CPR-Zero
Check Point Research Vulnerability Repository
In the following page you can find vulnerabilities that were discovered by Check Point Research.
These bugs are publicly visible only after a 90-day responsible disclosure standard or once a patch has been released.
| CVE / CPR-ID | Title | Upload Date |
|---|---|---|
| CVE-2025-33053 | Internet Shortcut Files (.URL) | External control of file name or path in Internet Shortcut Files allows an unauthorized attacker to execute code over a network. | 07-July-25 |
| CVE-2024-43504 | Microsoft Excel | Use after Free | 10-Oct-24 |
| CVE-2024-38112 | Microsoft Windows | Logic flaw | 23-Jul-24 |
| CVE-2024-21413 | Microsoft Outlook | Logic flaw | 26-Feb-24 |
| CVE-2023-28302 | Microsoft Message Queuing | Out Of Bound Read (kernel level denial of service) | 05-Jun-23 |
| CVE-2023-21769 | Microsoft Message Queuing | Out Of Bound Read (application level denial of service) | 05-Jun-23 |
| CVE-2023-21554 | Microsoft Message Queuing | Out Of Bound Write | 05-Jun-23 |
| CVE-2022-23748 | Audinate Dante Application Library for Windows | DLL Side Loading | 16-Nov-22 |
| CVE-2020-14125 | Xiaomi Trusted Execution Environment | Classic Buffer Overflow | 18-Aug-22 |
| CVE-2022-23747 | Sony OMX audio decoder | Classic Buffer Overflow | 17-Aug-22 |
| CVE-2022-20210 | Unisoc radio modem | Integer Underflow | 13-Jun-22 |
| CVE-2021-30351 | Qualcomm OMX audio decoder | Classic Buffer Overflow | 31-May-22 |
| CVE-2021-0675 | MediaTek OMX audio decoder | Improper restriction of operations within the bounds of a memory buffer | 31-May-22 |
| CVE-2021-0674 | MediaTek OMX audio decoder | Improper input validation | 31-May-22 |
| CVE-2021-0673 | MediaTek Audio Aurisys HAL | Improper Input Validation | 08-Dec-21 |
| CVE-2021-0663 | Mediatek Audio DSP | Heap-based Buffer Overflow | 08-Dec-21 |
| CVE-2021-0662 | Mediatek Audio DSP | Heap-based Buffer Overflow | 08-Dec-21 |
| CVE-2021-0661 | Mediatek Audio DSP | Heap-based Buffer Overflow | 08-Dec-21 |
| CVE-2021-30354 | Amazon Kindle e-reader | Improper Privilege Management | 19-Aug-21 |
| CVE-2021-30354 | Amazon Kindle e-reader | Integer Overflow leading to Heap-based Buffer Overflow | 19-Aug-21 |
| CVE-2020-11292 | Qualcomm Data Modem | Buffer Overflow | 06-May-21 |
| CVE-2020-11209 | Qualcomm DSP | Improper Authorization | 06-May-21 |
| CVE-2020-11208 | Qualcomm DSP | Integer Underflow | 06-May-21 |
| CVE-2020-11207 | Qualcomm DSP (ComputerVision) | Buffer Overflow | 06-May-21 |
| CVE-2020-11206 | Qualcomm DSP (ComputerVision) | Untrusted Pointer Dereference | 06-May-21 |
| CVE-2020-11202 | Qualcomm DSP (Video) | Improper Input Validation | 06-May-21 |
| CVE-2020-11201 | Qualcomm DSP (Video) | Untrusted Pointer Dereference | 06-May-21 |
| CVE-2019-10574 | Qualcomm HLOS (Secure Key Storage Trustlet) | Buffer Over-Read | 18-Apr-21 |
| CPRID-2171 | Samsung Android devices (Secure Storage Trustlet) | Integer Underflow | 18-Apr-21 |
