CVE 2023 document archive · 56
Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →
3,136 documents · Identifier year 2023 · 56 / 63
- CVE-2023-5171Mozilla: Use-after-free in Ion Compiler
- CVE-2023-5169Mozilla: Out-of-bounds write in PathOps
- CVE-2023-5168Mozilla: Out-of-bounds write in FilterNodeD2D1
- CVE-2023-5158kernel: Possible DOS from guest to host invringh_kiov_advance in vhost driver at drivers/vhost/vringh.c
- CVE-2023-5157mariadb: node crashes with Transport endpoint is not connected mysqld got signal 6
- CVE-2023-5156glibc: DoS due to memory leak in getaddrinfo.c
- CVE-2023-5129libwebp: out-of-bounds write with a specially crafted WebP lossless file
- CVE-2023-5090kernel: KVM: SVM: improper check in svm_set_x2apic_msr_interception allows direct access to host x2apic msrs
- CVE-2023-5088QEMU: improper IDE controller reset can lead to MBR overwrite
- CVE-2023-4969hw: amd: GPU memory leaks
- CVE-2023-4921kernel: use-after-free in sch_qfq network scheduler
- CVE-2023-4911glibc: buffer overflow in ld.so leading to privilege escalation
- CVE-2023-4881kernel: netfilter: stack out-of-bounds write in nft_exthdr ip/tcp/sctp functions
- CVE-2023-4875mutt: null pointer dereference
- CVE-2023-4874mutt: null pointer dereference
- CVE-2023-4863libwebp: Heap buffer overflow in WebP Codec
- CVE-2023-4860chromium-browser: skia: chromium-browser: skia: Inappropriate implementation in Skia
- CVE-2023-4822grafana: incorrect assessment of permissions across organizations
- CVE-2023-4813glibc: potential use-after-free in gaih_inet()
- CVE-2023-4807openssl: POLY1305 MAC implementation corrupts XMM registers on Windows
- CVE-2023-4806glibc: potential use-after-free in getaddrinfo()
- CVE-2023-4752vim: use-after-free in function ins_compl_get_exp in vim/vim
- CVE-2023-4750vim: use-after-free in function bt_quickfix
- CVE-2023-4733vim: use-after-free in function buflist_altfpos
- CVE-2023-4732kernel: Race between task migrating pages and another task calling exit_mmap to release those same pages getting invalid opcode BUG in include/linux/swapops.h
- CVE-2023-4727ca: token authentication bypass vulnerability
- CVE-2023-4693grub2: out-of-bounds read at fs/ntfs.c
- CVE-2023-4692grub2: Out-of-bounds write at fs/ntfs.c may lead to unsigned code execution
- CVE-2023-4641shadow-utils: possible password leak during passwd(1) change
- CVE-2023-4623kernel: net/sched: sch_hfsc UAF
- CVE-2023-4622kernel: use after free in unix_stream_sendpage
- CVE-2023-4611kernel: Use after free race between mbind() and VMA-locked page fault
- CVE-2023-4610kernel: KASAN: slab-use-after-free Read in radix_tree_lookup while fuzzing Linux kernel 6.4-rc6 with syzkaller.
- CVE-2023-4585Mozilla: Memory safety bugs fixed in Firefox 117, Firefox ESR 115.2, and Thunderbird 115.2
- CVE-2023-4584Mozilla: Memory safety bugs fixed in Firefox 117, Firefox ESR 102.15, Firefox ESR 115.2, Thunderbird 102.15, and Thunderbird 115.2
- CVE-2023-4583Mozilla: Browsing Context potentially not cleared when closing Private Window
- CVE-2023-4582Mozilla: Buffer Overflow in WebGL glGetProgramiv
- CVE-2023-4581Mozilla: XLL file extensions were downloadable without warnings
- CVE-2023-4580Mozilla: Push notifications saved to disk unencrypted
- CVE-2023-4578Mozilla: Error reporting methods in SpiderMonkey could have triggered an Out of Memory Exception
- CVE-2023-4577Mozilla: Memory corruption in JIT UpdateRegExpStatics
- CVE-2023-4576Mozilla: Integer Overflow in RecordedSourceSurfaceCreation
- CVE-2023-4575Mozilla: Memory corruption in IPC FilePickerShownCallback
- CVE-2023-4574Mozilla: Memory corruption in IPC ColorPickerShownCallback
- CVE-2023-4573Mozilla: Memory corruption in IPC CanvasTranslator
- CVE-2023-4569kernel: information leak in nft_set_catchall_flush in net/netfilter/nf_tables_api.c
- CVE-2023-4535OpenSC: out-of-bounds read in MyEID driver handling encryption using symmetric keys
- CVE-2023-4527glibc: Stack read overflow in getaddrinfo in no-aaaa mode
- CVE-2023-4515kernel: ksmbd: validate command request size
- CVE-2023-4513wireshark: DoS (memory leak) via packet injection or crafted capture file