EL
Product
Enterprise Linux Desktop
by Redhat · last CVE Jan 31, 2024
On CISA KEVExploited in the wildRansomware-linked
1,925
CVEs
57
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 249High 247Medium 4Low 0
Watch

Add Enterprise Linux Desktop to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2020-6406
8.8
2%
Feb 11
Use after free in audio in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page
Affected: 6.0
CVE-2020-6404
8.8
2%
Feb 11
Inappropriate implementation in Blink in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page
Affected: 6.0
CVE-2020-6402
8.8
3%
Feb 11
Insufficient policy enforcement in downloads in Google Chrome on OS X prior to 80.0.3987.87 allowed an attacker who convinced a user to install a malicious extension to execute…
Affected: 6.0
CVE-2020-6398
8.8
2%
Feb 11
Use of uninitialized data in PDFium in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file
Affected: 6.0
CVE-2020-6390
8.8
3%
Feb 11
Out of bounds memory access in streams in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page
Affected: 6.0
CVE-2020-6385
8.8
2%
Feb 11
Insufficient policy enforcement in storage in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to bypass site isolation via a crafted HTML page
Affected: 6.0
CVE-2020-6382
8.8
2%
Feb 11
Type confusion in JavaScript in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page
Affected: 6.0
CVE-2020-6381
8.8
2%
Feb 11
Integer overflow in JavaScript in Google Chrome on ChromeOS and Android prior to 80.0.3987.87 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML…
Affected: 6.0
CVE-2012-4512
8.8
12%
Feb 8
The CSS parser (khtml/css/cssparser.cpp) in Konqueror in KDE 4.7.3 allows remote attackers to cause a denial of service (crash) and possibly read memory via a crafted font face…
Affected: 6.0
CVE-2020-6377
8.8
1%
Jan 10
Use after free in audio in Google Chrome prior to 79.0.3945.117 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page
Affected: 6.0
CVE-2019-17024
8.8
2%
Jan 8
Mozilla developers reported memory safety bugs present in Firefox 71 and Firefox ESR 68.3
Affected: 6.0; 7.0
CVE-2019-17017
8.8
2%
Jan 8
Due to a missing case handling object types, a type confusion vulnerability could occur, resulting in a crash
Affected: 6.0; 7.0
CVE-2019-8816
8.8
3%
Dec 18
Multiple memory corruption issues were addressed with improved memory handling
Affected: 7.0
CVE-2019-8815
8.8
2%
Dec 18
Multiple memory corruption issues were addressed with improved memory handling
Affected: 7.0
CVE-2019-8814
8.8
3%
Dec 18
Multiple memory corruption issues were addressed with improved memory handling
Affected: 7.0
CVE-2019-8689
8.8
14%
Dec 18
Multiple memory corruption issues were addressed with improved memory handling
Affected: 7.0
CVE-2019-8688
8.8
2%
Dec 18
Multiple memory corruption issues were addressed with improved memory handling
Affected: 7.0
CVE-2019-8684
8.8
2%
Dec 18
Multiple memory corruption issues were addressed with improved memory handling
Affected: 7.0
CVE-2019-8676
8.8
2%
Dec 18
Multiple memory corruption issues were addressed with improved memory handling
Affected: 7.0
CVE-2019-8672
8.8
11%
Dec 18
Multiple memory corruption issues were addressed with improved memory handling
Affected: 7.0
CVE-2019-8669
8.8
3%
Dec 18
Multiple memory corruption issues were addressed with improved memory handling
Affected: 7.0
CVE-2019-8544
8.8
2%
Dec 18
A memory corruption issue was addressed with improved memory handling
Affected: 7.0
CVE-2019-8536
8.8
2%
Dec 18
A memory corruption issue was addressed with improved memory handling
Affected: 7.0
CVE-2019-8535
8.8
2%
Dec 18
A memory corruption issue was addressed with improved state management
Affected: 7.0
CVE-2019-13764
8.8
6%
Dec 10
Type confusion in JavaScript in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page
Affected: 6.0
CVE-2019-13747
8.8
1%
Dec 10
Uninitialized data in rendering in Google Chrome on Android prior to 79.0.3945.79 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page
Affected: 6.0; 6.0
CVE-2019-13741
8.8
1%
Dec 10
