auren-research/cyber-sec huggingface dataset:
cveID: CVE-2020-5735
vendorProject: Amcrest
product: Cameras and Network Video Recorder (NVR)
vulnerabilityName: Amcrest Cameras and NVR Stack-based Buffer Overflow Vulnerability
dateAdded: 2021-11-03
shortDescription: Amcrest cameras and NVR contain a stack-based buffer overflow vulnerability through port 37777 that allows an unauthenticated, remote attacker to crash the device and possibly execute code.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-05-03
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2020-5735
cwes: CWE-121
cveID: CVE-2019-2215
vendorProject: Android
product: Android Kernel
vulnerabilityName: Android Kernel Use-After-Free Vulnerability
dateAdded: 2021-11-03
shortDescription: Android Kernel contains a use-after-free vulnerability in binder.c that allows for privilege escalation from an application to the Linux Kernel. This vulnerability was observed chained with CVE-2020-0041 and CVE-2020-0069 under exploit chain "AbstractEmu."
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-05-03
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2019-2215
cwes: CWE-416
cveID: CVE-2020-0041
vendorProject: Android
product: Android Kernel
vulnerabilityName: Android Kernel Out-of-Bounds Write Vulnerability
dateAdded: 2021-11-03
shortDescription: Android Kernel binder_transaction of binder.c contains an out-of-bounds write vulnerability due to an incorrect bounds check that could allow for local privilege escalation. This vulnerability was observed chained with CVE-2019-2215 and CVE-2020-0069 under exploit chain "AbstractEmu."
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-05-03
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2020-0041
cwes: CWE-20
cveID: CVE-2020-0069
vendorProject: MediaTek
product: Multiple Chipsets
vulnerabilityName: Mediatek Multiple Chipsets Insufficient Input Validation Vulnerability
dateAdded: 2021-11-03
shortDescription: Multiple MediaTek chipsets contain an insufficient input validation vulnerability and have missing SELinux restrictions in the Command Queue drivers ioctl handlers. This causes an out-of-bounds write leading to privilege escalation. This vulnerability was observed chained with CVE-2019-2215 and CVE-2020-0041 under exploit chain "AbstractEmu."
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-05-03
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2020-0069
cwes: CWE-787
cveID: CVE-2017-9805
vendorProject: Apache
product: Struts
vulnerabilityName: Apache Struts Deserialization of Untrusted Data Vulnerability
dateAdded: 2021-11-03
shortDescription: Apache Struts REST Plugin uses an XStreamHandler with an instance of XStream for deserialization without any type filtering, which can lead to remote code execution when deserializing XML payloads.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-05-03
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2017-9805
cwes: CWE-502
cveID: CVE-2021-42013
vendorProject: Apache
product: HTTP Server
vulnerabilityName: Apache HTTP Server Path Traversal Vulnerability
dateAdded: 2021-11-03
shortDescription: Apache HTTP Server contains a path traversal vulnerability that allows an attacker to perform remote code execution if files outside directories configured by Alias-like directives are not under default require all denied or if CGI scripts are enabled. This CVE ID resolves an incomplete patch for CVE-2021-41773.
requiredAction: Apply updates per vendor instructions.
dueDate: 2021-11-17
knownRansomwareCampaignUse: Known
notes: https://nvd.nist.gov/vuln/detail/CVE-2021-42013
cwes: CWE-22
cveID: CVE-2021-41773
vendorProject: Apache
product: HTTP Server
vulnerabilityName: Apache HTTP Server Path Traversal Vulnerability
dateAdded: 2021-11-03
shortDescription: Apache HTTP Server contains a path traversal vulnerability that allows an attacker to perform remote code execution if files outside directories configured by Alias-like directives are not under default �require all denied� or if CGI scripts are enabled. The original patch issued under this CVE ID is insufficient, please review remediation information under CVE-2021-42013.
requiredAction: Apply updates per vendor instructions.
