kernel: Integer overflow in Intel(R) Graphics Drivers

A flaw was found in the Linux kernel. An integer overflow in the firmware for some IntelR Graphics Drivers may allow a privileged user to potentially enable an escalation of privilege via local access. The highest threat from this vulnerability is to data confidentiality and integrity as well as...

kernel: Use after free via PI futex state

A flaw was found in the Linux kernel. A use-after-free memory flaw in the Fast Userspace Mutexes functionality allowing a local user to crash the system or escalate their privileges on the system. The highest threat from this vulnerability is to data confidentiality and integrity as well as syste...

kernel: race condition for removal of the HCI controller

A flaw was found in the Linux kernel’s handling of the removal of Bluetooth HCI controllers. This flaw allows an attacker with a local account to exploit a race condition, leading to corrupted memory and possible privilege escalation. The highest threat from this vulnerability is to...

kernel: size_t-to-int conversion vulnerability in the filesystem layer

An out-of-bounds write flaw was found in the Linux kernel's seqfile in the Filesystem layer. This flaw allows a local attacker with a user privilege to gain access to out-of-bound memory, leading to a system crash, leak of internal kernel information and can escalate privileges. The issue results...

kernel: Use after free via PI futex state

A flaw was found in the Linux kernel. A use-after-free memory flaw in the Fast Userspace Mutexes functionality allowing a local user to crash the system or escalate their privileges on the system. The highest threat from this vulnerability is to data confidentiality and integrity as well as syste...

kernel: size_t-to-int conversion vulnerability in the filesystem layer

An out-of-bounds write flaw was found in the Linux kernel's seqfile in the Filesystem layer. This flaw allows a local attacker with a user privilege to gain access to out-of-bound memory, leading to a system crash, leak of internal kernel information and can escalate privileges. The issue results...

CVE-2021-33909

An out-of-bounds write flaw was found in the Linux kernel's seqfile in the Filesystem layer. This flaw allows a local attacker with a user privilege to gain access to out-of-bound memory, leading to a system crash, leak of internal kernel information and can escalate privileges. The issue results...

The vulnerability of the Google Chrome browser’s URL string, related to insufficient validation of input data, allows attackers to compromise the integrity of data.

The vulnerability of the Google Chrome browser’s URL string is related to the improper implementation of Compositing. Exploiting this vulnerability can allow an attacker to compromise the integrity of data...

The vulnerability of Google Chrome’s navigation mechanism, related to improper authorization, allows a perpetrator to compromise data integrity.

The vulnerability of Google Chrome’s navigation function is related to the insufficient implementation of security policies. Exploiting this vulnerability allows a malicious actor to compromise data integrity...

The vulnerability of the Google Chrome browser’s URL component, related to security configuration errors, allows attackers to compromise data integrity.

The vulnerability of the Google Chrome browser’s URL component is related to insufficient data validation during formatting. Exploiting this vulnerability can allow an attacker to compromise the integrity of data...

The vulnerability of the HTTP request programming language Python method, related to the lack of mechanisms for encoding or shielding output data, allows attackers to gain access to confidential information and compromise its integrity.

The vulnerability of the HTTP request programming language Python method is related to the lack of mechanisms for encoding or encrypting output data. Exploiting this vulnerability allows an attacker to gain access to confidential data and compromise its integrity...

The vulnerability of the Apache HTTP Server’s web server, related to a queue overflow, allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the Apache HTTP Server web server is related to a heap overflow. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

The vulnerability of the DBI interpreter component in the Perl programming language, related to writing beyond buffer boundaries, allows attackers to compromise data integrity and cause service failures.

The vulnerability of the DBI interpreter for the Perl programming language is related to writing beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker to compromise data integrity and cause service failures...

The vulnerability of the Ceph storage system, related to insufficient validation of input data, allows attackers to compromise the integrity of the data.

The vulnerability of the Ceph storage system is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to compromise the integrity of the data...

The vulnerability of Google Chrome’s full-screen mode, related to insufficient validation of input data, allows a hacker to compromise data integrity.

The vulnerability of the full-screen mode of the Google Chrome browser is related to the insufficient implementation of security policies. Exploiting this vulnerability can allow a malicious actor to compromise data integrity remotely...

The vulnerability of the solaris_zone module in the Ansible configuration management system arises from the lack of measures to sanitize input data. This allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the solariszone module in the Ansible configuration management system is related to the lack of measures for cleaning input data. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, and cause service failures...

The vulnerability of the OverlayFS component arises from the Firejail jailer’s SUID status. This vulnerability stems from insufficient checks on the state of shared resources. As a result, attackers can gain access to confidential data, compromise its integrity, and even cause service failures.

The vulnerability of the OverlayFS component in Firejail’s SUID mode is related to insufficient checking of the status of shared resources. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, and cause service failures...

The vulnerability of the urllib2 module in the Python programming language arises from insufficient neutralization of special elements in requests, allowing attackers to compromise data integrity.

The vulnerability of the urllib2 module in the Python programming language is related to the injection of CRLF characters. Exploiting this vulnerability allows an attacker to compromise the integrity of data...

The vulnerability of the Python programming language’s pip module relates to deficiencies in pathname restrictions for directories, allowing attackers to compromise data integrity.

The vulnerability of the Python programming language’s pip module is related to shortcomings in pathname restrictions when specifying software for installation via URLs. Exploiting this vulnerability allows an attacker to compromise data integrity remotely...

The vulnerability of the Google Chrome browser’s Payment function, related to deficiencies in authentication procedures, allows attackers to compromise data integrity.

The vulnerability of the Google Chrome browser’s Payment function is related to the insufficient implementation of security policies. Exploiting this vulnerability could allow a malicious actor to compromise data integrity remotely...