Check Point Research Vulnerability Repository https://cpr-zero.checkpoint.com Internet Shortcut Files (.URL) All available versions External control of file name or path in Internet Shortcut Files allows an unauthorized attacker to execute code over a network. 2200 https://cpr-zero.checkpoint.com/vulns/cprid-2200/ Microsoft Excel All available versions Use after Free 2199 https://cpr-zero.checkpoint.com/vulns/cprid-2199/ Microsoft Windows All supported Windows versions Logic flaw 2198 https://cpr-zero.checkpoint.com/vulns/cprid-2198/ Microsoft Outlook All supported versions Logic flaw 2197 https://cpr-zero.checkpoint.com/vulns/cprid-2197/ Microsoft Message Queuing All available Windows versions (clients and servers) Out Of Bound Read (kernel level denial of service) 2196 https://cpr-zero.checkpoint.com/vulns/cprid-2196/ Microsoft Message Queuing All available Windows versions (clients and servers) Out Of Bound Read (application level denial of service) 2195 https://cpr-zero.checkpoint.com/vulns/cprid-2195/ Microsoft Message Queuing All available Windows versions (clients and servers) Out Of Bound Write 2194 https://cpr-zero.checkpoint.com/vulns/cprid-2194/ Audinate Dante Application Library for Windows <= 1.2.0 DLL Side Loading 2193 https://cpr-zero.checkpoint.com/vulns/cprid-2193/ Xiaomi Trusted Execution Environment MIUI before 2022.01.26 Classic Buffer Overflow 2192 https://cpr-zero.checkpoint.com/vulns/cprid-2192/ Sony OMX audio decoder Sony Xperia series 1, 5 and Pro Classic Buffer Overflow 2191 https://cpr-zero.checkpoint.com/vulns/cprid-2191/ Unisoc radio modem 4G and 5G Unisoc chipsets Integer Underflow 2190 https://cpr-zero.checkpoint.com/vulns/cprid-2190/ Qualcomm OMX audio decoder Qualcomm chipsets APQ8009, APQ8009W, APQ8017, AQT1000, AR8031, AR8035, AR9380, CSR8811, CSRA6620, CSRA6640, CSRB31024, FSM10055, FSM10056, IPQ4018, IPQ4028, IPQ4029, IPQ6000, IPQ6010, IPQ6018, IPQ6028, IPQ8064, IPQ8065, IPQ8068, IPQ8070, IPQ8070A, IPQ8071, IPQ8071A, IPQ8072, IPQ8072A, IPQ8074, IPQ8074A, IPQ8076, IPQ8076A, IPQ8078A, IPQ8173, IPQ8174, MDM9150, MDM9206, MDM9250, MDM9607, MDM9628, MSM8909W, MSM8996AU, QCA4024, QCA6174A, QCA6390, QCA6391, QCA6426, QCA6428, QCA6436, QCA6438, QCA6564, QCA6564A, QCA6564AU, QCA6574, QCA6574A, QCA6574AU, QCA6584AU, QCA6595AU, QCA6696, QCA7500, QCA8075, QCA8081, QCA8337, QCA9367, QCA9377, QCA9880, QCA9886, QCA9888, QCA9889, QCA9898, QCA9980, QCA9984, QCA9985, QCA9990, QCA9992, QCA9994, QCM2290, QCM4290, QCM6490, QCN5022, QCN5024, QCN5052, QCN5064, QCN5122, QCN5124, QCN5152, QCN5164, QCN5550, QCN9000, QCN9074, QCS2290, QCS405, QCS410, QCS4290, QCS603, QCS605, QCS610, QCS6490, QCX315, QET4101, QRB5165, QRB5165N, QSM8250, QSW8573, Qualcomm215, SA415M, SA515M, SA6145P, SA6150P, SA6155, SA6155P, SA8145P, SA8150P, SA8155, SA8155P, SA8195P, SD 675, SD205, SD210, SD429, SD460, SD480, SD660, SD662, SD665, SD675, SD678, SD690 5G, SD720G, SD730, SD750G, SD765, SD765G, SD768G, SD778G, SD780G, SD845, SD855, SD865 5G, SD870, SD888, SD888 5G, SDA429W, SDM429W, SDW2500, SDX12, SDX20, SDX24, SDX55, SDX55M, SDX65, SDXR1, SDXR2 5G, SM6225, SM6250, SM6250P, SM6375, SM7250P, SM7315, SM7325P, SM8450, SM8450P, WCD9326, WCD9330, WCD9335, WCD9340, WCD9341, WCD9360, WCD9370, WCD9375, WCD9380, WCD9385, WCN3610, WCN3615, WCN3620, WCN3660B, WCN3680B, WCN3910, WCN3950, WCN3980, WCN3988, WCN3990, WCN3991, WCN3998, WCN3999, WCN6740, WCN6750, WCN6850, WCN6851, WCN6855, WCN6856, WSA8810, WSA8815, WSA8830, WSA8835 Classic Buffer Overflow 2189 https://cpr-zero.checkpoint.com/vulns/cprid-2189/ MediaTek OMX audio decoder MediaTek chipsets MT6570, MT6580, MT6735, MT6737, MT6739, MT6750, MT6750S, MT6753, MT6755, MT6755S, MT6757, MT6757C, MT6757CD, MT6757CH, MT6758, MT6761, MT6763, MT6765, MT6768, MT6771, MT6779, MT6781, MT6785, MT6797, MT6799, MT6833, MT6853, MT6853T, MT6873, MT6877, MT6883, MT6885, MT6889, MT6893, MT8163, MT8167, MT8167S, MT8168, MT8173, MT8175, MT8176, MT8183, MT8185, MT8195, MT8321, MT8362A, MT8365, MT8385, MT8765, MT8766, MT8768, MT8786, MT8788, MT8789, MT8791, MT8797 