dueDate: 2021-11-17
knownRansomwareCampaignUse: Known
notes: https://nvd.nist.gov/vuln/detail/CVE-2021-41773
cwes: CWE-22
cveID: CVE-2019-0211
vendorProject: Apache
product: HTTP Server
vulnerabilityName: Apache HTTP Server Privilege Escalation Vulnerability
dateAdded: 2021-11-03
shortDescription: Apache HTTP Server, with MPM event, worker or prefork, code executing in less-privileged child processes or threads (including scripts executed by an in-process scripting interpreter) could execute code with the privileges of the parent process (usually root) by manipulating the scoreboard.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-05-03
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2019-0211
cwes: CWE-416
cveID: CVE-2016-4437
vendorProject: Apache
product: Shiro
vulnerabilityName: Apache Shiro Code Execution Vulnerability
dateAdded: 2021-11-03
shortDescription: Apache Shiro contains a vulnerability which may allow remote attackers to execute code or bypass intended access restrictions via an unspecified request parameter when a cipher key has not been configured for the "remember me" feature.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-05-03
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2016-4437
cwes: CWE-284
cveID: CVE-2019-17558
vendorProject: Apache
product: Solr
vulnerabilityName: Apache Solr VelocityResponseWriter Plug-In Remote Code Execution Vulnerability
dateAdded: 2021-11-03
shortDescription: The Apache Solr VelocityResponseWriter plug-in contains an unspecified vulnerability which can allow for remote code execution.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-05-03
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2019-17558
cwes: CWE-74
cveID: CVE-2020-17530
vendorProject: Apache
product: Struts
vulnerabilityName: Apache Struts Remote Code Execution Vulnerability
dateAdded: 2021-11-03
shortDescription: Forced Object-Graph Navigation Language (OGNL) evaluation in Apache Struts, when evaluated on raw user input in tag attributes, can lead to remote code execution.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-05-03
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2020-17530
cwes: CWE-917
cveID: CVE-2017-5638
vendorProject: Apache
product: Struts
vulnerabilityName: Apache Struts Remote Code Execution Vulnerability
dateAdded: 2021-11-03
shortDescription: Apache Struts Jakarta Multipart parser allows for malicious file upload using the Content-Type value, leading to remote code execution.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-05-03
knownRansomwareCampaignUse: Known
notes: https://nvd.nist.gov/vuln/detail/CVE-2017-5638
cwes: CWE-20
cveID: CVE-2018-11776
vendorProject: Apache
product: Struts
vulnerabilityName: Apache Struts Remote Code Execution Vulnerability
dateAdded: 2021-11-03
shortDescription: Apache Struts contains a vulnerability that allows for remote code execution under two circumstances. One, where the alwaysSelectFullNamespace option is true and the value isn't set for a result defined in underlying configurations and in same time, its upper package configuration have no or wildcard namespace. Or, using URL tag which doesn't have value and action set and in same time, its upper package configuration have no or wildcard namespace.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-05-03
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2018-11776
cwes: CWE-20
cveID: CVE-2021-30858
vendorProject: Apple
product: iOS, iPadOS, and macOS
vulnerabilityName: Apple iOS, iPadOS, macOS Use-After-Free Vulnerability
dateAdded: 2021-11-03
shortDescription: Apple iOS, iPadOS, and macOS WebKit contain a use-after-free vulnerability that leads to code execution when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing.
requiredAction: Apply updates per vendor instructions.
dueDate: 2021-11-17
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2021-30858
cwes: CWE-416
cveID: CVE-2019-6223
vendorProject: Apple
product: iOS and macOS
vulnerabilityName: Apple iOS and macOS Group Facetime Vulnerability
dateAdded: 2021-11-03
shortDescription: Apple iOS and macOS Group FaceTime contains an unspecified vulnerability where the call initiator can cause the recipient's Apple device to answer unknowingly or without user interaction.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-05-03
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2019-6223
cveID: CVE-2021-30860
vendorProject: Apple
product: Multiple Products
vulnerabilityName: Apple Multiple Products Integer Overflow Vulnerability
dateAdded: 2021-11-03
shortDescription: Apple iOS, iPadOS, macOS, and watchOS CoreGraphics contain an integer overflow vulnerability which may allow code execution when processing a maliciously crafted PDF. The vulnerability is also known under the moniker of FORCEDENTRY.