Insufficient validation of untrusted input in Blink in Google Chrome prior to 79.0.3945.79 allowed a local attacker to bypass same origin policy via crafted clipboard content
Affected: 6.0; 6.0
CVE-2019-13736
8.8
2%
Dec 10
Integer overflow in PDFium in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file
Affected: 6.0; 6.0
CVE-2019-13735
8.8
2%
Dec 10
Out of bounds write in JavaScript in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page
Affected: 6.0; 6.0
CVE-2019-13734
8.8
4%
Dec 10
Out of bounds write in SQLite in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page
Affected: 6.0; 7.0
CVE-2019-13732
8.8
1%
Dec 10
Use-after-free in WebAudio in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page
Affected: 6.0; 6.0
CVE-2019-13730
8.8
2%
Dec 10
Type confusion in JavaScript in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page
Affected: 6.0
CVE-2019-13729
8.8
1%
Dec 10
Use-after-free in WebSockets in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page
Affected: 6.0; 6.0
CVE-2019-13728
8.8
2%
Dec 10
Out of bounds write in JavaScript in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page
Affected: 6.0; 6.0
CVE-2019-13727
8.8
1%
Dec 10
Insufficient policy enforcement in WebSockets in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to bypass same origin policy via a crafted HTML page
Affected: 6.0; 6.0
CVE-2019-13726
8.8
2%
Dec 10
Buffer overflow in password manager in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to execute arbitrary code via a crafted HTML page
Affected: 6.0; 6.0
CVE-2019-13725
8.8
2%
Dec 10
Use-after-free in Bluetooth in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to execute arbitrary code via a crafted HTML page
Affected: 6.0; 6.0
CVE-2019-13723
8.8
1%
Nov 25
Use after free in WebBluetooth in Google Chrome prior to 78.0.3904.108 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption…
Affected: 6.0
CVE-2019-14287
8.8
64%
Oct 17
In Sudo before 1.8.28, an attacker with access to a Runas ALL sudoer account can bypass certain policy blacklists and session PAM modules, and can cause incorrect logging, by…
Affected: 6.0; 7.0
CVE-2019-14821
8.8
1%
Sep 19
An out-of-bounds access issue was found in the Linux kernel, all versions through 5.3, in the way Linux kernel's KVM hypervisor implements the Coalesced MMIO write operation
Affected: 6.0; 7.0
CVE-2019-7845
8.8
6%
Jun 12
Adobe Flash Player versions 32.0.0.192 and earlier, 32.0.0.192 and earlier, and 32.0.0.192 and earlier have an use after free vulnerability
Affected: 6.0
CVE-2019-7837
8.8
10%
May 22
Adobe Flash Player versions 32.0.0.171 and earlier, 32.0.0.171 and earlier, and 32.0.0.171 and earlier have a use after free vulnerability
Affected: 6.0
CVE-2019-3856
8.8
6%
Mar 25
An integer overflow flaw, which could lead to an out of bounds write, was discovered in libssh2 before 1.8.1 in the way keyboard prompt requests are parsed
Affected: 7.0
CVE-2019-3857
8.8
6%
Mar 25
An integer overflow flaw which could lead to an out of bounds write was discovered in libssh2 before 1.8.1 in the way SSH_MSG_CHANNEL_REQUEST packets with an exit signal are…
Affected: 7.0
CVE-2019-3863
8.8
3%
Mar 25
A flaw was found in libssh2 before 1.8.1 creating a vulnerability on the SSH client side
Affected: 7.0
CVE-2019-3855
8.8
9%
Mar 21
An integer overflow flaw which could lead to an out of bounds write was discovered in libssh2 before 1.8.1 in the way packets are read from the server
Affected: 7.0
CVE-2018-12389
8.8
2%
Feb 28
Mozilla developers and community members reported memory safety bugs present in Firefox ESR 60.2
Affected: 6.0; 7.0
CVE-2019-5763
8.8
2%
Feb 19
Failure to check error conditions in V8 in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page
Affected: 6.0
CVE-2019-5764
8.8
1%
Feb 19
Incorrect pointer management in WebRTC in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page
Affected: 6.0
CVE-2019-5772
8.8
2%
Feb 19
Sharing of objects over calls into JavaScript runtime in PDFium in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to potentially exploit heap corruption via a…
Affected: 6.0
Page 2 of 5 · 247 total
123…5
The 500 most important CVEs for this product (exploited first, then by severity)