Security Vulnerabilities - CVEs Published In June 2021
It was discovered that read_file() in apport/hookutils.py would follow symbolic links or open FIFOs. When this function is used by the openjdk-15 package apport hooks, it could expose private data to other local users.
CVSS Score
7.3
EPSS Score
0.001
Published
2021-06-12
It was discovered that read_file() in apport/hookutils.py would follow symbolic links or open FIFOs. When this function is used by the openjdk-lts package apport hooks, it could expose private data to other local users.
CVSS Score
7.3
EPSS Score
0.001
Published
2021-06-12
An out of bounds write and read vulnerability in the AMD Graphics Driver for Windows 10 may lead to escalation of privilege or denial of service.
CVSS Score
7.8
EPSS Score
0.001
Published
2021-06-11
An insufficient input validation in the AMD Graphics Driver for Windows 10 may allow unprivileged users to unload the driver, potentially causing memory corruptions in high privileged processes, which can lead to escalation of privileges or denial of service.
CVSS Score
7.8
EPSS Score
0.001
Published
2021-06-11
An invalid object pointer free vulnerability in the AMD Graphics Driver for Windows 10 may lead to escalation of privilege or denial of service.
CVSS Score
7.8
EPSS Score
0.001
Published
2021-06-11
An out of bounds write vulnerability in the AMD Graphics Driver for Windows 10 may lead to escalation of privileges or denial of service.
CVSS Score
7.8
EPSS Score
0.001
Published
2021-06-11
An insufficient pointer validation vulnerability in the AMD Graphics Driver for Windows 10 may lead to escalation of privilege or denial of service.
CVSS Score
7.8
EPSS Score
0.001
Published
2021-06-11
An insufficient pointer validation vulnerability in the AMD Graphics Driver for Windows 10 may cause arbitrary code execution in the kernel, leading to escalation of privilege or denial of service.
CVSS Score
7.8
EPSS Score
0.001
Published
2021-06-11
A heap information leak/kernel pool address disclosure vulnerability in the AMD Graphics Driver for Windows 10 may lead to KASLR bypass.
CVSS Score
5.5
EPSS Score
0.001
Published
2021-06-11
A potential denial of service (DoS) vulnerability exists in the integrated chipset that may allow a malicious attacker to hang the system when it is rebooted.
CVSS Score
7.5
EPSS Score
0.003
Published
2021-06-11