requiredAction: Apply updates per vendor instructions.
dueDate: 2021-11-17
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2021-30860
cwes: CWE-20
CWE-190
cveID: CVE-2020-27930
vendorProject: Apple
product: Multiple Products
vulnerabilityName: Apple Multiple Products Memory Corruption Vulnerability
dateAdded: 2021-11-03
shortDescription: Apple iOS, iPadOS, macOS, and watchOS FontParser contain a memory corruption vulnerability which may allow for code execution when processing maliciously crafted front.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-05-03
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2020-27930
cwes: CWE-787
cveID: CVE-2021-30807
vendorProject: Apple
product: Multiple Products
vulnerabilityName: Apple Multiple Products Memory Corruption Vulnerability
dateAdded: 2021-11-03
shortDescription: Apple iOS, iPadOS, macOS, and watchOS IOMobileFrameBuffer contain a memory corruption vulnerability which may allow an application to execute code with kernel privileges.
requiredAction: Apply updates per vendor instructions.
dueDate: 2021-11-17
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2021-30807
cwes: CWE-787
cveID: CVE-2020-27950
vendorProject: Apple
product: Multiple Products
vulnerabilityName: Apple Multiple Products Memory Initialization Vulnerability
dateAdded: 2021-11-03
shortDescription: Apple iOS, iPadOS, macOS, and watchOS contain a memory initialization vulnerability that may allow a malicious application to disclose kernel memory.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-05-03
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2020-27950
cwes: CWE-665
cveID: CVE-2020-27932
vendorProject: Apple
product: Multiple Products
vulnerabilityName: Apple Multiple Products Type Confusion Vulnerability
dateAdded: 2021-11-03
shortDescription: Apple iOS, iPadOS, macOS, and watchOS contain a type confusion vulnerability that may allow a malicious application to execute code with kernel privileges.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-05-03
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2020-27932
cwes: CWE-843
cveID: CVE-2020-9818
vendorProject: Apple
product: iOS, iPadOS, and watchOS
vulnerabilityName: Apple iOS, iPadOS, and watchOS Out-of-Bounds Write Vulnerability
dateAdded: 2021-11-03
shortDescription: Apple iOS, iPadOS, and watchOS Mail contains an out-of-bounds write vulnerability which may allow memory modification or application termination when processing a maliciously crafted mail message.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-05-03
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2020-9818
cwes: CWE-787
cveID: CVE-2020-9819
vendorProject: Apple
product: iOS, iPadOS, and watchOS
vulnerabilityName: Apple iOS, iPadOS, and watchOS Memory Corruption Vulnerability
dateAdded: 2021-11-03
shortDescription: Apple iOS, iPadOS, and watchOS Mail contains a memory corruption vulnerability that may allow heap corruption when processing a maliciously crafted mail message.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-05-03
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2020-9819
cwes: CWE-787
cveID: CVE-2021-30762
vendorProject: Apple
product: iOS
vulnerabilityName: Apple iOS WebKit Use-After-Free Vulnerability
dateAdded: 2021-11-03
shortDescription: Apple iOS WebKit contains a use-after-free vulnerability that leads to code execution when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing.
requiredAction: Apply updates per vendor instructions.
dueDate: 2021-11-17
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2021-30762
cwes: CWE-416
cveID: CVE-2021-1782
vendorProject: Apple
product: Multiple Products
vulnerabilityName: Apple Multiple Products Race Condition Vulnerability
dateAdded: 2021-11-03
shortDescription: Apple iOS, iPadOs, macOS, watchOS, and tvOS contain a race condition vulnerability that may allow a malicious application to elevate privileges.
requiredAction: Apply updates per vendor instructions.