Improper restriction of operations within the bounds of a memory buffer 2188 https://cpr-zero.checkpoint.com/vulns/cprid-2188/ MediaTek OMX audio decoder MediaTek chipsets MT6570, MT6580, MT6735, MT6737, MT6739, MT6750, MT6750S, MT6753, MT6755, MT6755S, MT6757, MT6757C, MT6757CD, MT6757CH, MT6758, MT6761, MT6763, MT6765, MT6768, MT6771, MT6779, MT6781, MT6785, MT6797, MT6799, MT6833, MT6853, MT6853T, MT6873, MT6877, MT6883, MT6885, MT6889, MT6893, MT8163, MT8167, MT8167S, MT8168, MT8173, MT8175, MT8176, MT8183, MT8185, MT8195, MT8321, MT8362A, MT8365, MT8385, MT8765, MT8766, MT8768, MT8786, MT8788, MT8789, MT8791, MT8797 Improper input validation 2187 https://cpr-zero.checkpoint.com/vulns/cprid-2187/ MediaTek Audio Aurisys HAL MediaTek chipsets MT6779, MT6781, MT6785, MT6853, MT6853T, MT6873, MT6875, MT6877, MT6883, MT6885, MT6889, MT6891, MT6893, MT8183, MT8185, MT8195, MT8321, MT8385, MT8765, MT8766, MT8768, MT8771, MT8786, MT8788, MT8789, MT8791, MT8797 Improper Input Validation 2186 https://cpr-zero.checkpoint.com/vulns/cprid-2186/ Mediatek Audio DSP MediaTek chipsets MT6779, MT6781, MT6785, MT6853, MT6853T, MT6873, MT6875, MT6877, MT6883, MT6885, MT6889, MT6891, MT6893, MT8797 Heap-based Buffer Overflow 2185 https://cpr-zero.checkpoint.com/vulns/cprid-2185/ Mediatek Audio DSP MediaTek chipsets MT6779, MT6781, MT6785, MT6853, MT6853T, MT6873, MT6875, MT6877, MT6883, MT6885, MT6889, MT6891, MT6893, MT8797 Heap-based Buffer Overflow 2184 https://cpr-zero.checkpoint.com/vulns/cprid-2184/ Mediatek Audio DSP MediaTek chipsets MT6779, MT6781, MT6785, MT6853, MT6853T, MT6873, MT6875, MT6877, MT6883, MT6885, MT6889, MT6891, MT6893, MT8797 Heap-based Buffer Overflow 2183 https://cpr-zero.checkpoint.com/vulns/cprid-2183/ Amazon Kindle e-reader <= 5.13.4 Improper Privilege Management 2181 https://cpr-zero.checkpoint.com/vulns/cprid-2181/ Amazon Kindle e-reader <= 5.13.4 Integer Overflow leading to Heap-based Buffer Overflow 2180 https://cpr-zero.checkpoint.com/vulns/cprid-2180/ Qualcomm Data Modem Qualcomm chipsets - SA2150P, SM8150+SDX50M, SM8150, SM6150, APQ8098, SD460, SD622, MDM9205, MSM8909, MSM8909w, MSM8917, MSM8920, MDM9635M, MDM9640, MDM9650, MSM8905, MSM 8937, MSM8940, MSM8953, MSM8976, QCM6125, QCS605, QCS610, QM215, SD665,QCM2150, QCM2290, QCM4290, SD720G, SA415M, SC7180, SC8180X, SDM636, SDM660, SDM670, SDM710, SDM439, SDM450, SDM630, SDM632, SDM845, SDM850, SDX20, SDX24, MSM8996AU, MSM8998, SDM429, SDM429W, APQ8009, APQ8017, APQ8053, APQ8096AU, MDM9206, MDM9207C, MDM9607, SM7150, SXR1130, MSM8996, SDA845 Buffer Overflow 2179 https://cpr-zero.checkpoint.com/vulns/cprid-2179/ Qualcomm DSP Qualcomm chipsets - SD820, SD821, SD820, QCS603, QCS605, SDA855, SA6155P, SA6145P, SA6155, SA6155P, SD855, SD 675, SD660, SD429, SD439 Improper Authorization 2178 https://cpr-zero.checkpoint.com/vulns/cprid-2178/ Qualcomm DSP Qualcomm chipsets - SD820, SD821, SD820, QCS603, QCS605, SDA855, SA6155P, SA6145P, SA6155, SA6155P, SD855, SD 675, SD660, SD429, SD439 Integer Underflow 2177 https://cpr-zero.checkpoint.com/vulns/cprid-2177/ Qualcomm DSP (ComputerVision) Qualcomm chipsets - APQ8098, MSM8998, QCM4290, QCM6125, QCS410, QCS4290, QCS610, QCS6125, QSM8250, QSM8350, SA6145P, SA6150P, SA6155, SA6155P, SA8150P, SA8155, SA8155P, SA8195P, SC7180, SDA640, SDA660, SDA845, SDA855, SDM640, SDM660, SDM830, SDM845, SDM850, SDX50M, SDX55, SDX55M, SM4250, SM4250P, SM6115, SM6115P, SM6125, SM6150, SM6150P, SM6250, SM6250P, SM6350, SM7125, SM7150, SM7150P, SM7225, SM7250, SM7250P, SM8150, SM8150P, SM8250, SM8350, SM8350P, SXR2130, SXR2130P Buffer Overflow 2176 https://cpr-zero.checkpoint.com/vulns/cprid-2176/ Qualcomm DSP (ComputerVision) Qualcomm chipsets - APQ8098, MSM8998, QCM4290, QCM6125, QCS410, QCS4290, QCS610, QCS6125, QSM8250, QSM8350, SA6145P, SA6150P, SA6155, SA6155P, SA8150P, SA8155, SA8155P, SA8195P, SC7180, SDA640, SDA660, SDA845, SDA855, SDM640, SDM660, SDM830, SDM845, SDM850, SDX50M, SDX55, SDX55M, SM4250, SM4250P, SM6115, SM6115P, SM6125, SM6150, SM6150P, SM6250, SM6250P, SM6350, SM7125, SM7150, SM7150P, SM7225, SM7250, SM7250P, SM8150, SM8150P, SM8250, SM8350, SM8350P, SXR2130, SXR2130P Untrusted Pointer Dereference 2175 https://cpr-zero.checkpoint.com/vulns/cprid-2175/ Qualcomm DSP (Video) Qualcomm chipsets - QCM6125, QCS410, QCS603, QCS605, QCS610, QCS6125, SA6145P, SA6155, SA6155P, SA8155, SA8155P, SDA640, SDA845, SDM640, SDM830, SDM845, SDX50M, SDX55, SDX55M, SM6125, SM6150, SM6250, SM6250P, SM7125, SM7150, SM7150P, SM8150, SM8150P Improper Input Validation 2174 https://cpr-zero.checkpoint.com/vulns/cprid-2174/ Qualcomm DSP (Video) Qualcomm chipsets - QCM6125, QCS410, QCS603, QCS605, QCS610, QCS6125, SA6145P, SA6155, SA6155P, SA8155, SA8155P, SDA640, SDA845, SDM640, SDM830, SDM845, SDX50M, SDX55, SDX55M, SM6125, SM6150, SM6250, SM6250P, SM7125, SM7150, SM7150P, SM8150, SM8150P Untrusted Pointer Dereference 2173 https://cpr-zero.checkpoint.com/vulns/cprid-2173/ Qualcomm HLOS (Secure Key Storage Trustlet) Qualcomm chipsets APQ8009, APQ8016, APQ8017, APQ8053, APQ8076, APQ8096, APQ8096AU, APQ8098, MDM9150, MDM9205, MDM9206, MDM9207C, MDM9607, MDM9640, MDM9650, MDM9655, MSM8905, MSM8909, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, MSM8996, MSM8996AU, MSM8998, QCM2150, QCS605, QM215, Rennell, SC7180, SDA660, SDA845, SDM429, SDM429W, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM670, SDM710, SDM845, SDM850, SM6150, SM7150, SM8150, SXR1130, SXR2130 Buffer Over-Read 2172 https://cpr-zero.checkpoint.com/vulns/cprid-2172/ Samsung Android devices (Secure Storage Trustlet) O(8.x), P(9.0) devices with Qualcomm (SDM660, MSM8998, SDM845, SM8150) chipsets Integer Underflow 2171 https://cpr-zero.checkpoint.com/vulns/cprid-2171/ LG Android devices (Discretix Digital Content Protection Trustlet) Android 7.0, 7.1, 7.2, 8.0, 8.1 Buffer Over-Read 2170 https://cpr-zero.checkpoint.com/vulns/cprid-2170/ LG Android devices Android 7.0, 7.1, 7.2, 8.0, 8.1, 9.0 Potential Phishing Flow in OMACP 2169 https://cpr-zero.checkpoint.com/vulns/cprid-2169/ Samsung Android devices All devices with all OS versions < May 2019 Potential Phishing Flow in OMACP 2168 https://cpr-zero.checkpoint.com/vulns/cprid-2168/ Xiaomi Android devices All Xiaomi GuardProvider versions Man-In-The-Middle attack leads to RCE 2167 https://cpr-zero.checkpoint.com/vulns/cprid-2167/ Outlook, Office <= 16.0.13628.20274 Use After Free 2166 https://cpr-zero.checkpoint.com/vulns/cprid-2166/ Outlook, Office <= 16.0.13628.20274 Stack Based Out of Bound Read 2165 https://cpr-zero.checkpoint.com/vulns/cprid-2165/ Outlook, Office <= 16.0.13628.20274 Use After Free 2164 https://cpr-zero.checkpoint.com/vulns/cprid-2164/ Outlook, Office <= 16.0.13628.20274 Stack Based Out of Bound Read 2163 https://cpr-zero.checkpoint.com/vulns/cprid-2163/ Instagram prior to 128.0.0.26.128 Integer Overflow leading to Heap-Based Buffer Overflow 2162 https://cpr-zero.checkpoint.com/vulns/cprid-2162/ Game Networking Sockets < v1.2.0 Integer-Overflow leading to an Out-of-Bounds Read 2161 https://cpr-zero.checkpoint.com/vulns/cprid-2161/ Game Networking Sockets < v1.2.0 Stack-Based Buffer Overflow 2160 https://cpr-zero.checkpoint.com/vulns/cprid-2160/ Game Networking Sockets < v1.2.0 Heap-Based Buffer Overflow 2159 https://cpr-zero.checkpoint.com/vulns/cprid-2159/ Game Networking Sockets < v1.2.0 Free of memory not on the heap 2158 https://cpr-zero.checkpoint.com/vulns/cprid-2158/ Windows 10 x64 1909 (OS Build 18363.719) 10.0.18362.719 (WinBuild.160101.0800) Out Of Bound Read 2157 https://cpr-zero.checkpoint.com/vulns/cprid-2157/ Windows DNS Server 10.0.17763.1075 (WinBuild.160101.0800) Integer