Every advisory below is enriched with the Vulnetix VDB exploit-intelligence chip (hover a CVE ID in the interactive page to see CVSS, EPSS, KEV status, and PoC maturity). 1 is already weaponised in the wild.
The advisories below are ordered by the Vulnetix risk prioritization strategy: exploitation evidence first, scores second. On the interactive page you can switch to three other lenses.
Integer overflow in the fb_mmap function in drivers/video/fbmem.c in the Linux kernel before 3.8.9, as used in a certain Motorola build of Android 4.1.2 and other products, allows local users to create a read-write memory mapping for the entirety of ke...
CVEs:CVE-2013-2596
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | motorola | — | — |
| linux_kernel | affected | linux | — | — |
The TrustZone kernel, when used in conjunction with a certain Motorola build of Android 4.1.2, on Motorola Razr HD, Razr M, and Atrix HD devices with the Qualcomm MSM8960 chipset does not verify the association between a certain physical-address argume...
CVEs:CVE-2013-3051
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | motorola | — | — |
| atrix_hd | affected | motorola | — | — |
| msm8960 | affected | qualcomm | — | — |
| razr_hd | affected | motorola | — | — |
| razr_m | affected | motorola | — | — |
Use-after-free vulnerability in the O3D plug-in in Google Chrome OS before 26.0.1410.57 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to improper management of ownership relationships...
CVEs:CVE-2013-2833
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome_os | affected | — | — |
The Buffer::Set function in core/cross/buffer.cc in the O3D plug-in in Google Chrome OS before 26.0.1410.57 does not prevent uninitialized data from remaining in a buffer, which might allow remote attackers to obtain sensitive information via unspecifi...
CVEs:CVE-2013-2832
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome_os | affected | — | — |
Google Chrome OS before 26.0.1410.57 does not properly enforce origin restrictions for the O3D and Google Talk plug-ins, which allows remote attackers to bypass the domain-whitelist protection mechanism via a crafted web site, a different vulnerability...
CVEs:CVE-2013-2834
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome_os | affected | — | — |
Google Chrome OS before 26.0.1410.57 relies on a Pango pango-utils.c read_config implementation that loads the contents of the .pangorc file in the user's home directory, and the file referenced by the PANGO_RC_FILE environment variable, which allows a...
CVEs:CVE-2013-0927
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome_os | affected | — | — |
Google Chrome OS before 26.0.1410.57 does not properly enforce origin restrictions for the O3D and Google Talk plug-ins, which allows remote attackers to bypass the domain-whitelist protection mechanism via a crafted web site, a different vulnerability...
CVEs:CVE-2013-2835
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome_os | affected | — | — |
DEBIAN-CVE-2012-6140
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| google-authenticator | affected | Debian:11 | google-authenticator | — |
| google-authenticator | affected | Debian:12 | google-authenticator | — |
| google-authenticator | affected | Debian:13 | google-authenticator | — |
| google-authenticator | affected | Debian:14 | google-authenticator | — |
pam_google_authenticator.c in the PAM module in Google Authenticator before 1.0 requires user-readable permissions for the secret file, which allows local users to bypass intended access restrictions and discover a shared secret via standard filesystem...
CVEs:CVE-2012-6140
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| authenticator | affected | — | — |
Every CVE above is indexed in the Vulnetix VDB with KEV, EPSS, and PoC maturity. The interactive page surfaces that on hover.