CVE-2021-40729

Adobe Acrobat Reader DC version 21.007.20095 and earlier, 21.007.20096 and earlier, 20.004.30015 and earlier, and 17.011.30202 and earlier is affected by a out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass...

CVE-2021-26318

A timing and power-based side channel attack leveraging the x86 PREFETCH instructions on some AMD CPUs could potentially result in leaked kernel address space information...

UBUNTU-CVE-2021-26318

A timing and power-based side channel attack leveraging the x86 PREFETCH instructions on some AMD CPUs could potentially result in leaked kernel address space information...

CVE-2021-26318

CVE-2021-26318 corresponds to a timing and power-based side-channel issue on some AMD CPUs that could potentially leak kernel address space information via the x86 PREFETCH instruction. Affected software/hardware: all AMD CPUs (per AMD: Side-channels Related to the x86 PREFETCH Instruction). Root...

Advanced Micro Devices Cpu 信息泄露漏洞

The Advanced Micro Devices Cpu Amd Cpu is an excellent central processor for Amd from Advanced Micro Devices, USA . The Advanced Micro Devices Cpu has a security vulnerability that can be exploited by an attacker to cause kernel address space information disclosure on some AMD cpus utilizing the...

The vulnerability of the Internet Explorer browser, related to vulnerabilities in access control, allows attackers to bypass the ASLR (Address Space Layout Randomization) protection mechanism and execute arbitrary code.

The vulnerability of the Internet Explorer browser is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to bypass the ASLR Address Space Layout Randomization protection mechanism by using a specially crafted website and executing arbitrary code...

Side-channels Related to the x86 PREFETCH Instruction

Bulletin ID: AMD-SB-1017 Potential Impact: Leaked kernel address space information Severity: Medium Summary Researchers from Graz University of Technology with CISPA Helmholtz Center for Information Security have demonstrated timing and power-based side channel attacks leveraging the x86 PREFETCH...

CVE-2021-25476

An information disclosure vulnerability in Widevine TA log prior to SMR Oct-2021 Release 1 allows attackers to bypass the ASLR protection mechanism in TEE...

PT-2021-16666 · Google · Widevine Ta Log

Name of the Vulnerable Software and Affected Versions: Widevine TA log versions prior to SMR Oct-2021 Release 1 Description: An information disclosure issue allows attackers to bypass the ASLR protection mechanism in TEE. This affects the Widevine TA log, enabling potential exploitation...

Samsung SMR 安全漏洞

Samsung SMR is a system patch package from Samsung South Korea. It provides patches for Samsung mobile applications. A security vulnerability exists in versions prior to Samsung SMR Oct-2021 Release 1, which stems from information leakage in the Widevine TA logs, allowing an attacker to exploit t...

CVE-2021-39865

Adobe Framemaker versions 2019 Update 8 and earlier and 2020 Release Update 2 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this...

CVE-2021-39833

Adobe Framemaker versions 2019 Update 8 and earlier and 2020 Release Update 2 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this...

CVE-2021-39862

Adobe Framemaker versions 2019 Update 8 and earlier and 2020 Release Update 2 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this...

PT-2021-6865 · Adobe · Acrobat 2020 +5

Name of the Vulnerable Software and Affected Versions: Adobe Acrobat versions prior to 2021.005.20060 Adobe Acrobat Reader versions prior to 2021.005.20060 Adobe Acrobat 2017 versions prior to 2017.011.30199 Adobe Acrobat Reader 2017 versions prior to 2017.011.30199 Adobe Acrobat 2020 versions...

UBUNTU-CVE-2021-36045

XMP Toolkit SDK versions 2020.1 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of arbitrary memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victi...

FreeBSD : FreeBSD -- libfetch out of bounds read (d22b336d-0567-11ec-b69d-4062311215d5)

The passive mode in FTP communication allows an out of boundary read while libfetch uses strtol to parse the relevant numbers into address bytes. It does not check if the line ends prematurely. If it does, the for-loop condition checks for p == '\0' one byte too late because p++ was already...

CVE-2021-36010

Adobe Illustrator version 25.2.3 and earlier is affected by an out-of-bounds read vulnerability that could lead to disclosure of memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must ope...

drivers/net/ethernet/xilinx/xilinx_emaclite.c in the Linux kernel before 5.13.3 makes it easier for attackers to defeat an ASLR protection mechanism because it prints a kernel pointer (i.e. the real IOMEM pointer).

...

UBUNTU-CVE-2021-38205

drivers/net/ethernet/xilinx/xilinxemaclite.c in the Linux kernel before 5.13.3 makes it easier for attackers to defeat an ASLR protection mechanism because it prints a kernel pointer i.e., the real IOMEM pointer...

Linux kernel 缓冲区错误漏洞

Linux kernel is the kernel used by the Linux Foundation's open source operating system Linux. Linux kernel has a security vulnerability that can be exploited by attackers to defeat the ASLR protection mechanism...