EL
Product
Enterprise Linux Desktop
On CISA KEVExploited in the wildRansomware-linked
1,925
CVEs
57
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 249High 247Medium 4Low 0
Watch
Add Enterprise Linux Desktop to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2017-5113 | 8.8 | Oct 27 | Math overflow in Skia in Google Chrome prior to 61.0.3163.79 for Mac, Windows, and Linux, and 61.0.3163.81 for Android, allowed a remote attacker to potentially exploit heap… Affected: 6.0 |
| CVE-2017-5111 | 8.8 | Oct 27 | A use after free in PDFium in Google Chrome prior to 61.0.3163.79 for Linux, Windows, and Mac allowed a remote attacker to potentially exploit memory corruption via a crafted PDF… Affected: 6.0 |
| CVE-2017-5108 | 8.8 | Oct 27 | Type confusion in PDFium in Google Chrome prior to 60.0.3112.78 for Mac, Windows, Linux, and Android allowed a remote attacker to potentially maliciously modify objects via a… Affected: 6.0 |
| CVE-2017-5100 | 8.8 | Oct 27 | A use after free in Apps in Google Chrome prior to 60.0.3112.78 for Windows allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page Affected: 6.0 |
| CVE-2017-5098 | 8.8 | Oct 27 | A use after free in V8 in Google Chrome prior to 60.0.3112.78 for Mac, Windows, Linux, and Android allowed a remote attacker to perform an out of bounds memory read via a crafted… Affected: 6.0 |
| CVE-2017-5095 | 8.8 | Oct 27 | Stack overflow in PDFium in Google Chrome prior to 60.0.3112.78 for Linux, Windows, and Mac allowed a remote attacker to potentially exploit stack corruption via a crafted PDF… Affected: 6.0 |
| CVE-2017-5091 | 8.8 | Oct 27 | A use after free in IndexedDB in Google Chrome prior to 60.0.3112.78 for Linux, Android, Windows, and Mac allowed a remote attacker to perform an out of bounds memory read via a… Affected: 6.0 |
| CVE-2017-5088 | 8.8 | Oct 27 | Insufficient validation of untrusted input in V8 in Google Chrome prior to 59.0.3071.104 for Mac, Windows, and Linux, and 59.0.3071.117 for Android, allowed a remote attacker to… Affected: 6.0 |
| CVE-2017-5087 | 8.8 | Oct 27 | A use after free in Blink in Google Chrome prior to 59.0.3071.104 for Mac, Windows, and Linux, and 59.0.3071.117 for Android, allowed a remote attacker to perform an out of bounds… Affected: 6.0 |
| CVE-2017-5078 | 8.8 | Oct 27 | Insufficient validation of untrusted input in Blink's mailto: handling in Google Chrome prior to 59.0.3071.86 for Linux, Windows, and Mac allowed a remote attacker to perform… Affected: 6.0 |
| CVE-2017-5077 | 8.8 | Oct 27 | Insufficient validation of untrusted input in Skia in Google Chrome prior to 59.0.3071.86 for Linux, Windows, and Mac, and 59.0.3071.92 for Android, allowed a remote attacker to… Affected: 6.0 |
| CVE-2017-5073 | 8.8 | Oct 27 | Use after free in print preview in Blink in Google Chrome prior to 59.0.3071.86 for Linux, Windows, and Mac, and 59.0.3071.92 for Android, allowed a remote attacker to perform an… Affected: 6.0 |
| CVE-2017-5063 | 8.8 | Oct 27 | A numeric overflow in Skia in Google Chrome prior to 58.0.3029.81 for Linux, Windows, and Mac, and 58.0.3029.83 for Android, allowed a remote attacker to perform an out of bounds… Affected: 6.0 |
| CVE-2017-5062 | 8.8 | Oct 27 | A use after free in Chrome Apps in Google Chrome prior to 58.0.3029.81 for Mac, Windows, and Linux, and 58.0.3029.83 for Android, allowed a remote attacker to potentially perform… Affected: 6.0 |
