CWE-119 · Improper Restriction of Operations within the Bounds of a Memory Buffer (page 62)
Page 62 of 100 — CVEs classified under CWE-119, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2017-7061 | High | 8.8 | 2017-07-20 | An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iCloud before 6.2.2 on Windows is affected… |
CVE-2017-7056 | High | 8.8 | 2017-07-20 | An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iCloud before 6.2.2 on Windows is affected… |
CVE-2017-7055 | High | 8.8 | 2017-07-20 | An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iCloud before 6.2.2 on Windows is affected… |
CVE-2017-7054 | High | 8.0 | 2017-07-20 | An issue was discovered in certain Apple products. macOS before 10.12.6 is affected. The issue involves the "Bluetooth" component. It allows attackers to execu… |
CVE-2017-7052 | High | 8.8 | 2017-07-20 | An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iCloud before 6.2.2 on Windows is affected… |
CVE-2017-7051 | High | 8.0 | 2017-07-20 | An issue was discovered in certain Apple products. macOS before 10.12.6 is affected. The issue involves the "Bluetooth" component. It allows attackers to execu… |
CVE-2017-7050 | High | 8.0 | 2017-07-20 | An issue was discovered in certain Apple products. macOS before 10.12.6 is affected. The issue involves the "Bluetooth" component. It allows attackers to execu… |
CVE-2017-7049 | High | 8.8 | 2017-07-20 | An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iCloud before 6.2.2 on Windows is affected… |
CVE-2017-7048 | High | 8.8 | 2017-07-20 | An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iCloud before 6.2.2 on Windows is affected… |
CVE-2017-7047 | High | 8.8 | 2017-07-20 | An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. macOS before 10.12.6 is affected. tvOS before 10.2.2 is affected. watchOS bef… |
CVE-2017-7046 | High | 8.8 | 2017-07-20 | An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iCloud before 6.2.2 on Windows is affected… |
CVE-2017-7044 | High | 7.8 | 2017-07-20 | An issue was discovered in certain Apple products. macOS before 10.12.6 is affected. The issue involves the "Intel Graphics Driver" component. It allows attack… |
CVE-2017-7043 | High | 8.8 | 2017-07-20 | An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iCloud before 6.2.2 on Windows is affected… |
CVE-2017-7042 | High | 8.8 | 2017-07-20 | An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iCloud before 6.2.2 on Windows is affected… |
CVE-2017-7041 | High | 8.8 | 2017-07-20 | An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iCloud before 6.2.2 on Windows is affected… |
CVE-2017-7040 | High | 8.8 | 2017-07-20 | An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iCloud before 6.2.2 on Windows is affected… |
CVE-2017-7039 | High | 8.8 | 2017-07-20 | An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iCloud before 6.2.2 on Windows is affected… |
CVE-2017-7037 | High | 8.8 | 2017-07-20 | An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iCloud before 6.2.2 on Windows is affected… |
CVE-2017-7035 | High | 7.8 | 2017-07-20 | An issue was discovered in certain Apple products. macOS before 10.12.6 is affected. The issue involves the "Intel Graphics Driver" component. It allows attack… |
CVE-2017-7034 | High | 8.8 | 2017-07-20 | An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iCloud before 6.2.2 on Windows is affected… |
CVE-2017-7033 | High | 7.8 | 2017-07-20 | An issue was discovered in certain Apple products. macOS before 10.12.6 is affected. The issue involves the "afclip" component. It allows remote attackers to e… |
CVE-2017-7032 | High | 7.8 | 2017-07-20 | An issue was discovered in certain Apple products. macOS before 10.12.6 is affected. The issue involves the "kext tools" component. It allows attackers to exec… |