Overflow leading to Heap-Based Buffer Overflow 2156 https://cpr-zero.checkpoint.com/vulns/cprid-2156/ Windows 8.1 x64 6.3 (Build 9600) 6.3.9600.19650 (winblue_ltsb_escrow.200211-0156) Use After Free 2155 https://cpr-zero.checkpoint.com/vulns/cprid-2155/ Windows 10 x64 1909 (OS Build 18363.719) 10.0.18362.719 (WinBuild.160101.0800) Out Of Bound Read and Write 2154 https://cpr-zero.checkpoint.com/vulns/cprid-2154/ Windows 10 x64 1909 10.0.18362.657 (WinBuild.160101.0800) Out Of Bounds Write 2153 https://cpr-zero.checkpoint.com/vulns/cprid-2153/ Windows 10 x64 1909 10.0.18362.657 (WinBuild.160101.0800) Use After Free 2152 https://cpr-zero.checkpoint.com/vulns/cprid-2152/ LearnPress <= 3.2.6.7 SQL Injection 2150 https://cpr-zero.checkpoint.com/vulns/cprid-2150/ LearnDash < 3.1.6 Unauthenticated Second-Order SQL Injection 2149 https://cpr-zero.checkpoint.com/vulns/cprid-2149/ LifterLMS < 3.37.15 Arbitrary File Write 2148 https://cpr-zero.checkpoint.com/vulns/cprid-2148/ Windows 10 x64 1909 10.0.18362.657 (WinBuild.160101.0800) Out Of Bounds Read and Write 2147 https://cpr-zero.checkpoint.com/vulns/cprid-2147/ Apache Guacamole < 1.2.0 Use-After-Free (Dangling Pointer) 2144 https://cpr-zero.checkpoint.com/vulns/cprid-2144/ Apache Guacamole < 1.2.0 Out-of-Bounds Read 2143 https://cpr-zero.checkpoint.com/vulns/cprid-2143/ Apache Guacamole < 1.2.0 Out-of-Bounds Read 2142 https://cpr-zero.checkpoint.com/vulns/cprid-2142/ Apache Guacamole < 1.2.0 Out-of-Bounds Read 2141 https://cpr-zero.checkpoint.com/vulns/cprid-2141/ Azure Stack < Azure Stack 1910 Azure Stack Spoofing Vulnerability 2140 https://cpr-zero.checkpoint.com/vulns/cprid-2140/ Azure App Service < 84.0.2 Heap Based Buffer-Overflow in DWASInterop.dll 2139 https://cpr-zero.checkpoint.com/vulns/cprid-2139/ Windows 10 x64 1903 10.0.18362.113 (WinBuild.160101.0800) Null Pointer Dereference 2138 https://cpr-zero.checkpoint.com/vulns/cprid-2138/ Windows 10 x64 1903 10.0.18362.113 (WinBuild.160101.0800) Null Pointer Dereference 2137 https://cpr-zero.checkpoint.com/vulns/cprid-2137/ Microsoft Windows All versions Path Traversal 2136 https://cpr-zero.checkpoint.com/vulns/cprid-2136/ OpenBSD <= 6.5 Denial of Service 2135 https://cpr-zero.checkpoint.com/vulns/cprid-2135/ Philips Hue Bridge 2.X <= 1935144020 Heap-Based Buffer Overflow 2134 https://cpr-zero.checkpoint.com/vulns/cprid-2134/ Windows 10 x64 1903 10.0.18362.113 (WinBuild.160101.0800) Out-Of-Bounds Read\Write 2133 https://cpr-zero.checkpoint.com/vulns/cprid-2133/ Windows 10 x64 1903 10.0.18362.113 (WinBuild.160101.0800) Use After Free 2132 https://cpr-zero.checkpoint.com/vulns/cprid-2132/ Windows 10 x64 1809 10.0.17763.437 (WinBuild.160101.0800) Out-Of-Bounds Read 2131 https://cpr-zero.checkpoint.com/vulns/cprid-2131/ Canon DSLR Cameras < 1.0.3 Design Error 2130 https://cpr-zero.checkpoint.com/vulns/cprid-2130/ Windows 10 x64 1809 10.0.17763.348 (WinBuild.160101.0800) Use After Free 2129 https://cpr-zero.checkpoint.com/vulns/cprid-2129/ Oracle OutsideIn 8.5.3, 8.5.4 Use After Free 2128 https://cpr-zero.checkpoint.com/vulns/cprid-2128/ Oracle OutsideIn 8.5.3, 8.5.4 Out-of-Bounds Memory Access 2127 https://cpr-zero.checkpoint.com/vulns/cprid-2127/ Oracle OutsideIn 8.5.3, 8.5.4 Out-of-Bounds Memory Access 2126 https://cpr-zero.checkpoint.com/vulns/cprid-2126/ Oracle OutsideIn 8.5.3, 8.5.4 Out-of-Bounds Memory Access 2125 https://cpr-zero.checkpoint.com/vulns/cprid-2125/ Oracle OutsideIn 8.5.3, 8.5.4 Out-of-Bounds Memory Access 2124 https://cpr-zero.checkpoint.com/vulns/cprid-2124/ Oracle OutsideIn 8.5.3, 8.5.4 Out-of-Bounds Memory Access 2123 https://cpr-zero.checkpoint.com/vulns/cprid-2123/ Oracle OutsideIn 8.5.3, 8.5.4 Access Violation 2122 https://cpr-zero.checkpoint.com/vulns/cprid-2122/ Apple iOS \ macOS < iOS 12.3 \ < Mojave 10.14.5 Untrusted pointer dereference leads to Code Execution 2121 https://cpr-zero.checkpoint.com/vulns/cprid-2121/ Apple iOS \ macOS < iOS 12.3 \ < Mojave 10.14.5 Heap-Based Buffer Oveflow leading to RCE 2120 https://cpr-zero.checkpoint.com/vulns/cprid-2120/ Apple iOS \ macOS < iOS 12.3 \ < Mojave 10.14.5 Persistencey and Privilege Escalation 2119 https://cpr-zero.checkpoint.com/vulns/cprid-2119/ Apple iOS \ macOS < iOS 12.3 \ < Mojave 10.14.5 Info Leak 2118 https://cpr-zero.checkpoint.com/vulns/cprid-2118/ Canon DSLR Cameras < 1.0.3 Stack-Based Buffer Overflow 2117 https://cpr-zero.checkpoint.com/vulns/cprid-2117/ Canon DSLR Cameras < 1.0.3 Stack-Based Buffer Overflow 2116 https://cpr-zero.checkpoint.com/vulns/cprid-2116/ Canon DSLR Cameras < 1.0.3 Heap-Based Buffer Overflow 2115 https://cpr-zero.checkpoint.com/vulns/cprid-2115/ Canon DSLR Cameras < 1.0.3 Stack-Based Buffer Overflow 2114 https://cpr-zero.checkpoint.com/vulns/cprid-2114/ Canon DSLR Cameras < 1.0.3 Buffer Overflow over the Globals 2113 https://cpr-zero.checkpoint.com/vulns/cprid-2113/ MuPDF < commit ee80ef5284a38c6de592d83f437c48d1efd89e2d Null Dereference 2112 https://cpr-zero.checkpoint.com/vulns/cprid-2112/ Acrobat Reader DC < 2019.010.20069 Out-Of-Bounds Read 2111 https://cpr-zero.checkpoint.com/vulns/cprid-2111/ Acrobat Reader DC < 2019.010.20069 Double Free 2110 https://cpr-zero.checkpoint.com/vulns/cprid-2110/ MuPDF < commit 33d28276c666f1e58a0e36299aabb8247779a851 Floating Point exception (div by zero) 2109 https://cpr-zero.checkpoint.com/vulns/cprid-2109/ MuPDF < commit 8023beb7d79cbe2e6a37b8ac3be31493b5927cec Stack-Based Buffer Overflow 2108 https://cpr-zero.checkpoint.com/vulns/cprid-2108/ MuPDF < commit b09f19fe7f2771de93d84c96e26a25361dfe0e31 Arbitrary Read/Write 2104 https://cpr-zero.checkpoint.com/vulns/cprid-2104/ MuPDF < commit 8023beb7d79cbe2e6a37b8ac3be31493b5927cec Stack-Based Buffer Overflow 2102 https://cpr-zero.checkpoint.com/vulns/cprid-2102/ Microsoft Office Equation Editor (2007 to 2016) 17081400 Stack based buffer overflow 2100 https://cpr-zero.checkpoint.com/vulns/cprid-2100/ Microsoft Edge (Windows.Data.Pdf.dll) 10.0.17134.48 (WinBuild.160101.0800) Out-Of-Bounds read 2098 https://cpr-zero.checkpoint.com/vulns/cprid-2098/ Acrobat Reader DC 2018.011.20063 Out-Of-Bounds Read 2097 https://cpr-zero.checkpoint.com/vulns/cprid-2097/ Acrobat Reader DC 2018.011.20063 Out-Of-Bound Write 2096 https://cpr-zero.checkpoint.com/vulns/cprid-2096/ Acrobat Reader DC 2018.011.20063 Out-Of-Bounds Read 2095 https://cpr-zero.checkpoint.com/vulns/cprid-2095/ Acrobat Reader DC 2018.011.20063 Out-Of-Bounds Read 2094 https://cpr-zero.checkpoint.com/vulns/cprid-2094/ Acrobat Reader DC 2018.011.20063 Out-Of-Bounds Write 2093 https://cpr-zero.checkpoint.com/vulns/cprid-2093/ Acrobat Reader DC 2018.011.20063 Out-Of-Bounds Write 2092 https://cpr-zero.checkpoint.com/vulns/cprid-2092/ Acrobat Reader DC 2018.011.20063 Out-Of-Bounds Read 2091 https://cpr-zero.checkpoint.com/vulns/cprid-2091/ Acrobat Reader DC 2018.011.20063 Out-Of-Bounds Write 2090 https://cpr-zero.checkpoint.com/vulns/cprid-2090/ Acrobat Reader DC 2018.011.20063 Out-Of-Bounds Write 2089 https://cpr-zero.checkpoint.com/vulns/cprid-2089/ Acrobat Reader DC 2018.011.20063 Out-Of-Bounds Write 2088 https://cpr-zero.checkpoint.com/vulns/cprid-2088/ Acrobat Reader DC 2018.011.20063 Out-Of-Bounds Write 2087 https://cpr-zero.checkpoint.com/vulns/cprid-2087/ Acrobat Reader DC 2018.011.20063 Out-Of-Bounds Read 2086 https://cpr-zero.checkpoint.com/vulns/cprid-2086/ Acrobat Reader DC 2018.011.20063 Out-Of-Bounds Write 2085 https://cpr-zero.checkpoint.com/vulns/cprid-2085/ Acrobat Reader DC 2018.011.20063 Out-Of-Bounds Read 2084 https://cpr-zero.checkpoint.com/vulns/cprid-2084/ Acrobat Reader DC 2018.011.20063 Out-Of-Bounds Write 2083 https://cpr-zero.checkpoint.com/vulns/cprid-2083/ Acrobat Reader DC 2018.011.20063 Out-Of-Bounds Read 2082 https://cpr-zero.checkpoint.com/vulns/cprid-2082/ Acrobat Reader DC 2018.011.20063 stack