| CVE-2017-5059 | 8.8 | Oct 27 | Type confusion in Blink in Google Chrome prior to 58.0.3029.81 for Linux, Windows, and Mac, and 58.0.3029.83 for Android, allowed a remote attacker to potentially obtain code… Affected: 6.0 |
| CVE-2017-5057 | 8.8 | Oct 27 | Type confusion in PDFium in Google Chrome prior to 58.0.3029.81 for Mac, Windows, and Linux, and 58.0.3029.83 for Android, allowed a remote attacker to perform an out of bounds… Affected: 6.0 |
| CVE-2017-5056 | 8.8 | Oct 27 | A use after free in Blink in Google Chrome prior to 57.0.2987.133 for Linux, Windows, and Mac, and 57.0.2987.132 for Android, allowed a remote attacker to perform an out of bounds… Affected: 6.0 |
| CVE-2017-5054 | 8.8 | Oct 27 | An out-of-bounds read in V8 in Google Chrome prior to 57.0.2987.133 for Linux, Windows, and Mac, and 57.0.2987.132 for Android, allowed a remote attacker to obtain heap memory… Affected: 6.0 |
| CVE-2017-5052 | 8.8 | Oct 27 | An incorrect assumption about block structure in Blink in Google Chrome prior to 57.0.2987.133 for Mac, Windows, and Linux, and 57.0.2987.132 for Android, allowed a remote… Affected: 6.0 |
| CVE-2017-5208 | 8.8 | Aug 22 | Integer overflow in the wrestool program in icoutils before 0.31.1 allows remote attackers to cause a denial of service (memory corruption) via a crafted executable, which… Affected: 7.0 |
| CVE-2017-3106 | 8.8 | Aug 11 | Adobe Flash Player versions 26.0.0.137 and earlier have an exploitable type confusion vulnerability when parsing SWF files Affected: 6.0 |
| CVE-2017-9462 | 8.8 | Jun 6 | In Mercurial before 4.1.3, "hg serve --stdio" allows remote authenticated users to launch the Python debugger, and consequently execute arbitrary code, by using --debugger as a… Affected: 6.0; 7.0 |
| CVE-2016-9842 | 8.8 | May 23 | The inflateMark function in inflate.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact via vectors involving left shifts of negative integers Affected: 6.0; 7.0 |
| CVE-2016-9840 | 8.8 | May 23 | inftrees.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointer arithmetic Affected: 6.0; 7.0 |
| CVE-2017-3074 | 8.8 | May 9 | Adobe Flash Player versions 25.0.0.148 and earlier have an exploitable memory corruption vulnerability in the Graphics class Affected: 6.0 |
| CVE-2017-3073 | 8.8 | May 9 | Adobe Flash Player versions 25.0.0.148 and earlier have an exploitable use after free vulnerability when handling multiple mask properties of display objects, aka memory… Affected: 6.0 |
| CVE-2017-3072 | 8.8 | May 9 | Adobe Flash Player versions 25.0.0.148 and earlier have an exploitable memory corruption vulnerability in the BitmapData class Affected: 6.0 |
| CVE-2017-3071 | 8.8 | May 9 | Adobe Flash Player versions 25.0.0.148 and earlier have an exploitable use after free vulnerability when masking display objects Affected: 6.0 |
| CVE-2017-3070 | 8.8 | May 9 | Adobe Flash Player versions 25.0.0.148 and earlier have an exploitable memory corruption vulnerability in the ConvolutionFilter class Affected: 6.0 |
| CVE-2017-3069 | 8.8 | May 9 | Adobe Flash Player versions 25.0.0.148 and earlier have an exploitable memory corruption vulnerability in the BlendMode class Affected: 6.0 |
| CVE-2017-3068 | 8.8 | May 9 | Adobe Flash Player versions 25.0.0.148 and earlier have an exploitable memory corruption vulnerability in the Advanced Video Coding engine Affected: 6.0 |