CVE-2017-7031 | High | 7.8 | 2017-07-20 | An issue was discovered in certain Apple products. macOS before 10.12.6 is affected. The issue involves the "Foundation" component. It allows remote attackers… |
CVE-2017-7030 | High | 8.8 | 2017-07-20 | An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iCloud before 6.2.2 on Windows is affected… |
CVE-2017-7027 | High | 7.8 | 2017-07-20 | An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. macOS before 10.12.6 is affected. tvOS before 10.2.2 is affected. watchOS bef… |
CVE-2017-7026 | High | 7.8 | 2017-07-20 | An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. macOS before 10.12.6 is affected. tvOS before 10.2.2 is affected. watchOS bef… |
CVE-2017-7025 | High | 7.8 | 2017-07-20 | An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. macOS before 10.12.6 is affected. tvOS before 10.2.2 is affected. watchOS bef… |
CVE-2017-7024 | High | 7.8 | 2017-07-20 | An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. macOS before 10.12.6 is affected. tvOS before 10.2.2 is affected. watchOS bef… |
CVE-2017-7023 | High | 7.8 | 2017-07-20 | An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. macOS before 10.12.6 is affected. tvOS before 10.2.2 is affected. watchOS bef… |
CVE-2017-7022 | High | 7.8 | 2017-07-20 | An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. macOS before 10.12.6 is affected. tvOS before 10.2.2 is affected. watchOS bef… |
CVE-2017-7021 | High | 7.8 | 2017-07-20 | An issue was discovered in certain Apple products. macOS before 10.12.6 is affected. The issue involves the "AppleGraphicsPowerManagement" component. It allows… |
CVE-2017-7020 | High | 8.8 | 2017-07-20 | An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iCloud before 6.2.2 on Windows is affected… |
CVE-2017-7019 | High | 8.8 | 2017-07-20 | An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iCloud before 6.2.2 on Windows is affected… |
CVE-2017-7018 | High | 8.8 | 2017-07-20 | An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iCloud before 6.2.2 on Windows is affected… |
CVE-2017-7017 | High | 7.8 | 2017-07-20 | An issue was discovered in certain Apple products. macOS before 10.12.6 is affected. The issue involves the "Intel Graphics Driver" component. It allows attack… |
CVE-2017-7016 | High | 7.8 | 2017-07-20 | An issue was discovered in certain Apple products. macOS before 10.12.6 is affected. The issue involves the "afclip" component. It allows remote attackers to e… |
CVE-2017-7015 | High | 7.8 | 2017-07-20 | An issue was discovered in certain Apple products. macOS before 10.12.6 is affected. The issue involves the "Audio" component. It allows remote attackers to ob… |
CVE-2017-7014 | High | 7.8 | 2017-07-20 | An issue was discovered in certain Apple products. macOS before 10.12.6 is affected. The issue involves the "Intel Graphics Driver" component. It allows attack… |
CVE-2017-7012 | High | 8.8 | 2017-07-20 | An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iCloud before 6.2.2 on Windows is affected… |
CVE-2017-7009 | High | 7.8 | 2017-07-20 | An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. macOS before 10.12.6 is affected. tvOS before 10.2.2 is affected. watchOS bef… |
CVE-2017-7008 | High | 7.8 | 2017-07-20 | An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. macOS before 10.12.6 is affected. tvOS before 10.2.2 is affected. The issue i… |
CVE-2017-7506 | High | 8.8 | 2017-07-18 | spice versions though 0.13 are vulnerable to out-of-bounds memory access when processing specially crafted messages from authenticated attacker to the spice se… |