dueDate: 2021-11-17
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2021-1782
cwes: CWE-362
CWE-667
cveID: CVE-2021-1870
vendorProject: Apple
product: iOS, iPadOS, and macOS
vulnerabilityName: Apple iOS, iPadOS, and macOS WebKit Remote Code Execution Vulnerability
dateAdded: 2021-11-03
shortDescription: Apple iOS, iPadOS, and macOS WebKit contain an unspecified logic vulnerability that allows a remote attacker to execute code. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing.
requiredAction: Apply updates per vendor instructions.
dueDate: 2021-11-17
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2021-1870
cwes: CWE-1173
cveID: CVE-2021-1871
vendorProject: Apple
product: iOS, iPadOS, and macOS
vulnerabilityName: Apple iOS, iPadOS, and macOS WebKit Remote Code Execution Vulnerability
dateAdded: 2021-11-03
shortDescription: Apple iOS, iPadOS, and macOS WebKit contain an unspecified logic vulnerability that allows a remote attacker to execute code. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing.
requiredAction: Apply updates per vendor instructions.
dueDate: 2021-11-17
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2021-1871
cwes: CWE-1173
cveID: CVE-2021-1879
vendorProject: Apple
product: iOS, iPadOS, and watchOS
vulnerabilityName: Apple iOS, iPadOS, and watchOS WebKit Cross-Site Scripting (XSS) Vulnerability
dateAdded: 2021-11-03
shortDescription: Apple iOS, iPadOS, and watchOS WebKit contain an unspecified vulnerability that allows for universal cross-site scripting (XSS) when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing.
requiredAction: Apply updates per vendor instructions.
dueDate: 2021-11-17
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2021-1879
cwes: CWE-79
cveID: CVE-2021-30661
vendorProject: Apple
product: Multiple Products
vulnerabilityName: Apple Multiple Products WebKit Storage Use-After-Free Vulnerability
dateAdded: 2021-11-03
shortDescription: Apple iOS, iPadOS, macOS, tvOS, watchOS, and Safari WebKit Storage contain a use-after-free vulnerability that leads to code execution when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing.
requiredAction: Apply updates per vendor instructions.
dueDate: 2021-11-17
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2021-30661
cwes: CWE-416
cveID: CVE-2021-30666
vendorProject: Apple
product: iOS
vulnerabilityName: Apple iOS WebKit Buffer Overflow Vulnerability
dateAdded: 2021-11-03
shortDescription: Apple iOS WebKit contains a buffer-overflow vulnerability that leads to code execution when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing.
requiredAction: Apply updates per vendor instructions.
dueDate: 2021-11-17
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2021-30666
cwes: CWE-119
cveID: CVE-2021-30713
vendorProject: Apple
product: macOS
vulnerabilityName: Apple macOS Unspecified Vulnerability
dateAdded: 2021-11-03
shortDescription: Apple macOS Transparency, Consent, and Control (TCC) contains an unspecified permissions issue which may allow a malicious application to bypass privacy preferences.
requiredAction: Apply updates per vendor instructions.
dueDate: 2021-11-17
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2021-30713
cwes: CWE-862
cveID: CVE-2021-30657
vendorProject: Apple
product: macOS
vulnerabilityName: Apple macOS Unspecified Vulnerability
dateAdded: 2021-11-03
shortDescription: Apple macOS contains an unspecified logic issue in System Preferences that may allow a malicious application to bypass Gatekeeper checks.
requiredAction: Apply updates per vendor instructions.
dueDate: 2021-11-17
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2021-30657
cwes: CWE-862
cveID: CVE-2021-30665
vendorProject: Apple
product: Multiple Products
vulnerabilityName: Apple Multiple Products WebKit Memory Corruption Vulnerability
dateAdded: 2021-11-03
shortDescription: Apple iOS, iPadOS, macOS, watchOS, and tvOS WebKit contain a memory corruption vulnerability that leads to code execution when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing.
requiredAction: Apply updates per vendor instructions.
dueDate: 2021-11-17
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2021-30665
cwes: CWE-787
cveID: CVE-2021-30663
vendorProject: Apple
product: Multiple Products
vulnerabilityName: Apple Multiple Products WebKit Integer Overflow Vulnerability
dateAdded: 2021-11-03
shortDescription: Apple iOS, iPadOS, macOS, tvOS, and Safari WebKit contain an integer overflow vulnerability that leads to code execution when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing.
