GCVE - cpe:2.3:a:synology:synology_drive_client:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:synology:synology_drive_client:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Synology (`65464e9b-7339-559d-9719-837f074e0220`)
Product	Synology Drive Client (`d1d57095-342c-5fc5-995d-22ecf4026356`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2023-52946`	vulnerable	2026-06-08 06:17:55.977575	Details available HIGH (8.2) Buffer copy without checking size of input ('Classic Buffer Overflow') vulnerability in vss service component in Synology Drive Client before 3.5.0-16084 allows remote attackers to overwrite trivial buffers and crash the client via unspecified vectors. Published: 2024-09-26T03:31:38.479Z Updated: 2024-09-26T14:53:50.864Z Open on db.gcve.eu Reference links https://www.synology.com/en-global/security/advisory/Synology_SA_24_10	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-49041`	vulnerable	2026-06-08 05:51:35.505866	Details available MEDIUM (4.4) Buffer copy without checking size of input ('Classic Buffer Overflow') vulnerability in backup task management functionality in Synology Drive Client before 3.4.0-15721 allows local users with administrator privileges to crash the client via unspecified vectors. Published: 2024-09-26T03:34:56.493Z Updated: 2024-09-26T14:40:15.626Z Open on db.gcve.eu Reference links https://www.synology.com/en-global/security/advisory/Synology_SA_24_10	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-49040`	vulnerable	2026-06-08 05:51:35.505315	Details available MEDIUM (4.4) Buffer copy without checking size of input ('Classic Buffer Overflow') vulnerability in connection management functionality in Synology Drive Client before 3.4.0-15721 allows local users with administrator privileges to crash the client via unspecified vectors. Published: 2024-09-26T03:34:10.329Z Updated: 2024-09-26T14:40:39.040Z Open on db.gcve.eu Reference links https://www.synology.com/en-global/security/advisory/Synology_SA_24_10	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-49039`	vulnerable	2026-06-08 05:51:35.504794	Details available MEDIUM (6.7) Out-of-bounds write vulnerability in backup task management functionality in Synology Drive Client before 3.4.0-15721 allows local users with administrator privileges to execute arbitrary commands via unspecified vectors. Published: 2024-09-26T03:33:29.551Z Updated: 2024-09-26T14:51:05.107Z Open on db.gcve.eu Reference links https://www.synology.com/en-global/security/advisory/Synology_SA_24_10	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-49038`	vulnerable	2026-06-08 05:51:35.503955	Details available HIGH (7.8) Inclusion of functionality from untrusted control sphere vulnerability in OpenSSL DLL component in Synology Drive Client before 3.3.0-15082 allows local users to execute arbitrary code via unspecified vectors. Published: 2024-09-26T03:33:01.093Z Updated: 2024-09-26T14:52:02.124Z Open on db.gcve.eu Reference links https://www.synology.com/en-global/security/advisory/Synology_SA_24_10	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-49037`	vulnerable	2026-06-08 05:51:35.501198	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.