| CPRID-2170 | LG Android devices (Discretix Digital Content Protection Trustlet) | Buffer Over-Read | 18-Apr-21 |
| CPRID-2169 | LG Android devices | Potential Phishing Flow in OMACP | 18-Apr-21 |
| CPRID-2168 | Samsung Android devices | Potential Phishing Flow in OMACP | 18-Apr-21 |
| CPRID-2167 | Xiaomi Android devices | Man-In-The-Middle attack leads to RCE | 18-Apr-21 |
| CVE-2021-31179 | Outlook, Office | Use After Free | 22-Jun-21 |
| CVE-2021-31178 | Outlook, Office | Stack Based Out of Bound Read | 22-Jun-21 |
| CVE-2021-31939 | Outlook, Office | Use After Free | 22-Jun-21 |
| CVE-2021-31174 | Outlook, Office | Stack Based Out of Bound Read | 22-Jun-21 |
| CVE-2020-1895 | Instagram | Integer Overflow leading to Heap-Based Buffer Overflow | 10-Dec-20 |
| CVE-2020-6019 | Game Networking Sockets | Integer-Overflow leading to an Out-of-Bounds Read | 10-Dec-20 |
| CVE-2020-6018 | Game Networking Sockets | Stack-Based Buffer Overflow | 10-Dec-20 |
| CVE-2020-6017 | Game Networking Sockets | Heap-Based Buffer Overflow | 10-Dec-20 |
| CVE-2020-6016 | Game Networking Sockets | Free of memory not on the heap | 10-Dec-20 |
| CVE-2020-1510 | Windows 10 x64 1909 (OS Build 18363.719) | Out Of Bound Read | 29-Sep-20 |
| CVE-2020-1350 | Windows DNS Server | Integer Overflow leading to Heap-Based Buffer Overflow | 21-Sep-20 |
| CVE-2020-1310 | Windows 8.1 x64 6.3 (Build 9600) | Use After Free | 14-Sep-20 |
| CVE-2020-1247 | Windows 10 x64 1909 (OS Build 18363.719) | Out Of Bound Read and Write | 03-Sep-20 |
| CVE-2020-1054 | Windows 10 x64 1909 | Out Of Bounds Write | 14-May-20 |
| CVE-2020-1143 | Windows 10 x64 1909 | Use After Free | 14-May-20 |
| CVE-2020-6010 | LearnPress | SQL Injection | 04-Aug-20 |
| CVE-2020-6009 | LearnDash | Unauthenticated Second-Order SQL Injection | 04-Aug-20 |
| CVE-2020-6008 | LifterLMS | Arbitrary File Write | 04-Aug-20 |
| CVE-2020-0791 | Windows 10 x64 1909 | Out Of Bounds Read and Write | 20-Apr-20 |
| CVE-2020-9498 | Apache Guacamole | Use-After-Free (Dangling Pointer) | 06-Jul-20 |
| CVE-2020-9497 (v3) | Apache Guacamole | Out-of-Bounds Read | 06-Jul-20 |
| CVE-2020-9497 (v2) | Apache Guacamole | Out-of-Bounds Read | 06-Jul-20 |
| CVE-2020-9497 (v1) | Apache Guacamole | Out-of-Bounds Read | 06-Jul-20 |
| CVE-2019-1234 | Azure Stack | Azure Stack Spoofing Vulnerability | 04-Feb-20 |
| CVE-2019-1372 | Azure App Service | Heap Based Buffer-Overflow in DWASInterop.dll | 04-Feb-20 |
| CVE-2019-1286 | Windows 10 x64 1903 | Null Pointer Dereference | 25-Dec-19 |
| CVE-2019-1256 | Windows 10 x64 1903 | Null Pointer Dereference | 04-Dec-19 |
| CVE-2020-0655 | Microsoft Windows | Path Traversal | 26-May-20 |
| CVE-2019-8460 | OpenBSD | Denial of Service | 31-Oct-19 |
| CVE-2020-6007 | Philips Hue Bridge 2.X | Heap-Based Buffer Overflow | 01-Mar-20 |
