LE
Product
Linux Enterprise
On CISA KEVExploited in the wild
97
CVEs
4
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 3High 61Medium 27Low 0
Watch
Add Linux Enterprise to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2009-3953 In wildKEV | 8.8 | Jan 13 | Adobe Acrobat and Reader Universal 3D Remote Code Execution Vulnerability Affected: 10.0; 10.0 |
| CVE-2011-0609 In wildKEV | 7.8 | Mar 15 | Adobe Flash Player Unspecified Vulnerability Affected: 10.0; 11.0 |
| CVE-2010-1297 In wildKEV | 7.8 | Jun 8 | Adobe Flash Player Memory Corruption Vulnerability Affected: 10.0; 11.0; 11.0 |
| CVE-2009-4324 In wildKEV | 7.8 | Dec 15 | Adobe Acrobat and Reader Use-After-Free Vulnerability Affected: 10.0; 10.0 |
| CVE-2016-1659 | 9.8 | Apr 18 | Multiple unspecified vulnerabilities in Google Chrome before 50.0.2661.75 allow attackers to cause a denial of service or possibly have other impact via unknown vectors Affected: 12.0 |
| CVE-2010-2941 | 9.8 | Nov 5 | ipp.c in cupsd in CUPS 1.4.4 and earlier does not properly allocate memory for attribute values with invalid string data types, which allows remote attackers to cause a denial of… Affected: 10.0; 11.0; 11.0 |
| CVE-2010-1866 | 9.8 | May 7 | The dechunk filter in PHP 5.3 through 5.3.2, when decoding an HTTP chunked encoding stream, allows context-dependent attackers to cause a denial of service (crash) and possibly… Affected: 10.0; 11.0; 11.0 |
| CVE-2018-14523 | 8.8 | Jul 23 | An issue was discovered in aubio 0.4.6 Affected: 15.0 |
| CVE-2018-14522 | 8.8 | Jul 23 | An issue was discovered in aubio 0.4.6 Affected: 15.0 |
| CVE-2016-5131 | 8.8 | Jul 23 | Use-after-free vulnerability in libxml2 through 2.9.4, as used in Google Chrome before 52.0.2743.82, allows remote attackers to cause a denial of service or possibly have… Affected: 12.0 |
| CVE-2016-1703 | 8.8 | Jun 5 | Multiple unspecified vulnerabilities in Google Chrome before 51.0.2704.79 allow attackers to cause a denial of service or possibly have other impact via unknown vectors Affected: 12.0 |
| CVE-2016-1701 | 8.8 | Jun 5 | The Autofill implementation in Google Chrome before 51.0.2704.79 mishandles the interaction between field updates and JavaScript code that triggers a frame deletion, which allows… Affected: 12.0 |
| CVE-2016-1697 | 8.8 | Jun 5 | The FrameLoader::startLoad function in WebKit/Source/core/loader/FrameLoader.cpp in Blink, as used in Google Chrome before 51.0.2704.79, does not prevent frame navigations during… Affected: 12.0 |
| CVE-2016-1696 | 8.8 | Jun 5 | The extensions subsystem in Google Chrome before 51.0.2704.79 does not properly restrict bindings access, which allows remote attackers to bypass the Same Origin Policy via… Affected: 12.0 |
| CVE-2016-1695 | 8.8 | Jun 5 | Multiple unspecified vulnerabilities in Google Chrome before 51.0.2704.63 allow attackers to cause a denial of service or possibly have other impact via unknown vectors Affected: 12.0 |
| CVE-2016-1681 | 8.8 | Jun 5 | Heap-based buffer overflow in the opj_j2k_read_SPCod_SPCoc function in j2k.c in OpenJPEG, as used in PDFium in Google Chrome before 51.0.2704.63, allows remote attackers to cause… Affected: 12.0 |
| CVE-2016-1680 | 8.8 | Jun 5 | Use-after-free vulnerability in ports/SkFontHost_FreeType.cpp in Skia, as used in Google Chrome before 51.0.2704.63, allows remote attackers to cause a denial of service (heap… Affected: 12.0 |
| CVE-2016-1679 | 8.8 | Jun 5 | The ToV8Value function in content/child/v8_value_converter_impl.cc in the V8 bindings in Google Chrome before 51.0.2704.63 does not properly restrict use of getters and setters,… Affected: 12.0 |
| CVE-2016-1678 | 8.8 | Jun 5 | objects.cc in Google V8 before 5.0.71.32, as used in Google Chrome before 51.0.2704.63, does not properly restrict lazy deoptimization, which allows remote attackers to cause a… Affected: 12.0 |
| CVE-2016-1676 | 8.8 | Jun 5 | extensions/renderer/resources/binding.js in the extension bindings in Google Chrome before 51.0.2704.63 does not properly use prototypes, which allows remote attackers to bypass… Affected: 12.0 |
| CVE-2016-1675 | 8.8 | Jun 5 | Blink, as used in Google Chrome before 51.0.2704.63, allows remote attackers to bypass the Same Origin Policy by leveraging the mishandling of Document reattachment during… Affected: 12.0 |
| CVE-2016-1674 | 8.8 | Jun 5 | The extensions subsystem in Google Chrome before 51.0.2704.63 allows remote attackers to bypass the Same Origin Policy via unspecified vectors Affected: 12.0 |
| CVE-2016-1673 | 8.8 | Jun 5 | Blink, as used in Google Chrome before 51.0.2704.63, allows remote attackers to bypass the Same Origin Policy via unspecified vectors Affected: 12.0 |
| CVE-2016-1672 | 8.8 | Jun 5 | The ModuleSystem::RequireForJsInner function in extensions/renderer/module_system.cc in the extension bindings in Google Chrome before 51.0.2704.63 mishandles properties, which… Affected: 12.0 |
