pipewire (SUSE:Linux Enterprise Module for Desktop Applications 15 SP2) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the SUSE:Linux Enterprise Module for Desktop Applications 15 SP2 package pipewire, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (10)

• CVE-2020-15656 — CVSS 8.8 (high): JIT optimizations involving the Javascript arguments object could confuse later optimizations. This risk was already mitigated by various…
• CVE-2020-15659 — CVSS 8.8 (high): Mozilla developers and community members reported memory safety bugs present in Firefox 78 and Firefox ESR 78.0. Some of these bugs showed…
• CVE-2020-6463 — CVSS 8.8 (high): Use after free in ANGLE in Google Chrome prior to 81.0.4044.122 allowed a remote attacker to potentially exploit heap corruption via a…
• CVE-2020-15657 — CVSS 7.8 (high): Firefox could be made to load attacker-supplied DLL files from the installation directory. This required an attacker that is already…
• CVE-2020-15658 — CVSS 6.5 (medium): The code for downloading files did not properly take care of special characters, which led to an attacker being able to cut off the file…
• CVE-2020-15652 — CVSS 6.5 (medium): By observing the stack trace for JavaScript errors in web workers, it was possible to leak the result of a cross-origin redirect. This…
• CVE-2020-6514 — CVSS 6.5 (medium): Inappropriate implementation in WebRTC in Google Chrome prior to 84.0.4147.89 allowed an attacker in a privileged network position to…
• CVE-2020-15653 — CVSS 6.5 (medium): An iframe sandbox element with the allow-popups flag could be bypassed when using noopener links. This could have led to security issues…
• CVE-2020-15654 — CVSS 6.5 (medium): When in an endless loop, a website specifying a custom cursor using CSS could make it look like the user is interacting with the user…
• CVE-2020-15655 — CVSS 6.5 (medium): A redirected HTTP request which is observed or modified through a web extension could bypass existing CORS checks, leading to potential…