Vulnerabilities

Search by TI id or any alias (CVE, GHSA), vendor, product or CWE.

Filters

Reset all

Threatist priority CRITICAL 0 HIGH 0 MEDIUM 0 LOW 2

Signals Exploited in the wild (KEV) 0 Patch available 2 No fix listed 0 Has CVE 2

Fix status Fixed 2 Partial 0 Will not fix 0 Deferred 0 No fix listed 0

Attack vector Network 0 Adjacent network 0 Local 2 Physical 0

Requirements No authentication 0 No user interaction 2

Product

Products as named in CPE, with their records.

Published Last 7 days Last 30 days Last 12 months Any time

Weakness (CWE) CWE-273 Improper Check for Dropped Privileges 1 CWE-665 Improper Initialization 1

1 selected

2 records

Sort

Release: FreeBSD p4 × Clear all filters

TI-2023-04941 CVE-2023-5370 · GHSA-vf42-37cv-443p

arm64 boot CPUs may lack speculative execution protections

Priority LOW 24

On CPU 0 the check for the SMCCC workaround is called before SMCCC support has been initialized.

CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00201 · Published 2023-10-04 · Fixed in p4 CWE-665

TI-2023-04940 CVE-2023-5369 · GHSA-4hwj-mwvm-vc26

copy_file_range insufficient capability rights check

Priority LOW 33

Before correction, the copy_file_range system call checked only for the CAP_READ and CAP_WRITE capabilities on the input and output file descriptors, respectively.

CVSS 3.1HIGH 7.1· Local · Low privileges · No interaction · EPSS 0.00197 · Published 2023-10-04 · Fixed in p4 CWE-273

THREATIST.IO

Vulnerability intelligence for security teams and AI agents.

Vulnerabilities Vendors Exploited (KEV) API & MCP Newsletter Privacy policy Terms of use

Newsletter Vulnerability intelligence in your inbox Subscribe

© 2026 Threatist.io · X (@threatist)Data: CVE Program, NVD, CISA KEV, FIRST EPSS, GitHub Advisory Database and Red Hat security data (both CC BY 4.0), Microsoft Security Response Center. This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences

We would like to use Google Analytics cookies to see how the site is used. They are set only if you accept. Privacy policy