EL
Product
Enterprise Linux Desktop
On CISA KEVExploited in the wildRansomware-linked
1,925
CVEs
57
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 249High 247Medium 4Low 0
Watch
Add Enterprise Linux Desktop to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-6406 | 8.8 | Feb 11 | Use after free in audio in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page Affected: 6.0 |
| CVE-2020-6404 | 8.8 | Feb 11 | Inappropriate implementation in Blink in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page Affected: 6.0 |
| CVE-2020-6402 | 8.8 | Feb 11 | Insufficient policy enforcement in downloads in Google Chrome on OS X prior to 80.0.3987.87 allowed an attacker who convinced a user to install a malicious extension to execute… Affected: 6.0 |
| CVE-2020-6398 | 8.8 | Feb 11 | Use of uninitialized data in PDFium in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file Affected: 6.0 |
| CVE-2020-6390 | 8.8 | Feb 11 | Out of bounds memory access in streams in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page Affected: 6.0 |
| CVE-2020-6385 | 8.8 | Feb 11 | Insufficient policy enforcement in storage in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to bypass site isolation via a crafted HTML page Affected: 6.0 |
| CVE-2020-6382 | 8.8 | Feb 11 | Type confusion in JavaScript in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page Affected: 6.0 |
| CVE-2020-6381 | 8.8 | Feb 11 | Integer overflow in JavaScript in Google Chrome on ChromeOS and Android prior to 80.0.3987.87 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML… Affected: 6.0 |
| CVE-2012-4512 | 8.8 | Feb 8 | The CSS parser (khtml/css/cssparser.cpp) in Konqueror in KDE 4.7.3 allows remote attackers to cause a denial of service (crash) and possibly read memory via a crafted font face… Affected: 6.0 |
| CVE-2020-6377 | 8.8 | Jan 10 | Use after free in audio in Google Chrome prior to 79.0.3945.117 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page Affected: 6.0 |
| CVE-2019-17024 | 8.8 | Jan 8 | Mozilla developers reported memory safety bugs present in Firefox 71 and Firefox ESR 68.3 Affected: 6.0; 7.0 |
| CVE-2019-17017 | 8.8 | Jan 8 | Due to a missing case handling object types, a type confusion vulnerability could occur, resulting in a crash Affected: 6.0; 7.0 |
| CVE-2019-8816 | 8.8 | Dec 18 | Multiple memory corruption issues were addressed with improved memory handling Affected: 7.0 |
| CVE-2019-8815 | 8.8 | Dec 18 | Multiple memory corruption issues were addressed with improved memory handling Affected: 7.0 |
| CVE-2019-8814 | 8.8 | Dec 18 | Multiple memory corruption issues were addressed with improved memory handling Affected: 7.0 |
| CVE-2019-8689 | 8.8 | Dec 18 | Multiple memory corruption issues were addressed with improved memory handling Affected: 7.0 |
| CVE-2019-8688 | 8.8 | Dec 18 | Multiple memory corruption issues were addressed with improved memory handling Affected: 7.0 |
| CVE-2019-8684 | 8.8 | Dec 18 | Multiple memory corruption issues were addressed with improved memory handling Affected: 7.0 |
| CVE-2019-8676 | 8.8 | Dec 18 | Multiple memory corruption issues were addressed with improved memory handling Affected: 7.0 |
| CVE-2019-8672 | 8.8 | Dec 18 | Multiple memory corruption issues were addressed with improved memory handling Affected: 7.0 |
| CVE-2019-8669 | 8.8 | Dec 18 | Multiple memory corruption issues were addressed with improved memory handling Affected: 7.0 |
| CVE-2019-8544 | 8.8 | Dec 18 | A memory corruption issue was addressed with improved memory handling Affected: 7.0 |
| CVE-2019-8536 | 8.8 | Dec 18 | A memory corruption issue was addressed with improved memory handling Affected: 7.0 |
| CVE-2019-8535 | 8.8 | Dec 18 | A memory corruption issue was addressed with improved state management Affected: 7.0 |
| CVE-2019-13764 | 8.8 | Dec 10 | Type confusion in JavaScript in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page Affected: 6.0 |
| CVE-2019-13747 | 8.8 | Dec 10 | Uninitialized data in rendering in Google Chrome on Android prior to 79.0.3945.79 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page Affected: 6.0; 6.0 |
