Lucene search
+L

4221 matches found

CVE
CVE
added 2025/08/12 4:58 p.m.34 views

CVE-2025-22853

Intel TDX firmware contains an improper synchronization issue that can allow a privileged user with local access to escalate privileges (CVE-2025-22853). The issue is documented in the Intel advisory INTEL-SA-01312 and is associated with Intel(R) TDX firmware and related processors. According to ...

2.3CVSS7.4AI score0.00148EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/08/12 4:58 p.m.21 views

CVE-2025-22853

Improper synchronization in the firmware for some IntelR TDX may allow a privileged user to potentially enable escalation of privilege via local access...

2.3CVSS0.00148EPSS
SaveExploits0References1
Microsoft CVE
Microsoft CVE
added 2025/08/12 7:0 a.m.7 views

Windows SMB Remote Code Execution Vulnerability

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows SMB allows an unauthorized attacker to execute code over a network...

7.5CVSS7.7AI score0.00644EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2025/08/12 7:0 a.m.5 views

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally...

7CVSS7.4AI score0.0027EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2025/08/12 7:0 a.m.9 views

Windows Hyper-V Denial of Service Vulnerability

Missing synchronization in Windows Hyper-V allows an authorized attacker to deny service over an adjacent network...

6.8CVSS7.2AI score0.00457EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2025/08/12 12:0 a.m.6 views

PT-2025-32803 · Microsoft · Windows Directx +1

Name of the Vulnerable Software and Affected Versions: Windows DirectX affected versions not specified Description: A race condition exists in Windows DirectX due to concurrent execution using a shared resource with improper synchronization. This allows an authorized attacker to elevate privilege...

7CVSS6.3AI score0.00264EPSS
SaveExploits0References6
Redos
Redos
added 2025/08/12 12:0 a.m.6 views

ROS-20250812-09

A vulnerability in the encrypted function of the cross-platform software development framework Qt is related to synchronization errors when using a shared resource. Exploitation of the vulnerability could allow an attacker acting remotely to cause a denial of service...

8.6CVSS7.1AI score0.00494EPSS
SaveExploits0
CNNVD
CNNVD
added 2025/08/12 12:0 a.m.5 views

Intel TDX 安全漏洞

Intel TDX is a CPU-level technology from Intel Corporation USA. It is used to implement a trusted execution environment. A security vulnerability exists in Intel TDX that stems from improper synchronization and could lead to elevation of privilege...

2.3CVSS6.8AI score0.00148EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2025/08/12 12:0 a.m.9 views

PT-2025-32769 · Microsoft · Windows Hyper-V +1

Name of the Vulnerable Software and Affected Versions: Windows Hyper-V affected versions not specified Description: A missing synchronization flaw in Windows Hyper-V can allow an authorized attacker to cause a denial of service to an adjacent network. Recommendations: At the moment, there is no...

6.8CVSS6.4AI score0.00457EPSS
SaveExploits0References7
RedHat Linux
RedHat Linux
added 2025/08/11 2:20 p.m.4 views

kernel: padata: fix UAF in padata_reorder

A use-after-free vulnerability was found in the Linux kernel's padata subsystem, in the padatareorder function. Caused by improper synchronization controls, this vulnerability can occur when a reference-counted data structure pd is decremented in one thread, freeing it, while another thread still...

7.8CVSS7.1AI score0.00215EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2025/08/11 9:52 a.m.6 views

kernel: padata: fix UAF in padata_reorder

A use-after-free vulnerability was found in the Linux kernel's padata subsystem, in the padatareorder function. Caused by improper synchronization controls, this vulnerability can occur when a reference-counted data structure pd is decremented in one thread, freeing it, while another thread still...

7.8CVSS7.1AI score0.00215EPSS
SaveExploits0References5
BDU FSTEC
BDU FSTEC
added 2025/08/11 12:0 a.m.19 views

The vulnerability of the `net_sched` component in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the netsched component in the Linux operating system’s kernel is related to the simultaneous execution using shared resources with incorrect synchronization. Exploiting this vulnerability allows an attacker to cause service failures...

4.6CVSS6.3AI score0.00172EPSS
SaveExploits0References16Affected Software8
Packet Storm News
Packet Storm News
added 2025/08/11 12:0 a.m.7 views

Obfuscated Quantum and Post-Quantum Cryptography

In this work, we present an experimental deployment of a new design for combined quantum key distribution QKD and post-quantum cryptography PQC. Novel to our system is the dynamic obfuscation of the QKD-PQC sequence of operations, the number of operations, and parameters related to the operations...

6.9AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2025/08/11 12:0 a.m.12 views

Linux Distros Unpatched Vulnerability : CVE-2025-22053

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: ibmveth: make vethpoolstore stop hanging v2: - Created a single error handling unlock and exit in vethpoolstore - Greatly expanded commit message with...

5.5CVSS6.4AI score0.00143EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2025/08/11 12:0 a.m.2 views

Linux Distros Unpatched Vulnerability : CVE-2024-38780

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - dma-buf/sw-sync: don't enable IRQ from syncprintobj Since commit a6aa8fca4d79 dma-buf/sw-sync: Reduce irqsave/irqrestore from known context by error replaced...

5.5CVSS6.2AI score0.00189EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2025/08/11 12:0 a.m.6 views

Linux Distros Unpatched Vulnerability : CVE-2021-47356

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mISDN: fix possible use-after-free in HFCcleanup This module's remove path calls deltimer. However, that function does not wait until the timer handler finishes...

7.7CVSS6.5AI score0.00267EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2025/08/09 12:0 a.m.8 views

Linux Distros Unpatched Vulnerability : CVE-2022-49892

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ftrace: Fix use-after-free for dynamic ftraceops KASAN reported a use-after-free with ftrace ops 1. It was found from vmcore that perf had registered two ops wi...

7.8CVSS6.4AI score0.00209EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2025/08/09 12:0 a.m.2 views

Linux Distros Unpatched Vulnerability : CVE-2025-38181

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - calipso: Fix null-ptr-deref in calipsoreqset,delattr. syzkaller reported a null-ptr-deref in sockomalloc while allocating a CALIPSO option. 0 The NULL is of...

7.5CVSS6.5AI score0.00466EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2025/08/09 12:0 a.m.9 views

Linux Distros Unpatched Vulnerability : CVE-2025-37861

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - scsi: mpi3mr: Synchronous access b/w reset and tm thread for reply queue When the task management thread processes reply queues while the reset thread resets...

7.8CVSS6.6AI score0.00278EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2025/08/08 12:0 a.m.4 views

Linux Distros Unpatched Vulnerability : CVE-2025-38250

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Bluetooth: hcicore: Fix use-after-free in vhciflush syzbot reported use-after-free in vhciflush without repro. 0 From the splat, a thread closed a vhci file...

7.8CVSS6.8AI score0.00145EPSS
SaveExploits0References3
Rows per page
Query Builder