| CVE-2016-2807 | 8.8 | Apr 30 | Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 46.0, Firefox ESR 38.x before 38.8, and Firefox ESR 45.x before 45.1 allow remote attackers to… Affected: 12.0 |
| CVE-2016-2806 | 8.8 | Apr 30 | Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 46.0 and Firefox ESR 45.x before 45.1 allow remote attackers to cause a denial of service… Affected: 12.0 |
| CVE-2016-1655 | 8.8 | Apr 18 | Google Chrome before 50.0.2661.75 does not properly consider that frame removal may occur during callback execution, which allows remote attackers to cause a denial of service… Affected: 12.0 |
| CVE-2016-1653 | 8.8 | Apr 18 | The LoadBuffer implementation in Google V8, as used in Google Chrome before 50.0.2661.75, mishandles data types, which allows remote attackers to cause a denial of service or… Affected: 12.0 |
| CVE-2016-2802 | 8.8 | Mar 13 | The graphite2::TtfUtil::CmapSubtable4NextCodepoint function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, allows remote… Affected: 12.0 |
| CVE-2016-2801 | 8.8 | Mar 13 | The graphite2::TtfUtil::CmapSubtable12Lookup function in TtfUtil.cpp in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, allows… Affected: 12.0 |
| CVE-2016-2800 | 8.8 | Mar 13 | The graphite2::Slot::getAttr function in Slot.cpp in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, allows remote attackers to… Affected: 12.0 |
| CVE-2016-2799 | 8.8 | Mar 13 | Heap-based buffer overflow in the graphite2::Slot::setAttr function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, allows… Affected: 12.0 |
| CVE-2016-2798 | 8.8 | Mar 13 | The graphite2::GlyphCache::Loader::Loader function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, allows remote attackers to… Affected: 12.0 |
| CVE-2016-2797 | 8.8 | Mar 13 | The graphite2::TtfUtil::CmapSubtable12Lookup function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, allows remote attackers… Affected: 12.0 |
| CVE-2016-2796 | 8.8 | Mar 13 | Heap-based buffer overflow in the graphite2::vm::Machine::Code::Code function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7,… Affected: 12.0 |
| CVE-2016-2795 | 8.8 | Mar 13 | The graphite2::FileFace::get_table_fn function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, does not initialize memory for… Affected: 12.0 |
| CVE-2016-2794 | 8.8 | Mar 13 | The graphite2::TtfUtil::CmapSubtable12NextCodepoint function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, allows remote… Affected: 12.0 |
| CVE-2016-2793 | 8.8 | Mar 13 | CachedCmap.cpp in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, allows remote attackers to cause a denial of service (buffer… Affected: 12.0 |
| CVE-2016-2792 | 8.8 | Mar 13 | The graphite2::Slot::getAttr function in Slot.cpp in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, allows remote attackers to… Affected: 12.0 |
| CVE-2016-2791 | 8.8 | Mar 13 | The graphite2::GlyphCache::glyph function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, allows remote attackers to cause a… Affected: 12.0 |
| CVE-2016-2790 | 8.8 | Mar 13 | The graphite2::TtfUtil::GetTableInfo function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, does not initialize memory for… Affected: 12.0 |
| CVE-2016-1977 | 8.8 | Mar 13 | The Machine::Code::decoder::analysis::set_ref function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, allows remote attackers… Affected: 12.0 |
| CVE-2016-1974 | 8.8 | Mar 13 | The nsScannerString::AppendUnicodeTo function in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 does not verify that memory allocation succeeds, which allows remote… Affected: 12.0 |
| CVE-2016-1964 | 8.8 | Mar 13 | Use-after-free vulnerability in the AtomicBaseIncDec function in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 allows remote attackers to execute arbitrary code or… Affected: 12.0 |
| CVE-2016-1961 | 8.8 | Mar 13 | Use-after-free vulnerability in the nsHTMLDocument::SetBody function in dom/html/nsHTMLDocument.cpp in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 allows remote… Affected: 12.0 |
| CVE-2016-1960 | 8.8 | Mar 13 | Integer underflow in the nsHtml5TreeBuilder class in the HTML5 string parser in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 allows remote attackers to execute… Affected: 12.0 |
| CVE-2016-1651 | 8.1 | Apr 18 | fxcodec/codec/fx_codec_jpx_opj.cpp in PDFium, as used in Google Chrome before 50.0.2661.75, does not properly implement the sycc420_to_rgb and sycc422_to_rgb functions, which… Affected: 12.0 |
| CVE-2021-4028 | 7.8 | Aug 24 | A flaw in the Linux kernel's implementation of RDMA communications manager listener code allowed an attacker with local access to setup a socket to listen on a high port allowing… Affected: 15.0; 15.0 |
| CVE-2016-9959 | 7.8 | Apr 12 | game-music-emu before 0.6.1 allows remote attackers to generate out of bounds 8-bit values Affected: 12.0 |
| CVE-2016-9958 | 7.8 | Apr 12 | game-music-emu before 0.6.1 allows remote attackers to write to arbitrary memory locations Affected: 12.0 |