requiredAction: Apply updates per vendor instructions.
dueDate: 2021-11-17
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2021-30663
cwes: CWE-20
CWE-190
cveID: CVE-2021-30761
vendorProject: Apple
product: iOS
vulnerabilityName: Apple iOS WebKit Memory Corruption Vulnerability
dateAdded: 2021-11-03
shortDescription: Apple iOS WebKit contains a memory corruption vulnerability that leads to code execution when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing.
requiredAction: Apply updates per vendor instructions.
dueDate: 2021-11-17
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2021-30761
cwes: CWE-787
cveID: CVE-2021-30869
vendorProject: Apple
product: iOS, iPadOS, and macOS
vulnerabilityName: Apple iOS, iPadOS, and macOS Type Confusion Vulnerability
dateAdded: 2021-11-03
shortDescription: Apple iOS, iPadOS, and macOS contain a type confusion vulnerability in the XNU which may allow a malicious application to execute code with kernel privileges.
requiredAction: Apply updates per vendor instructions.
dueDate: 2021-11-17
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2021-30869
cwes: CWE-843
cveID: CVE-2020-9859
vendorProject: Apple
product: Multiple Products
vulnerabilityName: Apple Multiple Products Code Execution Vulnerability
dateAdded: 2021-11-03
shortDescription: Apple iOS, iPadOS, macOS, watchOS, and tvOS contain an unspecified vulnerability that may allow an application to execute code with kernel privileges.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-05-03
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2020-9859
cwes: CWE-415
cveID: CVE-2021-20090
vendorProject: Arcadyan
product: Buffalo Firmware
vulnerabilityName: Arcadyan Buffalo Firmware Path Traversal Vulnerability
dateAdded: 2021-11-03
shortDescription: Arcadyan Buffalo firmware contains a path traversal vulnerability that could allow unauthenticated, remote attackers to bypass authentication and access sensitive information. This vulnerability affects multiple routers across several different vendors.
requiredAction: Apply updates per vendor instructions.
dueDate: 2021-11-17
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2021-20090
cwes: CWE-22
cveID: CVE-2021-27562
vendorProject: Arm
product: Trusted Firmware
vulnerabilityName: Arm Trusted Firmware Out-of-Bounds Write Vulnerability
dateAdded: 2021-11-03
shortDescription: Arm Trusted Firmware contains an out-of-bounds write vulnerability allowing the non-secure (NS) world to trigger a system halt, overwrite secure data, or print out secure data when calling secure functions under the non-secure processing environment (NSPE) handler mode. This vulnerability affects Yealink Device Management servers.
requiredAction: Apply updates per vendor instructions.
dueDate: 2021-11-17
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2021-27562
cwes: CWE-787
cveID: CVE-2021-28664
vendorProject: Arm
product: Mali Graphics Processing Unit (GPU)
vulnerabilityName: Arm Mali Graphics Processing Unit (GPU) Unspecified Vulnerability
dateAdded: 2021-11-03
shortDescription: Arm Mali Graphics Processing Unit (GPU) kernel driver contains an unspecified vulnerability that may allow a non-privileged user to gain write access to read-only memory, gain root privilege, corrupt memory, and modify the memory of other processes.
requiredAction: Apply updates per vendor instructions.
dueDate: 2021-11-17
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2021-28664
cwes: CWE-787
cveID: CVE-2021-28663
vendorProject: Arm
product: Mali Graphics Processing Unit (GPU)
vulnerabilityName: Arm Mali Graphics Processing Unit (GPU) Use-After-Free Vulnerability
dateAdded: 2021-11-03
shortDescription: Arm Mali Graphics Processing Unit (GPU) kernel driver contains a use-after-free vulnerability that may allow a non-privileged user to make improper operations on GPU memory to gain root privilege, and/or disclose information.
requiredAction: Apply updates per vendor instructions.
dueDate: 2021-11-17
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2021-28663
cwes: CWE-416