ext/xml/xml.c in PHP before 5.3.27 does not properly consider parsing depth, which allows remote attackers to cause a denial of service (heap memory corruption) or possibly have unspecified other. Rated medium severity (CVSS 6.8), this vulnerability is remotely exploitable. Epss exploitation probability 19.0% and no vendor patch available.
PHP
Buffer Overflow
Denial Of Service
Memory Corruption
NVD
CVSS 2.0
6.8
EPSS
19.0%
BlackBerry 10 OS before 10.0.10.648 on BlackBerry Z10 smartphones uses weak permissions for a BlackBerry Protect object, which allows physically proximate attackers to bypass intended access. Rated medium severity (CVSS 6.2). No vendor patch available.
Privilege Escalation
Blackberry Os
Z10
NVD
CVSS 2.0
6.2
EPSS
0.0%