| CVE-2019-13741 | 8.8 | Dec 10 | Insufficient validation of untrusted input in Blink in Google Chrome prior to 79.0.3945.79 allowed a local attacker to bypass same origin policy via crafted clipboard content Affected: 6.0; 6.0 |
| CVE-2019-13736 | 8.8 | Dec 10 | Integer overflow in PDFium in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file Affected: 6.0; 6.0 |
| CVE-2019-13735 | 8.8 | Dec 10 | Out of bounds write in JavaScript in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page Affected: 6.0; 6.0 |
| CVE-2019-13734 | 8.8 | Dec 10 | Out of bounds write in SQLite in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page Affected: 6.0; 7.0 |
| CVE-2019-13732 | 8.8 | Dec 10 | Use-after-free in WebAudio in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page Affected: 6.0; 6.0 |
| CVE-2019-13730 | 8.8 | Dec 10 | Type confusion in JavaScript in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page Affected: 6.0 |
| CVE-2019-13729 | 8.8 | Dec 10 | Use-after-free in WebSockets in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page Affected: 6.0; 6.0 |
| CVE-2019-13728 | 8.8 | Dec 10 | Out of bounds write in JavaScript in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page Affected: 6.0; 6.0 |
| CVE-2019-13727 | 8.8 | Dec 10 | Insufficient policy enforcement in WebSockets in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to bypass same origin policy via a crafted HTML page Affected: 6.0; 6.0 |
| CVE-2019-13726 | 8.8 | Dec 10 | Buffer overflow in password manager in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to execute arbitrary code via a crafted HTML page Affected: 6.0; 6.0 |
| CVE-2019-13725 | 8.8 | Dec 10 | Use-after-free in Bluetooth in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to execute arbitrary code via a crafted HTML page Affected: 6.0; 6.0 |
| CVE-2019-13723 | 8.8 | Nov 25 | Use after free in WebBluetooth in Google Chrome prior to 78.0.3904.108 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption… Affected: 6.0 |
| CVE-2019-14287 | 8.8 | Oct 17 | In Sudo before 1.8.28, an attacker with access to a Runas ALL sudoer account can bypass certain policy blacklists and session PAM modules, and can cause incorrect logging, by… Affected: 6.0; 7.0 |
| CVE-2019-14821 | 8.8 | Sep 19 | An out-of-bounds access issue was found in the Linux kernel, all versions through 5.3, in the way Linux kernel's KVM hypervisor implements the Coalesced MMIO write operation Affected: 6.0; 7.0 |
| CVE-2019-7845 | 8.8 | Jun 12 | Adobe Flash Player versions 32.0.0.192 and earlier, 32.0.0.192 and earlier, and 32.0.0.192 and earlier have an use after free vulnerability Affected: 6.0 |
| CVE-2019-7837 | 8.8 | May 22 | Adobe Flash Player versions 32.0.0.171 and earlier, 32.0.0.171 and earlier, and 32.0.0.171 and earlier have a use after free vulnerability Affected: 6.0 |
| CVE-2019-3856 | 8.8 | Mar 25 | An integer overflow flaw, which could lead to an out of bounds write, was discovered in libssh2 before 1.8.1 in the way keyboard prompt requests are parsed Affected: 7.0 |
| CVE-2019-3857 | 8.8 | Mar 25 | An integer overflow flaw which could lead to an out of bounds write was discovered in libssh2 before 1.8.1 in the way SSH_MSG_CHANNEL_REQUEST packets with an exit signal are… Affected: 7.0 |
| CVE-2019-3863 | 8.8 | Mar 25 | A flaw was found in libssh2 before 1.8.1 creating a vulnerability on the SSH client side Affected: 7.0 |
| CVE-2019-3855 | 8.8 | Mar 21 | An integer overflow flaw which could lead to an out of bounds write was discovered in libssh2 before 1.8.1 in the way packets are read from the server Affected: 7.0 |
| CVE-2018-12389 | 8.8 | Feb 28 | Mozilla developers and community members reported memory safety bugs present in Firefox ESR 60.2 Affected: 6.0; 7.0 |
| CVE-2019-5763 | 8.8 | Feb 19 | Failure to check error conditions in V8 in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page Affected: 6.0 |
| CVE-2019-5764 | 8.8 | Feb 19 | Incorrect pointer management in WebRTC in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page Affected: 6.0 |
| CVE-2019-5772 | 8.8 | Feb 19 | Sharing of objects over calls into JavaScript runtime in PDFium in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to potentially exploit heap corruption via a… Affected: 6.0 |
The 500 most important CVEs for this product (exploited first, then by severity)