CVE-2017-11420 | Critical | 9.8 | 2017-07-18 | Stack-based buffer overflow in ASUS_Discovery.c in networkmap in Asuswrt-Merlin firmware for ASUS devices and ASUS firmware for ASUS RT-AC5300, RT_AC1900P, RT-… |
CVE-2017-9671 | High | 7.8 | 2017-07-17 | A heap overflow in apk (Alpine Linux's package manager) allows a remote attacker to cause a denial of service, or achieve code execution, by crafting a malicio… |
CVE-2017-9669 | High | 7.8 | 2017-07-17 | A heap overflow in apk (Alpine Linux's package manager) allows a remote attacker to cause a denial of service, or achieve code execution by crafting a maliciou… |
CVE-2017-6744 | High | 8.8 | 2017-07-17 | The Simple Network Management Protocol (SNMP) subsystem of Cisco IOS and IOS XE Software contains multiple vulnerabilities that could allow an authenticated, r… |
CVE-2017-6743 | High | 8.8 | 2017-07-17 | The Simple Network Management Protocol (SNMP) subsystem of Cisco IOS and IOS XE Software contains multiple vulnerabilities that could allow an authenticated, r… |
CVE-2017-6742 | High | 8.8 | 2017-07-17 | A vulnerability in the SNMP implementation of could allow an authenticated, remote attacker to cause a reload of the affected system or to remotely execute cod… |
CVE-2017-6741 | High | 8.8 | 2017-07-17 | A vulnerability in the SNMP implementation of could allow an authenticated, remote attacker to cause a reload of the affected system or to remotely execute cod… |
CVE-2017-6740 | High | 8.8 | 2017-07-17 | The Simple Network Management Protocol (SNMP) subsystem of Cisco IOS and IOS XE Software contains multiple vulnerabilities that could allow an authenticated, r… |
CVE-2017-6739 | High | 8.8 | 2017-07-17 | A vulnerability in the SNMP implementation of could allow an authenticated, remote attacker to cause a reload of the affected system or to remotely execute cod… |
CVE-2017-6738 | High | 8.8 | 2017-07-17 | The Simple Network Management Protocol (SNMP) subsystem of Cisco IOS and IOS XE Software contains multiple vulnerabilities that could allow an authenticated, r… |
CVE-2017-6737 | High | 8.8 | 2017-07-17 | A vulnerability in the SNMP implementation of could allow an authenticated, remote attacker to cause a reload of the affected system or to remotely execute cod… |
CVE-2017-6736 | High | 8.8 | 2017-07-17 | The Simple Network Management Protocol (SNMP) subsystem of Cisco IOS and IOS XE Software contains multiple vulnerabilities that could allow an authenticated, r… |
CVE-2017-9639 | High | 7.3 | 2017-07-17 | An issue was discovered in Fuji Electric V-Server Version 3.3.22.0 and prior. A memory corruption vulnerability has been identified (aka improper restriction o… |
CVE-2017-10983 | High | 7.5 | 2017-07-17 | An FR-GV-206 issue in FreeRADIUS 2.x before 2.2.10 and 3.x before 3.0.15 allows "DHCP - Read overflow when decoding option 63" and a denial of service. |
CVE-2017-10978 | High | 7.5 | 2017-07-17 | An FR-GV-201 issue in FreeRADIUS 2.x before 2.2.10 and 3.x before 3.0.15 allows "Read / write overflow in make_secret()" and a denial of service. |
CVE-2017-2344 | High | 7.8 | 2017-07-17 | A routine within an internal Junos OS sockets library is vulnerable to a buffer overflow. Malicious exploitation of this issue may lead to a denial of service… |
CVE-2017-11362 | Critical | 9.8 | 2017-07-17 | In PHP 7.x before 7.0.21 and 7.1.x before 7.1.7, ext/intl/msgformat/msgformat_parse.c does not restrict the locale length, which allows remote attackers to cau… |
CVE-2017-11345 | High | 7.8 | 2017-07-17 | Stack buffer overflow in networkmap in Asuswrt-Merlin firmware for ASUS devices and ASUS firmware for ASUS RT-AC5300, RT_AC1900P, RT-AC68U, RT-AC68P, RT-AC88U… |
