| Out-of-bounds Write | |
| Improper Restriction of Rendered UI Layers or Frames | |
| Use After Free | |
| Use After Free | |
| Out-of-bounds Write | |
| CVE-2022-22749 | |
| CVE-2022-28284 | |
| Improper Restriction of Rendered UI Layers or Frames | |
| Use After Free | |
| CVE-2022-28287 | |
| CVE-2022-22762 | |
| Cross-site Scripting (XSS) | |
| Race Condition | |
| Out-of-bounds Write | |
| CVE-2022-22741 | |
| Use After Free | |
| Information Exposure | |
| Cleartext Transmission of Sensitive Information | |
| Improper Restriction of Excessive Authentication Attempts | |
| Out-of-bounds Write | |
| Out-of-bounds Write | |
| Out-of-bounds Read | |
| Incorrect Authorization | |
| Use After Free | |
| CVE-2021-29974 | |
| CVE-2022-22743 | |
| CVE-2022-22750 | |
| Race Condition | |
| Inefficient Regular Expression Complexity | |
| Use After Free | |
| Missing Initialization of Resource | |
| Incorrect Conversion between Numeric Types | |
| Insufficient Verification of Data Authenticity | |
| Race Condition | |
| Use After Free | |
| Improper Certificate Validation | |
| Exposure of Resource to Wrong Sphere | |
| Time-of-check Time-of-use (TOCTOU) | |
| CVE-2021-23978 | |
| Use After Free | |
| Time-of-check Time-of-use (TOCTOU) | |
| CVE-2022-28283 | |
| Race Condition | |
| Reachable Assertion | |
| Out-of-bounds Write | |
| CVE-2021-23957 | |
| Information Exposure | |
| Out-of-bounds Write | |
| Origin Validation Error | |
| CVE-2022-22745 | |
| Information Exposure | |
| CVE-2022-22761 | |
| Use After Free | |
| Time-of-check Time-of-use (TOCTOU) | |
| CVE-2021-23956 | |
| Cross-site Scripting (XSS) | |
| Use After Free | |
| Incorrect Type Conversion or Cast | |
| Use After Free | |
| Improper Restriction of Rendered UI Layers or Frames | |
| CVE-2022-26384 | |
| Exposure of Resource to Wrong Sphere | |
| CVE-2022-26383 | |
| Improper Encoding or Escaping of Output | |
| Race Condition | |
| Out-of-bounds Write | |
| Out-of-bounds Write | |
| CVE-2021-43540 | |
| Operation on a Resource after Expiration or Release | |
| XML Injection | |
| CVE-2021-29993 | |
| Out-of-bounds Read | |
| CVE-2021-29984 | |
| Out-of-bounds Write | |
| CVE-2022-22748 | |
| Uncontrolled Search Path Element | |
| Excessive Iteration | |
| Incorrect Authorization | |
| Information Exposure | |
| Incorrect Resource Transfer Between Spheres | |
| CVE-2021-38510 | |
| Information Exposure | |
| CVE-2020-26973 | |
| CVE-2020-26975 | |
| CVE-2020-26964 | |
| Out-of-Bounds | |
| Improper Restriction of Rendered UI Layers or Frames | |
| Out-of-bounds Write | |
| Out-of-Bounds | |
| Race Condition | |
| Use After Free | |
| Origin Validation Error | |
| Improper Resource Shutdown or Release | |
| CVE-2020-26961 | |
| CVE-2022-22739 | |
| Improper Initialization | |
| Exposure of Resource to Wrong Sphere | |
| CVE-2022-22756 | |
| CVE-2020-15683 | |
| CVE-2021-23996 | |
| CVE-2022-22759 | |
| Information Exposure | |
| Improper Privilege Management | |
| Improper Restriction of Rendered UI Layers or Frames | |
| Open Redirect | |
| Out-of-bounds Write | |
| Integer Overflow or Wraparound | |
| CVE-2021-23974 | |
| Improper Restriction of Rendered UI Layers or Frames | |
| Origin Validation Error | |
| Out-of-Bounds | |
| Incorrect Calculation | |
| Origin Validation Error | |
| CVE-2021-29983 | |
| CVE-2021-43541 | |
| CVE-2021-23971 | |
| Use After Free | |
| CVE-2021-38500 | |
| Cross-site Scripting (XSS) | |
| Out-of-Bounds | |
