CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.23)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
CVE-2017-0464 is a privilege escalation vulnerability in the Qualcomm Wi-Fi driver that could allow a local malicious application to execute arbitrary code within the kernel context. This issue is rated as High because it first requires compromising a privileged process.
CVE-2017-0463 describes an elevation of privilege vulnerability in the Qualcomm networking driver that allows a local malicious application to execute arbitrary code within the kernel context. This issue is rated as High because it requires compromising a privileged process first.
CVE-2017-0460 is a privilege escalation vulnerability in the Qualcomm networking driver that allows a local malicious application to execute arbitrary code within the kernel context. This issue is rated as High because it requires compromising a privileged process first.
CVE-2017-0458 is a privilege escalation vulnerability in the Qualcomm camera driver that could allow a local malicious application to execute arbitrary code within the kernel context. This issue is rated as High because it first requires compromising a privileged process.
CVE-2017-0457 describes an elevation of privilege vulnerability in the Qualcomm ADSPRPC driver that allows a local malicious application to execute arbitrary code within the kernel context. This issue is rated as High because it requires compromising a privileged process first.
CVE-2017-0456 describes an elevation of privilege vulnerability in the Qualcomm IPA driver that allows a local malicious application to execute arbitrary code within the kernel context. This issue is rated as High because it requires compromising a privileged process first.
An information disclosure vulnerability in the Qualcomm bootloader could help to enable a local malicious application to execute arbitrary code within the context of the bootloader. This issue is rated as High because it is a general bypass for a bootloader level defense in depth.
CVE-2017-0453 describes an elevation of privilege vulnerability in the Qualcomm Wi-Fi driver that allows a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process.
CVE-2017-0338 describes an elevation of privilege vulnerability in the NVIDIA GPU driver that allows a local malicious application to execute arbitrary code within the kernel context. This issue is rated as Critical due to the potential for permanent device compromise.
CVE-2017-0337 is a privilege escalation vulnerability in the NVIDIA GPU driver that allows a local malicious application to execute arbitrary code within the kernel context. This issue is rated as Critical due to the potential for permanent device compromise.
CVE-2017-0335 is a privilege escalation vulnerability in the NVIDIA GPU driver that allows a local malicious application to execute arbitrary code within the kernel context. This issue is rated as Critical due to the potential for permanent device compromise.
CVE-2017-0333 describes an elevation of privilege vulnerability in the NVIDIA GPU driver that allows a local malicious application to execute arbitrary code within the kernel context. This issue is rated as Critical due to the potential for permanent device compromise.
CVE-2017-0307 describes an elevation of privilege vulnerability in the NVIDIA GPU driver that allows a local malicious application to execute arbitrary code within the kernel context. This issue is rated as Critical due to the potential for permanent device compromise.
CVE-2017-0306 describes an elevation of privilege vulnerability in the NVIDIA GPU driver that allows a local malicious application to execute arbitrary code within the kernel context. This issue is rated as Critical due to the potential for permanent device compromise.
A vulnerability in the Qualcomm GPU driver allows a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise.
CVE-2016-8417 is a vulnerability in the Qualcomm camera driver that allows a local malicious application to execute arbitrary code within the kernel context. This issue is rated as Moderate because it requires compromising a privileged process and is mitigated by current platform configurations.
A race condition in the Linux kernel through version 4.10.1 in drivers/tty/n_hdlc.c allows local users to gain privileges or cause a denial of service (double free) by setting the HDLC line discipline.
A race condition in the L2TPv3 IP Encapsulation feature in the Linux kernel before 4.8.14 allows local users to gain privileges or cause a denial of service (use-after-free) by making multiple bind system calls without properly ascertaining whether a socket has the SOCK_ZAPPED status.
The RSA-CRT implementation in the Intel QuickAssist Technology (QAT) Engine for OpenSSL versions prior to 0.5.19 may allow remote attackers to obtain private RSA keys by conducting a Lenstra side-channel attack.
IBM QRadar version 7.2 could allow a remote attacker to consume all resources on the server due to not properly restricting the size or amount of resources requested.