Vulnerabilities (CVE)

Filtered by CWE-126
Total 334 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2024-31081 2026-06-17 N/A 7.3 HIGH
A heap-based buffer over-read vulnerability was found in the X.org server's ProcXIPassiveGrabDevice() function. This issue occurs when byte-swapped length values are used in replies, potentially leading to memory leakage and segmentation faults, particularly when triggered by a client with a different endianness. This vulnerability could be exploited by an attacker to cause the X server to read heap memory values and then transmit them back to the client until encountering an unmapped page, resulting in a crash. Despite the attacker's inability to control the specific memory copied into the replies, the small length values typically stored in a 32-bit integer can result in significant attempted out-of-bounds reads.
CVE-2024-31080 2026-06-17 N/A 7.3 HIGH
A heap-based buffer over-read vulnerability was found in the X.org server's ProcXIGetSelectedEvents() function. This issue occurs when byte-swapped length values are used in replies, potentially leading to memory leakage and segmentation faults, particularly when triggered by a client with a different endianness. This vulnerability could be exploited by an attacker to cause the X server to read heap memory values and then transmit them back to the client until encountering an unmapped page, resulting in a crash. Despite the attacker's inability to control the specific memory copied into the replies, the small length values typically stored in a 32-bit integer can result in significant attempted out-of-bounds reads.
CVE-2024-30079 1 Microsoft 13 Windows 10 1507, Windows 10 1607, Windows 10 1809 and 10 more 2026-06-17 N/A 7.8 HIGH
Windows Remote Access Connection Manager Elevation of Privilege Vulnerability
CVE-2024-30071 1 Microsoft 12 Windows 10 1507, Windows 10 1607, Windows 10 1809 and 9 more 2026-06-17 N/A 4.7 MEDIUM
Windows Remote Access Connection Manager Information Disclosure Vulnerability
CVE-2024-30039 1 Microsoft 14 Windows 10 1507, Windows 10 1607, Windows 10 1809 and 11 more 2026-06-17 N/A 5.5 MEDIUM
Windows Remote Access Connection Manager Information Disclosure Vulnerability
CVE-2024-28902 1 Microsoft 13 Windows 10 1507, Windows 10 1607, Windows 10 1809 and 10 more 2026-06-17 N/A 5.5 MEDIUM
Windows Remote Access Connection Manager Information Disclosure Vulnerability
CVE-2024-28901 1 Microsoft 13 Windows 10 1507, Windows 10 1607, Windows 10 1809 and 10 more 2026-06-17 N/A 5.5 MEDIUM
Windows Remote Access Connection Manager Information Disclosure Vulnerability
CVE-2024-28900 1 Microsoft 13 Windows 10 1507, Windows 10 1607, Windows 10 1809 and 10 more 2026-06-17 N/A 5.5 MEDIUM
Windows Remote Access Connection Manager Information Disclosure Vulnerability
CVE-2024-26255 1 Microsoft 9 Windows 10 1809, Windows 10 21h2, Windows 10 22h2 and 6 more 2026-06-17 N/A 5.5 MEDIUM
Windows Remote Access Connection Manager Information Disclosure Vulnerability
CVE-2024-26243 1 Microsoft 7 Windows 10 21h2, Windows 10 22h2, Windows 11 21h2 and 4 more 2026-06-17 N/A 7.0 HIGH
Windows USB Print Driver Elevation of Privilege Vulnerability
CVE-2024-26176 1 Microsoft 14 Windows 10 1507, Windows 10 1607, Windows 10 1809 and 11 more 2026-06-17 N/A 7.8 HIGH
Windows Kernel Elevation of Privilege Vulnerability
CVE-2024-26160 1 Microsoft 3 Windows 11 22h2, Windows 11 23h2, Windows Server 2022 23h2 2026-06-17 N/A 5.5 MEDIUM
Windows Cloud Files Mini Filter Driver Information Disclosure Vulnerability
CVE-2024-23366 1 Qualcomm 34 Qam8255p, Qam8255p Firmware, Qam8295p and 31 more 2026-06-17 N/A 6.6 MEDIUM
Information Disclosure while invoking the mailbox write API when message received from user is larger than mailbox size.
CVE-2024-23364 1 Qualcomm 358 Ar8035, Ar8035 Firmware, Fastconnect 6200 and 355 more 2026-06-17 N/A 7.5 HIGH
Transient DOS when processing the non-transmitted BSSID profile sub-elements present within the MBSSID Information Element (IE) of a beacon frame that is received from over-the-air (OTA).
CVE-2024-23363 1 Qualcomm 250 Ar8035, Ar8035 Firmware, Csr8811 and 247 more 2026-06-17 N/A 7.5 HIGH
Transient DOS while processing an improperly formatted Fine Time Measurement (FTM) management frame.
CVE-2024-23359 1 Qualcomm 322 205 Mobile Platform, 205 Mobile Platform Firmware, 315 5g Iot Modem and 319 more 2026-06-17 N/A 8.2 HIGH
Information disclosure while decoding Tracking Area Update Accept or Attach Accept message received from network.
CVE-2024-23358 1 Qualcomm 106 205 Mobile Platform, 205 Mobile Platform Firmware, Apq8017 and 103 more 2026-06-17 N/A 7.5 HIGH
Transient DOS when registration accept OTA is received with incorrect ciphering key data IE in Modem.
CVE-2024-23353 1 Qualcomm 498 205 Mobile Platform, 205 Mobile Platform Firmware, 215 Mobile Platform and 495 more 2026-06-17 N/A 7.5 HIGH
Transient DOS while decoding attach reject message received by UE, when IEI is set to ESM_IEI.
CVE-2024-21479 1 Qualcomm 190 Ar8035, Ar8035 Firmware, Fastconnect 6700 and 187 more 2026-06-17 N/A 7.5 HIGH
Transient DOS during music playback of ALAC content.
CVE-2024-21477 1 Qualcomm 368 Aqt1000, Aqt1000 Firmware, Ar8035 and 365 more 2026-06-17 N/A 7.5 HIGH
Transient DOS while parsing a protected 802.11az Fine Time Measurement (FTM) frame.