| Information Exposure | |
| Authentication Bypass | |
| Origin Validation Error | |
| CVE-2021-23969 | |
| Missing Release of Resource after Effective Lifetime | |
| CVE-2021-38501 | |
| Missing Initialization of Resource | |
| CVE-2021-38499 | |
| Loop with Unreachable Exit Condition ('Infinite Loop') | |
| CVE-2021-23962 | |
| CVE-2020-15665 | |
| Access of Resource Using Incompatible Type ('Type Confusion') | |
| Interpretation Conflict | |
| Use After Free | |
| CVE-2020-15653 | |
| CVE-2021-29981 | |
| CVE-2021-38494 | |
| CVE-2021-23961 | |
| Improper Preservation of Permissions | |
| Information Exposure | |
| HTTP Request Smuggling | |
| Out-of-Bounds | |
| CVE-2021-23972 | |
| CVE-2021-38492 | |
| Exposure of Resource to Wrong Sphere | |
| CVE-2020-26978 | |
| Out-of-Bounds | |
| Out-of-Bounds | |
| CVE-2021-38491 | |
| Arbitrary Argument Injection | |
| Improper Restriction of Rendered UI Layers or Frames | |
| Use After Free | |
| Out-of-bounds Write | |
| Out-of-bounds Write | |
| Out-of-Bounds | |
| Use After Free | |
| CVE-2021-29975 | |
| Information Exposure | |
| Externally Controlled Reference to a Resource in Another Sphere | |
| CVE-2020-26977 | |
| Out-of-Bounds | |
| CVE-2020-35111 | |
| Out-of-bounds Write | |
| Incorrect Authorization | |
| Insufficient Verification of Data Authenticity | |
| CVE-2021-24000 | |
| Missing Authorization | |
| Out-of-bounds Write | |
| Out-of-Bounds | |
| Use After Free | |
| Operation on a Resource after Expiration or Release | |
| Out-of-bounds Write | |
| Improper Restriction of Rendered UI Layers or Frames | |
| Cross-site Scripting (XSS) | |
| Use After Free | |
| Missing Authorization | |
| Use After Free | |
| Out-of-Bounds | |
| Cross-site Scripting (XSS) | |
| Use After Free | |
| Out-of-Bounds | |
| Release of Invalid Pointer or Reference | |
| Improper Locking | |
| Use After Free | |
| Out-of-bounds Write | |
| CVE-2020-6514 | |
| Buffer Overflow | |
| Out-of-Bounds | |
| Improper Restriction of Rendered UI Layers or Frames | |
| Inadequate Encryption Strength | |
| Release of Invalid Pointer or Reference | |
| Cross-site Scripting (XSS) | |
| CVE-2020-26963 | |
| Cross-site Scripting (XSS) | |
| CVE-2021-23960 | |
| Uncontrolled Search Path Element | |
| Uncontrolled Search Path Element | |
| Out-of-bounds Read | |
| Improper Check for Unusual or Exceptional Conditions | |
| Use After Free | |
| CVE-2020-26976 | |
| Use After Free | |
| CVE-2020-26966 | |
| CVE-2020-26967 | |
| Out-of-Bounds | |
| Use After Free | |
| Open Redirect | |
| Use After Free | |
| Out-of-bounds Write | |
| Insufficient Verification of Data Authenticity | |
| CVE-2020-35112 | |
| Use After Free | |
| Out-of-bounds Write | |
| Out-of-bounds Write | |
| Arbitrary Code Injection | |
| Race Condition | |
| Access of Resource Using Incompatible Type ('Type Confusion') | |
| Out-of-bounds Write | |
| Out-of-bounds Write | |
| Improper Certificate Validation | |
| Incorrect Default Permissions | |
| CVE-2020-26954 | |
| Reliance on Cookies without Validation and Integrity Checking | |
| CVE-2020-16012 | |
| Improper Cross-boundary Removal of Sensitive Data | |
| Out-of-bounds Read | |
| CVE-2020-15681 | |
| Information Exposure | |
| CVE-2020-15680 | |
| Unrestricted Upload of File with Dangerous Type | |
| Improper Input Validation | |
| Information Exposure | |
| Release of Invalid Pointer or Reference | |
| Out-of-Bounds | |
| Improper Input Validation | |
