 15.0 |
| CVE-2020-6520 | 8.8 | Jul 22 | Buffer overflow in Skia in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page Affected: 15.0; 15.0 |
| CVE-2020-6518 | 8.8 | Jul 22 | Use after free in developer tools in Google Chrome prior to 84.0.4147.89 allowed a remote attacker who had convinced the user to use developer tools to potentially exploit heap… Affected: 15.0 |
| CVE-2020-6517 | 8.8 | Jul 22 | Heap buffer overflow in history in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page Affected: 15.0; 15.0 |
| CVE-2020-6515 | 8.8 | Jul 22 | Use after free in tab strip in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page Affected: 15.0; 15.0 |
| CVE-2020-6513 | 8.8 | Jul 22 | Heap buffer overflow in PDFium in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file Affected: 15.0; 15.0 |
| CVE-2020-6512 | 8.8 | Jul 22 | Type Confusion in V8 in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page Affected: 15.0 |
| CVE-2020-6496 | 8.8 | Jun 3 | Use after free in payments in Google Chrome on MacOS prior to 83.0.4103.97 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page Affected: 15.0 |
| CVE-2020-6474 | 8.8 | May 21 | Use after free in Blink in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page Affected: 15.0 |
| CVE-2020-6468 | 8.8 | May 21 | Type confusion in V8 in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page Affected: 15.0 |
| CVE-2020-6467 | 8.8 | May 21 | Use after free in WebRTC in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page Affected: 15.0 |
| CVE-2020-6463 | 8.8 | May 21 | Use after free in ANGLE in Google Chrome prior to 81.0.4044.122 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page Affected: 15.0 |
| CVE-2020-6454 | 8.8 | Apr 13 | Use after free in extensions in Google Chrome prior to 81.0.4044.92 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap… Affected: 15.0 |
| CVE-2020-6451 | 8.8 | Apr 13 | Use after free in WebAudio in Google Chrome prior to 80.0.3987.162 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page Affected: 15.0 |
| CVE-2020-6450 | 8.8 | Apr 13 | Use after free in WebAudio in Google Chrome prior to 80.0.3987.162 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page Affected: 15.0 |
| CVE-2020-6448 | 8.8 | Apr 13 | Use after free in V8 in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page Affected: 15.0 |
| CVE-2020-6447 | 8.8 | Apr 13 | Inappropriate implementation in developer tools in Google Chrome prior to 81.0.4044.92 allowed a remote attacker who had convinced the user to use devtools to potentially exploit… Affected: 15.0 |
| CVE-2020-6436 | 8.8 | Apr 13 | Use after free in window management in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page Affected: 15.0 |
| CVE-2020-6434 | 8.8 | Apr 13 | Use after free in devtools in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page Affected: 15.0 |
| CVE-2020-6430 | 8.8 | Apr 13 | Type Confusion in V8 in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page Affected: 15.0 |
| CVE-2020-6423 | 8.8 | Apr 13 | Use after free in audio in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page Affected: 15.0 |
| CVE-2020-6449 | 8.8 | Mar 23 | Use after free in audio in Google Chrome prior to 80.0.3987.149 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page Affected: 15.0 |
| CVE-2020-6429 | 8.8 | Mar 23 | Use after free in audio in Google Chrome prior to 80.0.3987.149 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page Affected: 15.0 |
| CVE-2020-6428 | 8.8 | Mar 23 | Use after free in audio in Google Chrome prior to 80.0.3987.149 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page Affected: 15.0 |
| CVE-2020-6427 | 8.8 | Mar 23 | Use after free in audio in Google Chrome prior to 80.0.3987.149 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page Affected: 15.0 |
| CVE-2020-6424 | 8.8 | Mar 23 | Use after free in media in Google Chrome prior to 80.0.3987.149 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page Affected: 15.0 |
| CVE-2020-6422 | 8.8 | Mar 23 | Use after free in WebGL in Google Chrome prior to 80.0.3987.149 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page Affected: 15.0 |
| CVE-2020-9273 | 8.8 | Feb 20 | In ProFTPD 1.3.7, it is possible to corrupt the memory pool by interrupting the data transfer channel Affected: 15.0; 15.0 |
| CVE-2020-6416 | 8.8 | Feb 11 | Insufficient data validation in streams in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page Affected: 15.0 |
| CVE-2020-6415 | 8.8 | Feb 11 | Inappropriate implementation in JavaScript in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page Affected: 15.0 |
| CVE-2020-6414 | 8.8 | Feb 11 | Insufficient policy enforcement in Safe Browsing in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page Affected: 15.0 |
| CVE-2020-6413 | 8.8 | Feb 11 | Inappropriate implementation in Blink in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to bypass HTML validators via a crafted HTML page Affected: 15.0 |
| CVE-2020-6404 | 8.8 | Feb 11 | Inappropriate implementation in Blink in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page Affected: 15.0 |
| CVE-2020-6402 | 8.8 | Feb 11 | Insufficient policy enforcement in downloads in Google Chrome on OS X prior to 80.0.3987.87 allowed an attacker who convinced a user to install a malicious extension to execute… Affected: 15.0 |
| CVE-2020-6398 | 8.8 | Feb 11 | Use of uninitialized data in PDFium in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file Affected: 15.0 |
