Always-Incorrect Control Flow Implementation

OpenZeppelin is vulnerable to Always-Incorrect Control Flow Implementation. The vulnerability is due to the duplication of functionDelegateCall in the Multicall.sol file. This could lead to Unintended Duplicate Operations...

Intel Optane Solid-State Storage Control Flow DoS

The vulnerability of Intel Optane solid-state storage’s microprogramming software is related to the implementation of incorrect control flow. Exploiting this vulnerability can allow an attacker to cause a service failure...

Zoom Video Conferencing Control Flow

The vulnerability of Zoom video conferencing software is related to the implementation of incorrect control flow. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain access to protected information...

CVE-2023-43588

Insufficient control flow management in some Zoom clients may allow an authenticated user to conduct an information disclosure via network access...

Zoom Client < 5.16.0 Multiple Vulnerabilities (ZSB-23049, ZSB-23050, ZSB-23051, ZSB-23052, ZSB-23055) - Linux

The Zoom Client is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:zoom:zoom"; ifdescription...

Zoom Client < 5.16.0 Multiple Vulnerabilities (ZSB-23047, ZSB-23049, ZSB-23050, ZSB-23051, ZSB-23052, ZSB-23055) - Windows

The Zoom Client is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:zoom:zoom"; ifdescription...

CVE-2023-43588

Insufficient control flow management in some Zoom clients may allow an authenticated user to conduct an information disclosure via network access...

CVE-2023-43588

CVE-2023-43588 describes insufficient control flow management in Zoom Client, potentially allowing an authenticated user to disclose information over a network. The NVD entry lists a CVSS‑3.1 base score of 6.5 (MEDIUM) with Confidentiality impact HIGH, and mentions no exploitation details beyond ...

CVE-2023-24587

Insufficient control flow management in firmware for some IntelR OptaneTM SSD products may allow a privileged user to potentially enable denial of service via local access...

CVE-2023-24587

Insufficient control flow management in firmware for some IntelR OptaneTM SSD products may allow a privileged user to potentially enable denial of service via local access...

CVE-2022-46299

Insufficient control flow management for some Intel Unison software may allow an authenticated user to potentially enable information disclosure via local access...

CVE-2022-46299

Insufficient control flow management for some Intel Unison software may allow an authenticated user to potentially enable information disclosure via local access...

Design/Logic Flaw

Insufficient control flow management in firmware for some IntelR OptaneTM SSD products may allow a privileged user to potentially enable denial of service via local access...

Design/Logic Flaw

Insufficient control flow management for some Intel Unison software may allow an authenticated user to potentially enable information disclosure via local access...

CVE-2023-24587

Insufficient control flow management in firmware for some IntelR OptaneTM SSD products may allow a privileged user to potentially enable denial of service via local access...

CVE-2022-46299

Insufficient control flow management for some Intel Unison software may allow an authenticated user to potentially enable information disclosure via local access...

CVE-2022-46299

Insufficient control flow management for some Intel Unison software may allow an authenticated user to potentially enable information disclosure via local access...

CVE-2022-46299

CVE-2022-46299 — Affected Intel Unison clients suffer from insufficient control flow management, enabling an authenticated user to potentially disclose information via local access. Impact limited to local access scenarios with a high confidentiality impact, per the CVE details. Affected products...

kernel: Linux kernel: Denial of Service in s390/lcs network driver due to incompatible function pointer type

A flaw was found in the Linux kernel's s390/lcs network driver. An incorrect function pointer type in the lcsstartxmit function could lead to a system crash or termination of a process. This issue arises when Kernel Control Flow Integrity kCFI, a security feature designed to prevent certain types...

kernel: drm/amdgpu: Fix type of second parameter in odn_edit_dpm_table() callback

A function prototype mismatch was found in the AMD GPU driver's DPM table callbacks. When kCFI Control Flow Integrity is enabled, the mismatched types cause CFI validation failures, potentially crashing the kernel...