CVE-2017-11344 | High | 7.8 | 2017-07-17 | Global buffer overflow in networkmap in Asuswrt-Merlin firmware for ASUS devices and ASUS firmware for ASUS RT-AC5300, RT_AC1900P, RT-AC68U, RT-AC68P, RT-AC88U… |
CVE-2017-11339 | Medium | 6.5 | 2017-07-17 | There is a heap-based buffer overflow in the Image::printIFDStructure function of image.cpp in Exiv2 0.26. A Crafted input will lead to a remote denial of serv… |
CVE-2017-11328 | Medium | 5.5 | 2017-07-17 | Heap buffer overflow in the yr_object_array_set_item() function in object.c in YARA 3.x allows a denial-of-service attack by scanning a crafted .NET file. |
CVE-2017-11311 | High | 7.8 | 2017-07-17 | soundlib/Load_psm.cpp in OpenMPT through 1.26.12.00 and libopenmpt before 0.2.8461-beta26 has a heap buffer overflow with the potential for arbitrary code exec… |
CVE-2017-10602 | High | 7.0 | 2017-07-17 | A buffer overflow vulnerability in Junos OS CLI may allow a local authenticated user with read only privileges and access to Junos CLI, to execute code with ro… |
CVE-2017-1000075 | Critical | 9.8 | 2017-07-17 | Creolabs Gravity version 1.0 is vulnerable to a stack overflow in the memcmp function |
CVE-2017-1000074 | Critical | 9.8 | 2017-07-17 | Creolabs Gravity version 1.0 is vulnerable to a stack overflow in the string_repeat() function. |
CVE-2017-1000073 | Critical | 9.8 | 2017-07-17 | Creolabs Gravity version 1.0 is vulnerable to a heap overflow in an undisclosed component that can result in arbitrary code execution. |
CVE-2017-1000044 | Critical | 9.8 | 2017-07-17 | gtk-vnc 0.4.2 and older doesn't check framebuffer boundaries correctly when updating framebuffer which may lead to memory corruption when rendering |
CVE-2017-0152 | High | 8.1 | 2017-07-17 | A remote code execution vulnerability exists in the way affected Microsoft scripting engine render when handling objects in memory in Microsoft browsers. The v… |
CVE-2017-0028 | Critical | 9.8 | 2017-07-17 | A remote code execution vulnerability exists when Microsoft scripting engine improperly accesses objects in memory. The vulnerability could corrupt memory in a… |
CVE-2017-2818 | High | 7.5 | 2017-07-12 | An exploitable heap overflow vulnerability exists in the image rendering functionality of Poppler 0.53.0. A specifically crafted PDF can cause an overly large… |
CVE-2017-2814 | High | 7.5 | 2017-07-12 | An exploitable heap overflow vulnerability exists in the image rendering functionality of Poppler 0.53.0. A specifically crafted pdf can cause an image resizin… |
CVE-2017-11190 | High | 7.8 | 2017-07-12 | unrarlib.c in unrar-free 0.0.1, when _DEBUG_LOG mode is enabled, might allow remote attackers to cause a denial of service (stack-based buffer overflow and app… |
CVE-2017-8619 | High | 7.5 | 2017-07-11 | Microsoft Edge on Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows a remote code execution vulnerability in the way affected Microsoft scr… |
CVE-2017-8618 | High | 7.5 | 2017-07-11 | Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 16… |
CVE-2017-8617 | High | 7.5 | 2017-07-11 | Microsoft Edge in Windows 10 1703 Microsoft Edge allows a remote code execution vulnerability in the way affected Microsoft scripting engines render when handl… |
CVE-2017-8610 | High | 7.5 | 2017-07-11 | Microsoft Edge in Microsoft Windows 10 1703 allows an attacker to execute arbitrary code in the context of the current user when the JavaScript engine fails to… |
CVE-2017-8609 | High | 7.5 | 2017-07-11 | Microsoft Internet Explorer in Microsoft Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allow an attacker to execute arbitrary code in the cont… |
CVE-2017-8608 | High | 7.5 | 2017-07-11 | Microsoft browsers in Microsoft Windows Server 2008 and R2, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, and 1703… |
