Vendors / Serenityos Records 8 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 3
CVSS high 5
Exploited now Serenityos records in CISA KEV No Serenityos vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 48
SerenityOS before commit 3844e8569689dd476064a0759d704bc64fb3ca2c contains a directory traversal vulnerability in tar/unzip that may lead to command execution or privilege escalation.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.03169 · Published 2021-06-18 · No fix listed CWE-22
Priority MEDIUM 44
A vulnerability was found in SerenityOS.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00934 · Published 2023-03-01 · No fix listed CWE-190
Priority MEDIUM 43
SerenityOS 2021-03-27 contains a buffer overflow vulnerability in the EndOfCentralDirectory::read() function.
CVSS 3.1 CRITICAL 9.1· Network · No auth · No interaction · EPSS 0.02023 · Published 2021-04-06 · No fix listed CWE-120
Priority LOW 36
SerenityOS fixed as of c9f25bca048443e317f1994ba9b106f2386688c3 contains a buffer overflow vulnerability in LibTextCode through opening a crafted file.
CVSS 3.1 HIGH 7.8· Local · No auth · User interaction · EPSS 0.01046 · Published 2021-04-06 · No fix listed CWE-120
Priority LOW 36
SerenityOS Unspecified is affected by: Buffer Overflow.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.01673 · Published 2021-04-06 · No fix listed CWE-120
Priority LOW 35
SerenityOS in test-crypto.cpp contains a stack buffer overflow which could allow attackers to obtain sensitive information.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.01019 · Published 2021-06-18 · No fix listed CWE-787
Priority LOW 35
SerenityOS contains a buffer overflow in the set_range test in TestBitmap which could allow attackers to obtain sensitive information.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.01019 · Published 2021-06-18 · No fix listed CWE-120
Priority LOW 35
Kernel/VM/MemoryManager.cpp in SerenityOS before 2019-12-30 does not reject syscalls with pointers into the kernel-only virtual address space, which allows local users to gain privileges by overwriting a return address t…
CVSS 3.1 HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00475 · Published 2019-12-31 · No fix listed CWE-119
Open these records in search → All records by CVSS severity
3 5 0 0 0
THREATIST.IORead the docs