| CVE-2020-15684 | |
| Incorrect Authorization | |
| Use of a Broken or Risky Cryptographic Algorithm | |
| Improper Privilege Management | |
| CVE-2020-6829 | |
| Out-of-Bounds | |
| Out-of-bounds Write | |
| Improper Privilege Management | |
| Origin Validation Error | |
| Out-of-Bounds | |
| Out-of-Bounds | |
| Out-of-Bounds | |
| Incorrect Default Permissions | |
| Out-of-bounds Read | |
| Improper Input Validation | |
| Double Free | |
| Arbitrary Code Injection | |
| Information Exposure | |
| Use of a Broken or Risky Cryptographic Algorithm | |
| CVE-2020-12409 | |
| Use After Free | |
| CVE-2020-6813 | |
| Out-of-Bounds | |
| Improper Input Validation | |
| Deserialization of Untrusted Data | |
| Authentication Bypass | |
| Buffer Overflow | |
| Authentication Bypass | |
| Session Fixation | |
| Out-of-bounds Write | |
| Improper Input Validation | |
| CVE-2022-34479 | |
| CVE-2022-34482 | |
| Buffer Overflow | |
| CVE-2022-34478 | |
| Information Exposure | |
| Out-of-bounds Write | |
| Incorrect Default Permissions | |
| Out-of-Bounds | |
| Out-of-bounds Write | |
| Out-of-bounds Write | |
| Use After Free | |
| CVE-2023-5727 | |
| Use After Free | |
| Cross-site Scripting (XSS) | |
| Information Exposure | |
| Information Exposure | |
| Improper Authentication | |
| Out-of-bounds Write | |
| CVE-2022-36317 | |
| CVE-2022-31739 | |
| CVE-2023-5723 | |
| CVE-2023-5725 | |
| Out-of-bounds Write | |
| Out-of-bounds Write | |
| CVE-2022-36315 | |
| CVE-2022-34468 | |
| CVE-2022-36319 | |
| CVE-2022-29914 | |
| Access of Resource Using Incompatible Type ('Type Confusion') | |
| Uncontrolled Search Path Element | |
| Out-of-Bounds | |
| Race Condition | |
| Cross-site Scripting (XSS) | |
| Arbitrary Code Injection | |
| Open Redirect | |
| Out-of-Bounds | |
| Out-of-bounds Write | |
| Cross-site Scripting (XSS) | |
| Cross-site Scripting (XSS) | |
| CVE-2022-34476 | |
| Use After Free | |
| Use After Free | |
| Out-of-bounds Read | |
| Information Exposure | |
| Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') | |
| CVE-2022-34477 | |
| Use of Uninitialized Resource | |
| Cross-site Scripting (XSS) | |
| CVE-2022-31736 | |
| Use After Free | |
| Open Redirect | |
| Access of Resource Using Incompatible Type ('Type Confusion') | |
| CVE-2023-5724 | |
| Race Condition | |
| Improper Certificate Validation | |
| CVE-2022-29916 | |
| Cross-site Scripting (XSS) | |
| CVE-2022-31742 | |
| Out-of-bounds Write | |
| Use After Free | |
| Cross-site Scripting (XSS) | |
| Improper Input Validation | |
| Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') | |
| Origin Validation Error | |
| CVE-2023-5729 | |
| Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') | |
| Out-of-bounds Read | |
| Buffer Overflow | |
| Open Redirect | |
| Improper Authentication | |
| CVE-2023-5728 | |
| Improper Restriction of Rendered UI Layers or Frames | |
| CVE-2022-34471 | |
| Out-of-bounds Write | |
| Access of Uninitialized Pointer | |
| CVE-2023-5726 | |
| Improper Restriction of Rendered UI Layers or Frames | |
| Integer Overflow or Wraparound | |
| Open Redirect | |
| CVE-2022-34472 | |
| Out-of-bounds Write | |
| CVE-2022-34483 | |
| CVE-2022-29915 | |
| Improper Validation of Array Index | |
| Cross-site Scripting (XSS) | |
| Use After Free | |
| Authentication Bypass | |
| Cross-site Scripting (XSS) | |
| Out-of-bounds Read | |
| CVE-2022-31740 | |
| CVE-2022-31748 | |
| Incorrect Default Permissions | |