| CVE-2019-1164 | Windows 10 x64 1903 | Out-Of-Bounds Read\Write | 23-Sep-19 |
| CVE-2019-1159 | Windows 10 x64 1903 | Use After Free | 20-Aug-19 |
| CVE-2019-1096 | Windows 10 x64 1809 | Out-Of-Bounds Read | 24-Jul-19 |
| CVE-2019-5995 | Canon DSLR Cameras | Design Error | 26-Aug-19 |
| CVE-2019-1014 | Windows 10 x64 1809 | Use After Free | 18-Jul-19 |
| CVE-2019-2705 | Oracle OutsideIn | Use After Free | 19-Jun-19 |
| CVE-2019-2613 | Oracle OutsideIn | Out-of-Bounds Memory Access | 19-Jun-19 |
| CVE-2019-2612 | Oracle OutsideIn | Out-of-Bounds Memory Access | 19-Jun-19 |
| CVE-2019-2611 | Oracle OutsideIn | Out-of-Bounds Memory Access | 19-Jun-19 |
| CVE-2019-2610 | Oracle OutsideIn | Out-of-Bounds Memory Access | 19-Jun-19 |
| CVE-2019-2609 | Oracle OutsideIn | Out-of-Bounds Memory Access | 19-Jun-19 |
| CVE-2019-2608 | Oracle OutsideIn | Access Violation | 19-Jun-19 |
| CVE-2019-8602 | Apple iOS \ macOS | Untrusted pointer dereference leads to Code Execution | 19-Jun-19 |
| CVE-2019-8600 | Apple iOS \ macOS | Heap-Based Buffer Oveflow leading to RCE | 19-Jun-19 |
| CVE-2019-8577 | Apple iOS \ macOS | Persistencey and Privilege Escalation | 19-Jun-19 |
| CVE-2019-8598 | Apple iOS \ macOS | Info Leak | 19-Jun-19 |
| CVE-2019-6001 | Canon DSLR Cameras | Stack-Based Buffer Overflow | 26-Aug-19 |
| CVE-2019-6000 | Canon DSLR Cameras | Stack-Based Buffer Overflow | 26-Aug-19 |
| CVE-2019-5999 | Canon DSLR Cameras | Heap-Based Buffer Overflow | 26-Aug-19 |
| CVE-2019-5998 | Canon DSLR Cameras | Stack-Based Buffer Overflow | 26-Aug-19 |
| CVE-2019-5994 | Canon DSLR Cameras | Buffer Overflow over the Globals | 26-Aug-19 |
| CPRID-2112 | MuPDF | Null Dereference | 10-Dec-20 |
| CVE-2019-7081 | Acrobat Reader DC | Out-Of-Bounds Read | 19-Jun-19 |
| CVE-2019-7080 | Acrobat Reader DC | Double Free | 19-Jun-19 |
| CPRID-2109 | MuPDF | Floating Point exception (div by zero) | 10-Dec-20 |
| CPRID-2108 | MuPDF | Stack-Based Buffer Overflow | 10-Dec-20 |
| CPRID-2104 | MuPDF | Arbitrary Read/Write | 10-Dec-20 |
| CPRID-2102 | MuPDF | Stack-Based Buffer Overflow | 10-Dec-20 |
| CVE-2018-0802 | Microsoft Office Equation Editor (2007 to 2016) | Stack based buffer overflow | 19-Jun-19 |
| CVE-2018-8464 | Microsoft Edge (Windows.Data.Pdf.dll) | Out-Of-Bounds read | 19-Jun-19 |
| CVE-2018-15956 | Acrobat Reader DC | Out-Of-Bounds Read | 19-Jun-19 |
| CVE-2018-15955 | Acrobat Reader DC | Out-Of-Bound Write | 19-Jun-19 |
| CVE-2018-15954 | Acrobat Reader DC | Out-Of-Bounds Read | 19-Jun-19 |
| CVE-2018-15953 | Acrobat Reader DC | Out-Of-Bounds Read | 19-Jun-19 |
| CVE-2018-15952 | Acrobat Reader DC | Out-Of-Bounds Write | 19-Jun-19 |
| CVE-2018-15938 | Acrobat Reader DC | Out-Of-Bounds Write | 19-Jun-19 |
| CVE-2018-15937 | Acrobat Reader DC | Out-Of-Bounds Read | 19-Jun-19 |
| CVE-2018-15936 | Acrobat Reader DC | Out-Of-Bounds Write | 19-Jun-19 |
| CVE-2018-15935 | Acrobat Reader DC | Out-Of-Bounds Write | 19-Jun-19 |
