In Real Player through 20.1.0.312, attackers can execute arbitrary code by placing a UNC share pathname (for a DLL file) in a RAM file. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
RCE
Realplayer
Realnetworks
NVD
GitHub
CVSS 3.1
8.8
EPSS
1.5%
The Linux kernel before 5.17.9 allows TCP servers to identify clients by observing what source ports are used. Rated low severity (CVSS 3.3), this vulnerability is low attack complexity.
Information Disclosure
Linux
Linux Kernel
NVD
GitHub
CVSS 3.1
3.3
EPSS
0.4%