CVE-2019-7221

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

The KVM implementation in the Linux kernel through 4.20.5 has a Use-after-Free.

Metrics

CVSS 3.0 7.8/10CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-416

Affected software

VendorProductVersions
n/an/an/a

References

Timeline

Published
Mar 21, 2019
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2019

CVE-2019-72225.5The KVM implementation in the Linux kernel through 4.20.5 has an Information Leak.CVE-2019-72235.4InvoicePlane 1.5 has stored XSS via the index.php/invoices/ajax/save invoice_password parameter, aka the "PDF password" field to the "CreateCVE-2019-72258.8The ABB HMI components implement hidden administrative accounts that are used during the provisioning phase of the HMI interface. These credCVE-2019-72268.8The ABB IDAL HTTP server CGI interface contains a URL that allows an unauthenticated attacker to bypass authentication and gain access to prCVE-2019-72277.3In the ABB IDAL FTP server, an authenticated attacker can traverse to arbitrary directories on the hard disk with "CWD ../" and then use theCVE-2019-72288.8The ABB IDAL HTTP server mishandles format strings in a username or cookie during the authentication process. Attempting to authenticate witCVE-2019-72298.3The ABB CP635 HMI uses two different transmission methods to upgrade its firmware and its software components: "Utilization of USB/SD Card tCVE-2019-72308.8The ABB IDAL FTP server mishandles format strings in a username during the authentication process. Attempting to authenticate with the usernCVE-2019-72315.7The ABB IDAL FTP server is vulnerable to a buffer overflow when a long string is sent by an authenticated attacker. This overflow is handledCVE-2019-72328.8The ABB IDAL HTTP server is vulnerable to a buffer overflow when a long Host header is sent in a web request. The Host header value overflowCVE-2019-72338.8In libdoc through 2019-01-28, doc2text in catdoc.c has a NULL pointer dereference.CVE-2019-72349.1An issue was discovered in idreamsoft iCMS 7.0.13. admincp.php?app=apps&do=save allows directory traversal via _app=/../ to begin the proces
CVE-2019-7221: High severity, CVSS 7.8 | Vulnix