| CVE-2018-15934 | Acrobat Reader DC | Out-Of-Bounds Write | 19-Jun-19 |
| CVE-2018-15933 | Acrobat Reader DC | Out-Of-Bounds Read | 19-Jun-19 |
| CVE-2018-15932 | Acrobat Reader DC | Out-Of-Bounds Write | 19-Jun-19 |
| CVE-2018-15931 | Acrobat Reader DC | Out-Of-Bounds Read | 19-Jun-19 |
| CVE-2018-15930 | Acrobat Reader DC | Out-Of-Bounds Write | 19-Jun-19 |
| CVE-2018-15929 | Acrobat Reader DC | Out-Of-Bounds Read | 19-Jun-19 |
| CVE-2018-15927 | Acrobat Reader DC | Out-Of-Bounds Read | 19-Jun-19 |
| CVE-2018-12875 | Acrobat Reader DC | stack based overflow | 19-Jun-19 |
| CVE-2018-12874 | Acrobat Reader DC | Out-Of-Bounds Write | 19-Jun-19 |
| CVE-2018-12873 | Acrobat Reader DC | Out-Of-Bounds Write | 19-Jun-19 |
| CVE-2018-12872 | Acrobat Reader DC | Out-Of-Bounds Read | 19-Jun-19 |
| CVE-2018-12871 | Acrobat Reader DC | Out-Of-Bounds Read | 19-Jun-19 |
| CVE-2018-12870 | Acrobat Reader DC | Out-Of-Bounds Read | 19-Jun-19 |
| CVE-2018-12869 | Acrobat Reader DC | Out-Of-Bounds Write | 19-Jun-19 |
| CVE-2018-12867 | Acrobat DC | Out-Of-Bounds Read | 19-Jun-19 |
| CVE-2018-12866 | Acrobat DC | Out-Of-Bounds Read | 19-Jun-19 |
| CVE-2018-12865 | Acrobat DC | Out-Of-Bounds Write | 19-Jun-19 |
| CVE-2018-12864 | Acrobat DC | Out-Of-Bounds Write | 19-Jun-19 |
| CVE-2018-12863 | Acrobat DC | Out-Of-Bounds Read | 19-Jun-19 |
| CVE-2018-12862 | Acrobat DC | Out-Of-Bounds Write | 19-Jun-19 |
| CVE-2018-12861 | Acrobat DC | Out-Of-Bounds Write | 19-Jun-19 |
| CVE-2018-12860 | Acrobat DC | Out-Of-Bounds Write | 19-Jun-19 |
| CVE-2018-12859 | Acrobat DC | Out-Of-Bounds Read | 19-Jun-19 |
| CVE-2018-12857 | Acrobat DC | Out-Of-Bounds Read | 19-Jun-19 |
| CVE-2018-12850 | Acrobat DC | Out-Of-Bounds Read | 19-Jun-19 |
| CVE-2018-12849 | Acrobat DC | Out-Of-Bounds Read | 19-Jun-19 |
| CVE-2018-12848 | Acrobat DC | Out-Of-Bounds Write | 19-Jun-19 |
| CVE-2018-12840 | Acrobat Reader DC | Out-Of-Bounds Read | 19-Jun-19 |
| CVE-2018-12839 | Acrobat Reader DC | Out-Of-Bounds Read | 19-Jun-19 |
| CVE-2018-12768 | Acrobat Reader DC | Out-Of-Bounds Write | 19-Jun-19 |
| CVE-2018-12767 | Acrobat Reader DC | Out-Of-Bounds Read | 19-Jun-19 |
| CVE-2018-12766 | Acrobat Reader DC | Out-Of-Bounds Write | 19-Jun-19 |
| CVE-2018-12765 | Acrobat Reader DC | Out-Of-Bounds Read | 19-Jun-19 |
| CVE-2018-12764 | Acrobat Reader DC | Out-Of-Bounds Write | 19-Jun-19 |
| CVE-2018-12754 | Acrobat Reader DC | Out-Of-Bounds Write | 19-Jun-19 |
| CVE-2018-5069 | Acrobat Reader DC | Out-Of-Bounds Write | 19-Jun-19 |
| CVE-2018-5068 | Acrobat Reader DC | Out-Of-Bounds Read | 19-Jun-19 |
| CVE-2018-5065 | Acrobat Reader DC | Read after free | 19-Jun-19 |
| CVE-2018-5064 | Acrobat Reader DC | Out-Of-Bounds Write | 19-Jun-19 |
| CVE-2018-5063 | Acrobat Reader DC | Out-Of-Bounds Read | 19-Jun-19 |
| CVE-2018-4985 | Acrobat Reader DC | Out-Of-Bounds Read | 19-Jun-19 |