based overflow 2081 https://cpr-zero.checkpoint.com/vulns/cprid-2081/ Acrobat Reader DC 2018.011.20063 Out-Of-Bounds Write 2080 https://cpr-zero.checkpoint.com/vulns/cprid-2080/ Acrobat Reader DC 2018.011.20063 Out-Of-Bounds Write 2079 https://cpr-zero.checkpoint.com/vulns/cprid-2079/ Acrobat Reader DC 2018.011.20063 Out-Of-Bounds Read 2078 https://cpr-zero.checkpoint.com/vulns/cprid-2078/ Acrobat Reader DC 2018.011.20063 Out-Of-Bounds Read 2077 https://cpr-zero.checkpoint.com/vulns/cprid-2077/ Acrobat Reader DC 2018.011.20063 Out-Of-Bounds Read 2076 https://cpr-zero.checkpoint.com/vulns/cprid-2076/ Acrobat Reader DC 2018.011.20063 Out-Of-Bounds Write 2075 https://cpr-zero.checkpoint.com/vulns/cprid-2075/ Acrobat DC 2018.011.20063 Out-Of-Bounds Read 2074 https://cpr-zero.checkpoint.com/vulns/cprid-2074/ Acrobat DC 2018.011.20063 Out-Of-Bounds Read 2073 https://cpr-zero.checkpoint.com/vulns/cprid-2073/ Acrobat DC 2018.011.20063 Out-Of-Bounds Write 2072 https://cpr-zero.checkpoint.com/vulns/cprid-2072/ Acrobat DC 2018.011.20063 Out-Of-Bounds Write 2071 https://cpr-zero.checkpoint.com/vulns/cprid-2071/ Acrobat DC 2018.011.20063 Out-Of-Bounds Read 2070 https://cpr-zero.checkpoint.com/vulns/cprid-2070/ Acrobat DC 2018.011.20063 Out-Of-Bounds Write 2069 https://cpr-zero.checkpoint.com/vulns/cprid-2069/ Acrobat DC 2018.011.20063 Out-Of-Bounds Write 2068 https://cpr-zero.checkpoint.com/vulns/cprid-2068/ Acrobat DC 2018.011.20063 Out-Of-Bounds Write 2067 https://cpr-zero.checkpoint.com/vulns/cprid-2067/ Acrobat DC 2018.011.20063 Out-Of-Bounds Read 2066 https://cpr-zero.checkpoint.com/vulns/cprid-2066/ Acrobat DC 2018.011.20063 Out-Of-Bounds Read 2065 https://cpr-zero.checkpoint.com/vulns/cprid-2065/ Acrobat DC 2018.011.20058 Out-Of-Bounds Read 2064 https://cpr-zero.checkpoint.com/vulns/cprid-2064/ Acrobat DC 2018.011.20058 Out-Of-Bounds Read 2063 https://cpr-zero.checkpoint.com/vulns/cprid-2063/ Acrobat DC 2018.011.20058 Out-Of-Bounds Write 2062 https://cpr-zero.checkpoint.com/vulns/cprid-2062/ Acrobat Reader DC 2018.011.20058 Out-Of-Bounds Read 2061 https://cpr-zero.checkpoint.com/vulns/cprid-2061/ Acrobat Reader DC 2018.011.20063 Out-Of-Bounds Read 2060 https://cpr-zero.checkpoint.com/vulns/cprid-2060/ Acrobat Reader DC 2018.011.20040 Out-Of-Bounds Write 2059 https://cpr-zero.checkpoint.com/vulns/cprid-2059/ Acrobat Reader DC 2018.011.20040 Out-Of-Bounds Read 2058 https://cpr-zero.checkpoint.com/vulns/cprid-2058/ Acrobat Reader DC 2018.011.20040 Out-Of-Bounds Write 2057 https://cpr-zero.checkpoint.com/vulns/cprid-2057/ Acrobat Reader DC 2018.011.20040 Out-Of-Bounds Read 2056 https://cpr-zero.checkpoint.com/vulns/cprid-2056/ Acrobat Reader DC 2018.011.20040 Out of bound read 2055 https://cpr-zero.checkpoint.com/vulns/cprid-2055/ Acrobat Reader DC 2018.011.20040 Out-Of-Bounds Write 2054 https://cpr-zero.checkpoint.com/vulns/cprid-2054/ Acrobat Reader DC 2018.011.20040 Out-Of-Bounds Write 2053 https://cpr-zero.checkpoint.com/vulns/cprid-2053/ Acrobat Reader DC 2018.011.20040 Out-Of-Bounds Write 2052 https://cpr-zero.checkpoint.com/vulns/cprid-2052/ Acrobat Reader DC 2018.011.20040 Out-Of-Bounds Write 2051 https://cpr-zero.checkpoint.com/vulns/cprid-2051/ Acrobat Reader DC 2018.011.20040 Out-Of-Bounds Read 2050 https://cpr-zero.checkpoint.com/vulns/cprid-2050/ Acrobat Reader DC 2018.011.20040 Read after free 2049 https://cpr-zero.checkpoint.com/vulns/cprid-2049/ Acrobat Reader DC 2018.011.20040 Out-Of-Bounds Write 2048 https://cpr-zero.checkpoint.com/vulns/cprid-2048/ Acrobat Reader DC 2018.011.20040 Out-Of-Bounds Read 2047 https://cpr-zero.checkpoint.com/vulns/cprid-2047/ Acrobat Reader DC 2018.011.20038 Out-Of-Bounds Read 2046 https://cpr-zero.checkpoint.com/vulns/cprid-2046/ Foxit Quick PDF < 16.12 Out of Bounds Memory Access 2045 https://cpr-zero.checkpoint.com/vulns/cprid-2045/ Foxit Quick PDF < 16.12 Out of Bounds Memory Access 2044 