CVSS: 10.0EPSS: 0%CPEs: 16EXPL: 0CVE-2023-21708 – Remote Procedure Call Runtime Remote Code Execution Vulnerability
https://notcve.org/view.php?id=CVE-2023-21708
14 Mar 2023 — Remote Procedure Call Runtime Remote Code Execution Vulnerability • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21708 • CWE-191: Integer Underflow (Wrap or Wraparound) •
CVSS: 7.0EPSS: 0%CPEs: 16EXPL: 0CVE-2023-23385 – Windows Point-to-Point Protocol over Ethernet (PPPoE) Elevation of Privilege Vulnerability
https://notcve.org/view.php?id=CVE-2023-23385
14 Mar 2023 — Windows Point-to-Point Protocol over Ethernet (PPPoE) Elevation of Privilege Vulnerability • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-23385 • CWE-190: Integer Overflow or Wraparound •
CVSS: 7.8EPSS: 0%CPEs: 1EXPL: 1CVE-2023-24180
https://notcve.org/view.php?id=CVE-2023-24180
14 Mar 2023 — Libelfin v0.3 was discovered to contain an integer overflow in the load function at elf/mmap_loader.cc. • https://github.com/aclements/libelfin/issues/75 • CWE-190: Integer Overflow or Wraparound •
CVSS: 6.2EPSS: 0%CPEs: 1EXPL: 0CVE-2023-25947 – The bundle management subsystem has a improper input validation when installing a HAP package.
https://notcve.org/view.php?id=CVE-2023-25947
10 Mar 2023 — The bundle management subsystem within OpenHarmony-v3.1.4 and prior versions has a null pointer reference vulnerability which local attackers can exploit this vulnerability to cause a DoS attack to the system when installing a malicious HAP package. The bundle management subsystem within OpenHarmony-v3.1.4 and prior versions has a null pointer reference vulnerability which local attackers can exploit this vulnerability to cause a DoS attack to the system when installing a malicious HAP package. • https://gitee.com/openharmony/security/blob/master/en/security-disclosure/2023/2023-03.md • CWE-20: Improper Input Validation CWE-476: NULL Pointer Dereference •
CVSS: 7.8EPSS: 0%CPEs: 1EXPL: 0CVE-2023-22436 – The kernel subsystem function check_permission_for_set_tokenid has an UAF vulnerability.
https://notcve.org/view.php?id=CVE-2023-22436
10 Mar 2023 — The kernel subsystem function check_permission_for_set_tokenid within OpenHarmony-v3.1.5 and prior versions has an UAF vulnerability which local attackers can exploit this vulnerability to escalate the privilege to root. The kernel subsystem function check_permission_for_set_tokenid within OpenHarmony-v3.1.5 and prior versions has an UAF vulnerability which local attackers can exploit this vulnerability to escalate the privilege to root. • https://gitee.com/openharmony/security/blob/master/en/security-disclosure/2023/2023-02.md • CWE-190: Integer Overflow or Wraparound CWE-416: Use After Free •
CVSS: 6.8EPSS: 0%CPEs: 1EXPL: 0CVE-2023-1236 – Debian Security Advisory 5371-1
https://notcve.org/view.php?id=CVE-2023-1236
07 Mar 2023 — It was discovered that Chromium contained an integer overflow in the PDF component. • https://chromereleases.googleblog.com/2023/03/stable-channel-update-for-desktop.html •
CVSS: 7.5EPSS: 0%CPEs: 1EXPL: 0CVE-2023-1235 – Debian Security Advisory 5371-1
https://notcve.org/view.php?id=CVE-2023-1235
07 Mar 2023 — It was discovered that Chromium contained an integer overflow in the PDF component. • https://chromereleases.googleblog.com/2023/03/stable-channel-update-for-desktop.html • CWE-843: Access of Resource Using Incompatible Type ('Type Confusion') •
CVSS: 6.8EPSS: 0%CPEs: 1EXPL: 0CVE-2023-1229 – Debian Security Advisory 5371-1
https://notcve.org/view.php?id=CVE-2023-1229
07 Mar 2023 — It was discovered that Chromium contained an integer overflow in the PDF component. • https://chromereleases.googleblog.com/2023/03/stable-channel-update-for-desktop.html • CWE-276: Incorrect Default Permissions •
CVSS: 6.8EPSS: 0%CPEs: 1EXPL: 0CVE-2023-1226 – Debian Security Advisory 5371-1
https://notcve.org/view.php?id=CVE-2023-1226
07 Mar 2023 — It was discovered that Chromium contained an integer overflow in the PDF component. • https://chromereleases.googleblog.com/2023/03/stable-channel-update-for-desktop.html •
CVSS: 8.8EPSS: 0%CPEs: 1EXPL: 0CVE-2023-1222 – Debian Security Advisory 5371-1
https://notcve.org/view.php?id=CVE-2023-1222
07 Mar 2023 — It was discovered that Chromium contained an integer overflow in the PDF component. • https://chromereleases.googleblog.com/2023/03/stable-channel-update-for-desktop.html • CWE-787: Out-of-bounds Write •