| CVE-2018-20249 | Foxit Quick PDF | Out of Bounds Memory Access | 19-Jun-19 |
| CVE-2018-20248 | Foxit Quick PDF | Out of Bounds Memory Access | 19-Jun-19 |
| CVE-2018-20247 | Foxit Quick PDF | Stack Overflow | 19-Jun-19 |
| CVE-2018-20251 | WinRAR | Protection Mechanism Failure | 19-Jun-19 |
| CVE-2018-20250 | WinRAR | Absolute Path Traversal | 19-Jun-19 |
| CVE-2018-20253 | WinRAR | Use After Free | 19-Jun-19 |
| CVE-2018-20251 | WinRAR | Out-Of-Bound Write | 19-Jun-19 |
| CVE-2018-20252 | WinRAR | Out-Of-Bound Write | 19-Jun-19 |
| CVE-2019-5764 | libvpx | Use-After-Free | 19-Jun-19 |
| CVE-2018-20182 | rdesktop | Globals-Based Buffer Overflow | 19-Jun-19 |
| CVE-2018-20181 | rdesktop | Integer Underflow leading to Heap-Based Buffer Overflow | 19-Jun-19 |
| CVE-2018-20180 | rdesktop | Integer Underflow leading to Heap-Based Buffer Overflow | 19-Jun-19 |
| CVE-2018-20179 | rdesktop | Integer-Underflow leading to Heap-Based Buffer Overflow | 19-Jun-19 |
| CVE-2018-20178 | rdesktop | Out-Of-Bounds Read | 19-Jun-19 |
| CVE-2018-20177 | rdesktop | Integer-Overflow leading to Heap-Based Buffer Overflow | 19-Jun-19 |
| CVE-2018-20176 | rdesktop | Out-Of-Bounds Read | 19-Jun-19 |
| CVE-2018-20175 | rdesktop | Integer Signedness Error | 19-Jun-19 |
| CVE-2018-20174 | rdesktop | Heap-Based Buffer Over-Read leading to Information Leak | 19-Jun-19 |
| CVE-2018-8800 | rdesktop | Heap-Based Buffer Overflow | 19-Jun-19 |
| CVE-2018-8799 | rdesktop | Out-Of-Bounds Read | 19-Jun-19 |
| CVE-2018-8798 | rdesktop | Out-Of-Bounds Read leading to information leak | 19-Jun-19 |
| CVE-2018-8797 | rdesktop | Heap-Based Buffer Overflow | 19-Jun-19 |
| CVE-2018-8796 | rdesktop | Out-Of-Bounds Read | 19-Jun-19 |
| CVE-2018-8795 | rdesktop | Integer-Overflow leading to Out-Of-Bounds Write | 19-Jun-19 |
| CVE-2018-8794 | rdesktop | Integer-Overflow leading to Out-Of-Bounds Write | 19-Jun-19 |
| CVE-2018-8793 | rdesktop | Heap-Based Buffer Overflow | 19-Jun-19 |
| CVE-2018-8792 | rdesktop | Out-Of-Bounds Read | 19-Jun-19 |
| CVE-2018-8791 | rdesktop | Out-Of-Bounds Read leading to information leak | 19-Jun-19 |
| CVE-2018-8790 | CPRID-2013 | MSTSC.exe | Black List Bypass | 19-Jun-19 |
| CVE-2019-0887 | MSTSC.exe | Path Traversal | 19-Jun-19 |
| CVE-2018-8789 | FreeRDP | Out-Of-Bounds Reads | 19-Jun-19 |
| CVE-2018-8788 | FreeRDP | Out-Of-Bounds Write | 19-Jun-19 |
| CVE-2018-8787 | FreeRDP | Integer Overflow leading to a Heap-Based Buffer Overflow | 19-Jun-19 |
| CVE-2018-8786 | FreeRDP | Integer Truncation leading to RCE | 19-Jun-19 |
| CVE-2018-8785 | FreeRDP | Heap-Based Buffer Overflow | 19-Jun-19 |
| CVE-2018-8784 | FreeRDP | Heap-Based Buffer Overflow | 19-Jun-19 |
| CVE-2018-5925 | HP InkJet Printers | Globals Buffer Overflow | 19-Jun-19 |
| CVE-2018-5924 | HP InkJet Printers | Stack-Based Buffer Overflow leading to RCE | 19-Jun-19 |
Vulnerabilities #: 211 | List ordered by CPR-ID [descending]