| CVE-2017-5043 | 8.8 | Apr 24 | Chrome Apps in Google Chrome prior to 57.0.2987.98 for Linux, Windows, and Mac had a use after free bug in GuestView, which allowed a remote attacker to perform an out of bounds… Affected: 6.0 |
| CVE-2017-5029 | 8.8 | Apr 24 | The xsltAddTextString function in transform.c in libxslt 1.1.29, as used in Blink in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android,… Affected: 6.0 |
| CVE-2016-7545 | 8.8 | Jan 19 | SELinux policycoreutils allows local users to execute arbitrary commands outside of the sandbox via a crafted TIOCSTI ioctl call Affected: 6.0; 7.0 |
| CVE-2016-7865 | 8.8 | Nov 8 | Adobe Flash Player versions 23.0.0.205 and earlier, 11.2.202.643 and earlier have an exploitable type confusion vulnerability Affected: 5.0; 6.0 |
| CVE-2016-7864 | 8.8 | Nov 8 | Adobe Flash Player versions 23.0.0.205 and earlier, 11.2.202.643 and earlier have an exploitable use-after-free vulnerability Affected: 5.0; 6.0 |
| CVE-2016-7863 | 8.8 | Nov 8 | Adobe Flash Player versions 23.0.0.205 and earlier, 11.2.202.643 and earlier have an exploitable use-after-free vulnerability Affected: 5.0; 6.0 |
| CVE-2016-7862 | 8.8 | Nov 8 | Adobe Flash Player versions 23.0.0.205 and earlier, 11.2.202.643 and earlier have an exploitable use-after-free vulnerability Affected: 5.0; 6.0 |
| CVE-2016-7861 | 8.8 | Nov 8 | Adobe Flash Player versions 23.0.0.205 and earlier, 11.2.202.643 and earlier have an exploitable type confusion vulnerability Affected: 5.0; 6.0 |
| CVE-2016-7860 | 8.8 | Nov 8 | Adobe Flash Player versions 23.0.0.205 and earlier, 11.2.202.643 and earlier have an exploitable type confusion vulnerability Affected: 5.0; 6.0 |
| CVE-2016-7859 | 8.8 | Nov 8 | Adobe Flash Player versions 23.0.0.205 and earlier, 11.2.202.643 and earlier have an exploitable use-after-free vulnerability Affected: 5.0; 6.0 |
| CVE-2016-7858 | 8.8 | Nov 8 | Adobe Flash Player versions 23.0.0.205 and earlier, 11.2.202.643 and earlier have an exploitable use-after-free vulnerability Affected: 5.0; 6.0 |
| CVE-2016-7857 | 8.8 | Nov 8 | Adobe Flash Player versions 23.0.0.205 and earlier, 11.2.202.643 and earlier have an exploitable use-after-free vulnerability Affected: 5.0; 6.0 |
| CVE-2016-4286 | 8.8 | Oct 13 | Adobe Flash Player before 18.0.0.382 and 19.x through 23.x before 23.0.0.185 on Windows and OS X and before 11.2.202.637 on Linux allows attackers to bypass intended access… Affected: 5.0; 6.0 |
| CVE-2016-5131 | 8.8 | Jul 23 | Use-after-free vulnerability in libxml2 through 2.9.4, as used in Google Chrome before 52.0.2743.82, allows remote attackers to cause a denial of service or possibly have… Affected: 6.0 |
| CVE-2016-1704 | 8.8 | Jul 3 | Multiple unspecified vulnerabilities in Google Chrome before 51.0.2704.103 allow attackers to cause a denial of service or possibly have other impact via unknown vectors Affected: 6.0 |
| CVE-2016-4156 | 8.8 | Jun 16 | Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, has… Affected: 5.0; 6.0 |
| CVE-2016-4155 | 8.8 | Jun 16 | Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, has… Affected: 5.0; 6.0 |
| CVE-2016-4154 | 8.8 | Jun 16 | Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, has… Affected: 5.0; 6.0 |
| CVE-2016-4153 | 8.8 | Jun 16 | Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, has… Affected: 5.0; 6.0 |
The 500 most important CVEs for this product (exploited first, then by severity)