CVE-2023-46766

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

Out-of-bounds write vulnerability in the kernel driver module. Successful exploitation of this vulnerability may cause process exceptions.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-125CWE-787

Affected software

No affected versions have been published.

Timeline

Published
Nov 8, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-467677.5Out-of-bounds write vulnerability in the kernel driver module. Successful exploitation of this vulnerability may cause process exceptions.CVE-2023-467687.5Multi-thread vulnerability in the idmap module. Successful exploitation of this vulnerability may cause features to perform abnormally.CVE-2023-467697.5Use-After-Free (UAF) vulnerability in the dubai module. Successful exploitation of this vulnerability will affect availability.CVE-2023-46779.8Cron log backup files contain administrator session IDs. It is trivial for any attacker who can reach the Pandora FMS Console to scrape the CVE-2023-467707.5Out-of-bounds vulnerability in the sensor module. Successful exploitation of this vulnerability may cause mistouch prevention errors on userCVE-2023-467717.5Security vulnerability in the face unlock module. Successful exploitation of this vulnerability may affect service confidentiality.CVE-2023-467727.5Vulnerability of parameters being out of the value range in the QMI service module. Successful exploitation of this vulnerability may cause CVE-2023-467739.8Permission management vulnerability in the PMS module. Successful exploitation of this vulnerability may cause privilege escalation.CVE-2023-467747.5Vulnerability of uncaught exceptions in the NFC module. Successful exploitation of this vulnerability can affect NFC availability.CVE-2023-467758.8Cross-Site Request Forgery (CSRF) vulnerability in Djo Original texts Yandex WebMaster plugin <= 1.18 versions.CVE-2023-467768.8Cross-Site Request Forgery (CSRF) vulnerability in Serena Villa Auto Excerpt everywhere plugin <= 1.5 versions.CVE-2023-467778.8Cross-Site Request Forgery (CSRF) vulnerability in Custom Login Page | Temporary Users | Rebrand Login | Login Captcha plugin <= 1.1.3 versi
CVE-2023-46766: High severity, CVSS 7.5 | Vulnix