18951 matches found
CVE-2022-40733
CVE-2022-40733 is a kernel vulnerability in Windows DirectComposition via the win32kbase.sys driver. The TALOS report details a NULL pointer dereference in DirectComposition GetWeakReferenceBase due to a mis-managed weak-reference flag in the resource marshaler lifecycle, triggered when certain f...
CVE-2022-40733
An access violation vulnerability exists in the DirectComposition functionality win32kbase.sys driver version 10.0.22000.593 as part of Windows 11 version 22000.593 and version 10.0.20348.643 as part of Windows Server 2022 version 20348.643. A specially-crafted set of syscalls can lead to a reboo...
CVE-2022-40732
CVE-2022-40732 affects Microsoft Windows DirectComposition in the win32kbase.sys driver (Windows 11 10.0.22000.593; Windows Server 2022 10.0.20348.643). Talos details a NULL pointer dereference in DirectComposition::CCompositionSurfaceBitmapMarshaler when setting integer property 0x3, which leads...
CVE-2022-40732
An access violation vulnerability exists in the DirectComposition functionality win32kbase.sys driver version 10.0.22000.593 as part of Windows 11 version 22000.593 and version 10.0.20348.643 as part of Windows Server 2022 version 20348.643. A specially-crafted set of syscalls can lead to a reboo...
CVE-2022-40732
An access violation vulnerability exists in the DirectComposition functionality win32kbase.sys driver version 10.0.22000.593 as part of Windows 11 version 22000.593 and version 10.0.20348.643 as part of Windows Server 2022 version 20348.643. A specially-crafted set of syscalls can lead to a reboo...
CVE-2024-10095
creationtimestamp| type| source ---|---|--- 2024-12-16 19:02:42+00:00| seen| https://t.me/cvedetector/13024 2025-04-21 04:24:57+00:00| seen| https://t.me/CyberBulletin/10648 2025-04-21 06:24:57+00:00| seen| https://t.me/CyberBulletin/3086 2025-08-09 13:26:56+00:00| seen|...
Debian: Security Advisory (DLA-3994-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian dla-3994 : gir1.2-gstreamer-1.0 - security update
The remote Debian 11 host has packages installed that are affected by a vulnerability as referenced in the dla-3994 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3994-1 [email protected] https://www.debian.org/lts/security/...
Debian dla-3993 : libpgpool-dev - security update
The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3993 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3993-1 [email protected]...
UBUNTU-CVE-2024-12292
An issue was discovered in GitLab CE/EE affecting all versions starting from 11.0 prior to 17.4.6, starting from 17.5 prior to 17.5.4, and starting from 17.6 prior to 17.6.2, where sensitive information passed in GraphQL mutations may have been retained in GraphQL logs...
[SECURITY] [DLA 3992-1] libsoup2.4 security update
Debian LTS Advisory DLA-3992-1 [email protected] https://www.debian.org/lts/security/ Sean Whitton December 12, 2024 https://wiki.debian.org/LTS Package : libsoup2.4 Version : 2.72.0-2+deb11u1 CVE ID : CVE-2024-52530 CVE-2024-52531 CVE-2024-52532 Debian Bug : 1088812 1089238 1089240...
AZL-54333 CVE-2024-45337 affecting package kubevirt for versions less than 1.2.0-11
Applications and libraries which misuse connection.serverAuthenticate via callback field ServerConfig.PublicKeyCallback may be susceptible to an authorization bypass. The documentation for ServerConfig.PublicKeyCallback says that "A call to this function does not guarantee that the key offered is...
Debian dla-3992 : gir1.2-soup-2.4 - security update
The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3992 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-3992-1 [email protected]...
CVE-2024-54526
The issue was addressed with improved checks. This issue is fixed in iOS 18.2 and iPadOS 18.2, macOS Sequoia 15.2, macOS Sonoma 14.7.2, macOS Ventura 13.7.2, tvOS 18.2, watchOS 11.2. A malicious app may be able to access private information...
CVE-2024-12292
creationtimestamp| type| source ---|---|--- 2024-12-11 16:30:39+00:00| seen| https://infosec.exchange/users/screaminggoat/statuses/113635140492482846 2024-12-12 11:32:07+00:00| seen| https://infosec.exchange/users/cve/statuses/113639628901523480...
CVE-2024-53000
creationtimestamp| type| source ---|---|--- 2024-12-11 00:11:23+00:00| seen| https://t.me/cvedetector/12606...
CVE-2024-53001
creationtimestamp| type| source ---|---|--- 2024-12-11 00:11:19+00:00| seen| https://t.me/cvedetector/12604...
CVE-2024-53005
creationtimestamp| type| source ---|---|--- 2024-12-11 00:11:13+00:00| seen| https://t.me/cvedetector/12600...