https://cpr-zero.checkpoint.com/vulns/cprid-2044/ Foxit Quick PDF < 16.12 Stack Overflow 2043 https://cpr-zero.checkpoint.com/vulns/cprid-2043/ WinRAR < 5.7 Protection Mechanism Failure 2042 https://cpr-zero.checkpoint.com/vulns/cprid-2042/ WinRAR < 5.7 Absolute Path Traversal 2039 https://cpr-zero.checkpoint.com/vulns/cprid-2039/ WinRAR < 5.6.1 Use After Free 2038 https://cpr-zero.checkpoint.com/vulns/cprid-2038/ WinRAR < 5.6.1 Out-Of-Bound Write 2037 https://cpr-zero.checkpoint.com/vulns/cprid-2037/ WinRAR < 5.6.1 Out-Of-Bound Write 2036 https://cpr-zero.checkpoint.com/vulns/cprid-2036/ libvpx versions prior to and including 1.7.0 Use-After-Free 2035 https://cpr-zero.checkpoint.com/vulns/cprid-2035/ rdesktop <= v1.8.3 Globals-Based Buffer Overflow 2034 https://cpr-zero.checkpoint.com/vulns/cprid-2034/ rdesktop <= v1.8.3 Integer Underflow leading to Heap-Based Buffer Overflow 2033 https://cpr-zero.checkpoint.com/vulns/cprid-2033/ rdesktop <= v1.8.3 Integer Underflow leading to Heap-Based Buffer Overflow 2032 https://cpr-zero.checkpoint.com/vulns/cprid-2032/ rdesktop <= v1.8.3 Integer-Underflow leading to Heap-Based Buffer Overflow 2031 https://cpr-zero.checkpoint.com/vulns/cprid-2031/ rdesktop <= v1.8.3 Out-Of-Bounds Read 2030 https://cpr-zero.checkpoint.com/vulns/cprid-2030/ rdesktop <= v1.8.3 Integer-Overflow leading to Heap-Based Buffer Overflow 2029 https://cpr-zero.checkpoint.com/vulns/cprid-2029/ rdesktop <= v1.8.3 Out-Of-Bounds Read 2027, 2028 https://cpr-zero.checkpoint.com/vulns/cprid-2027,%202028/ rdesktop <= v1.8.3 Integer Signedness Error 2025, 2026 https://cpr-zero.checkpoint.com/vulns/cprid-2025,%202026/ rdesktop <= v1.8.3 Heap-Based Buffer Over-Read leading to Information Leak 2024 https://cpr-zero.checkpoint.com/vulns/cprid-2024/ rdesktop <= v1.8.3 Heap-Based Buffer Overflow 2023 https://cpr-zero.checkpoint.com/vulns/cprid-2023/ rdesktop <= v1.8.3 Out-Of-Bounds Read 2022 https://cpr-zero.checkpoint.com/vulns/cprid-2022/ rdesktop <= v1.8.3 Out-Of-Bounds Read leading to information leak 2021 https://cpr-zero.checkpoint.com/vulns/cprid-2021/ rdesktop <= v1.8.3 Heap-Based Buffer Overflow 2020 https://cpr-zero.checkpoint.com/vulns/cprid-2020/ rdesktop <= v1.8.3 Out-Of-Bounds Read 2019 https://cpr-zero.checkpoint.com/vulns/cprid-2019/ rdesktop <= v1.8.3 Integer-Overflow leading to Out-Of-Bounds Write 2018 https://cpr-zero.checkpoint.com/vulns/cprid-2018/ rdesktop <= v1.8.3 Integer-Overflow leading to Out-Of-Bounds Write 2017 https://cpr-zero.checkpoint.com/vulns/cprid-2017/ rdesktop <= v1.8.3 Heap-Based Buffer Overflow 2016 https://cpr-zero.checkpoint.com/vulns/cprid-2016/ rdesktop <= v1.8.3 Out-Of-Bounds Read 2015 https://cpr-zero.checkpoint.com/vulns/cprid-2015/ rdesktop <= v1.8.3 Out-Of-Bounds Read leading to information leak 2014 https://cpr-zero.checkpoint.com/vulns/cprid-2014/ MSTSC.exe all versions (no patch available) Black List Bypass 2013 https://cpr-zero.checkpoint.com/vulns/cprid-2013/ MSTSC.exe < 09-Jul-19 Path Traversal 2012 https://cpr-zero.checkpoint.com/vulns/cprid-2012/ FreeRDP < 2.0.0-rc4 Out-Of-Bounds Reads 2010, 2011 https://cpr-zero.checkpoint.com/vulns/cprid-2010,%202011/ FreeRDP < 2.0.0-rc4 Out-Of-Bounds Write 2009 https://cpr-zero.checkpoint.com/vulns/cprid-2009/ FreeRDP < 2.0.0-rc4 Integer Overflow leading to a Heap-Based Buffer Overflow 2008 https://cpr-zero.checkpoint.com/vulns/cprid-2008/ FreeRDP < 2.0.0-rc4 Integer Truncation leading to RCE 2007 https://cpr-zero.checkpoint.com/vulns/cprid-2007/ FreeRDP < 2.0.0-rc4 Heap-Based Buffer Overflow 2006 https://cpr-zero.checkpoint.com/vulns/cprid-2006/ FreeRDP < 2.0.0-rc4 Heap-Based Buffer Overflow 2005 https://cpr-zero.checkpoint.com/vulns/cprid-2005/ HP InkJet Printers Almost every Inkjet printer up to 2018 Globals Buffer Overflow 2003 https://cpr-zero.checkpoint.com/vulns/cprid-2003/ HP InkJet Printers Almost every Inkjet printer up to 2018 Stack-Based