CVE-2017-8607 | High | 7.5 | 2017-07-11 | Microsoft browsers in Microsoft Windows 7, Windows Server 2008 and R2, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607… |
CVE-2017-8606 | High | 7.5 | 2017-07-11 | Microsoft browsers in Microsoft Windows 7, Windows Server 2008 and R2, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607… |
CVE-2017-8605 | High | 7.5 | 2017-07-11 | Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allow an attacker to execute arbitrary code in the context of the cu… |
CVE-2017-8604 | High | 7.5 | 2017-07-11 | Microsoft Edge in Microsoft Windows 10 1511, 1607, and 1703, and Windows Server 2016 allow an attacker to execute arbitrary code in the context of the current… |
CVE-2017-8603 | High | 7.5 | 2017-07-11 | Microsoft Edge in Microsoft Windows 10 1511, 1607, and 1703, and Windows Server 2016 allow an attacker to execute arbitrary code in the context of the current… |
CVE-2017-8601 | High | 7.5 | 2017-07-11 | Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allow an attacker to execute arbitrary code in the context of the cu… |
CVE-2017-8598 | High | 7.5 | 2017-07-11 | Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allow an attacker to execute arbitrary code in the context of the cu… |
CVE-2017-8596 | High | 7.5 | 2017-07-11 | Microsoft Edge in Microsoft Windows 10 1607, and 1703, and Windows Server 2016 allow an attacker to execute arbitrary code in the context of the current user w… |
CVE-2017-8595 | High | 7.5 | 2017-07-11 | Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allow an attacker to execute arbitrary code in the context of the cu… |
CVE-2017-8594 | High | 7.5 | 2017-07-11 | Internet Explorer on Microsoft Windows 8.1 and Windows RT 8.1, and Windows Server 2012 R2 allows an attacker to execute arbitrary code in the context of the cu… |
CVE-2017-8502 | High | 7.8 | 2017-07-11 | Microsoft Office allows a remote code execution vulnerability due to the way that it handles objects in memory, aka "Microsoft Office Memory Corruption Vulnera… |
CVE-2017-8501 | High | 7.8 | 2017-07-11 | Microsoft Office allows a remote code execution vulnerability due to the way that it handles objects in memory, aka "Microsoft Office Memory Corruption Vulnera… |
CVE-2017-0243 | High | 7.8 | 2017-07-11 | Microsoft Office allows a remote code execution vulnerability due to the way that it handles objects in memory, aka "Microsoft Office Remote Code Execution Vul… |
CVE-2017-6731 | High | 7.5 | 2017-07-10 | A vulnerability in Multicast Source Discovery Protocol (MSDP) ingress packet processing for Cisco IOS XR Software could allow an unauthenticated, remote attack… |
CVE-2017-11111 | High | 7.8 | 2017-07-08 | In Netwide Assembler (NASM) 2.14rc0, preproc.c allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possi… |
CVE-2017-9629 | Critical | 9.8 | 2017-07-07 | A Stack-Based Buffer Overflow issue was discovered in Schneider Electric Wonderware ArchestrA Logger, versions 2017.426.2307.1 and prior. The stack-based buffe… |
CVE-2017-0340 | High | 7.8 | 2017-07-07 | An elevation of privilege vulnerability in the NVIDIA Libnvparser component due to a memcpy into a fixed sized buffer with a user-controlled size could lead to… |
CVE-2017-2184 | High | 8.8 | 2017-07-07 | Buffer overflow in HOME SPOT CUBE2 firmware V101 and earlier allows an attacker to execute arbitrary code via WebUI. |
CVE-2017-0706 | Medium | 6.8 | 2017-07-06 | A elevation of privilege vulnerability in the Broadcom wi-fi driver. Product: Android. Versions: Android kernel. Android ID: A-35195787. References: B-RB#12053… |
CVE-2017-0689 | Medium | 5.5 | 2017-07-06 | A denial of service vulnerability in the Android media framework. Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-362159… |