Buffer Overflow leading to RCE 2002 https://cpr-zero.checkpoint.com/vulns/cprid-2002/ Linux Kernel 3.4 and up to and including 4.15 Integer Overflow leading to Local Privilege Escalation 2001 https://cpr-zero.checkpoint.com/vulns/cprid-2001/ Xiaomi Android devices All Xiaomi Browser versions Man-In-The-Disk attack leads to LPE 1030 https://cpr-zero.checkpoint.com/vulns/cprid-1030/ Multiple PDF Readers Acrobat Reader DC 2018.011.20038 and earlier versions, 2017.011.30079 and earlier versions, 2015.006.30417 and earlier versions; Foxit Reader < version 9.1 NTLMv2 hash leakage leads to credential theft 1029 https://cpr-zero.checkpoint.com/vulns/cprid-1029/ LG Android devices Android 4.4, 5.0, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0 Man-In-The-Middle attack due to path-traversal vulnerability leads to RCE 1028 https://cpr-zero.checkpoint.com/vulns/cprid-1028/ LG Android devices Android 6.0, 6.0.1, 7.0, 7.1, 7.2, 8.0, 8.1 Man-In-The-Disk attack leads to LPE 1027 https://cpr-zero.checkpoint.com/vulns/cprid-1027/ LG Android devices Android 6.0, 6.0.1, 7.0, 7.1, 7.2, 8.0, 8.1 Man-In-The-Disk attack leads to LPE 1026 https://cpr-zero.checkpoint.com/vulns/cprid-1026/ Android devices Google Text-to-speech <= 3.14.9 Man-In-The-Disk attack leads to DoS 1025 https://cpr-zero.checkpoint.com/vulns/cprid-1025/ Android devices Google Voice Typing <= 7.21.23 Man-In-The-Disk attack leads to DoS 1024 https://cpr-zero.checkpoint.com/vulns/cprid-1024/ Nexus 5, 5X, 6, 6P, and 7 (2013) devices Qualcomm GPU driver before 2016-08-05 LPE 1023 https://cpr-zero.checkpoint.com/vulns/cprid-1023/ Android devices based on Qualcomm chipset Linux kernel <= 3.19.3 LPE 1022 https://cpr-zero.checkpoint.com/vulns/cprid-1022/ Nexus 5X and 6P devices Qualcomm GPU driver before 2016-07-05 Use after free due to race conditions leads to LPE 1021 https://cpr-zero.checkpoint.com/vulns/cprid-1021/ Android devices based on Qualcomm chipset Linux kernel <= 3.19.3 Race condition flaw leads to LPE 1020 https://cpr-zero.checkpoint.com/vulns/cprid-1020/ TrendMicro-Premium10 8.0, 8.0.2063, 10.0, 10.0.1186 DOS - lack of usermod-input validation of the IOCTL (I/O Control Code) 1019 https://cpr-zero.checkpoint.com/vulns/cprid-1019/ Palo Alto Networks PAN-OS < 7.0.8 Cross-site scripting 1018 https://cpr-zero.checkpoint.com/vulns/cprid-1018/ Palo Alto Networks PAN-OS before 5.0.19, 5.1.x before 5.1.12, 6.0.x before 6.0.14, 6.1.x before 6.1.12, and 7.0.x before 7.0.8 Local privilege escalation 1017 https://cpr-zero.checkpoint.com/vulns/cprid-1017/ Cisco FireSIGHT 5.4.0 through 6.0.1 Bypass malware protection 1016 https://cpr-zero.checkpoint.com/vulns/cprid-1016/ iOS iOS 9 Information Disclosure 1015 https://cpr-zero.checkpoint.com/vulns/cprid-1015/ Windows Deployment Services All windows servers since 2008 Use-After-Free Leads to RCE 1011 https://cpr-zero.checkpoint.com/vulns/cprid-1011/ Eclipse < 4.7 XML External Entity attack (XXE) 1010 https://cpr-zero.checkpoint.com/vulns/cprid-1010/ Eclipse < 4.7 XML External Entity attack (XXE) 1009 https://cpr-zero.checkpoint.com/vulns/cprid-1009/ Kodi <= Krypton 17.2-RC1 Directory Traversal leading to RCE 1008 https://cpr-zero.checkpoint.com/vulns/cprid-1008/ VLC <= 2.2.5 Heap out-of-bound read 1007 https://cpr-zero.checkpoint.com/vulns/cprid-1007/ VLC <= 2.2.5 Heap out-of-bound read 1006 https://cpr-zero.checkpoint.com/vulns/cprid-1006/ VLC <= 2.2.5 Potential heap based buffer leads to RCE 1005 https://cpr-zero.checkpoint.com/vulns/cprid-1005/ VLC <= 2.2.5 Heap Out-of-Bound Read leads to DoS 1004 https://cpr-zero.checkpoint.com/vulns/cprid-1004/ PHP 7.0.11 PHP-7 unserialize Use of Uninitialized Value 1003 https://cpr-zero.checkpoint.com/vulns/cprid-1003/ PHP 7.1.0RC1 PHP-7 unserialize UAF 1002 https://cpr-zero.checkpoint.com/vulns/cprid-1002/ PHP < 5.6.26 PHP unserialize remote DoS 1001 https://cpr-zero.checkpoint.com/vulns/cprid-1001/