Data Sharing Service Spoofing Vulnerability

Concurrent execution using shared resource with improper synchronization 'race condition' in Data Sharing Service Client allows an unauthorized attacker to perform spoofing locally...

Microsoft Data Sharing Service 竞争条件问题漏洞

Microsoft Data Sharing Service is a built-in data sharing service component of the Windows operating system from Microsoft Corporation USA. A competitive condition vulnerability exists in Microsoft Data Sharing Service, which can be exploited by an attacker to perform spoofing attacks...

PT-2025-42092

Name of the Vulnerable Software and Affected Versions Data Sharing Service Client affected versions not specified Description A race condition exists due to concurrent execution using a shared resource with improper synchronization. This allows a local attacker to perform spoofing. Approximately...

EUVD-2019-1338

Malware in sbrugna...

EUVD-2020-2152

Malware in sbrugna...

EUVD-2019-9936

Malware in sbrugna...

EUVD-2019-1341

Malware in sbrugna...

EUVD-2019-9974

Malware in sbrugna...

EUVD-2019-6586

Malware in sbrugna...

EUVD-2019-1339

Malware in sbrugna...

EUVD-2019-9940

Malware in sbrugna...

EUVD-2020-2236

Malware in sbrugna...

EUVD-2017-5407

Malware in sbrugna...

CVE-2025-48707

An issue was discovered in Stormshield Network Security SNS before 5.0.1. TPM authentication information could, in some HA use cases, be shared among administrators, which can cause secret sharing...

LinkedIn will use your data to train its AI unless you opt out now

LinkedIn plans to share user data with Microsoft and its affiliates for AI training. Framed as "legitimate interest", it won't ask for your permission—instead you'll have to opt out before the deadline. Microsoft has made major investments in ChatGPT’s creator OpenAI, and as we know, the more dat...

Police using drones to read your license plates, warns EFF

Police are using drones as flying automated license plate readers ALPRs, according to a report by the Electronic Frontier Foundation EFF. And where there is a market, a provider will jump in. Or was it the other way around this time? Flock Safety, for example, recently told a group of potential l...

jetty-server: Jetty: Gzip Request Body Buffer Corruption

A flaw was found in Eclipse Jetty. This vulnerability allows corrupted and inadvertent data sharing between requests via a gzip error when inflating a request body. If the request body is malformed, the gzip decompression process can fail, resulting in the application inadvertently using data fro...

CVE-2017-0078

creationtimestamp| type| source ---|---|--- 2025-08-31 03:01:20+00:00| seen| MISP/ab0b745f-bbd5-338e-8b92-97dd0c757e9d 2026-07-29 12:01:11+00:00| seen| Telegram/-09yViB9XDNhXfNiM3JYeUTRircCt8N67Gw9UNQdqPCA 2026-07-30 00:01:48+00:00| seen| Telegram/-09yViB9XDNhXfNiM3JYeUTRircCt8N67Gw9UNQdqPCA...

A week in security (July 28 – August 3)

Last week on Malwarebytes Labs: Apple ID scam leads to $27,000 in-person theft of Ohio man OpenAI kills "short-lived experiment" where ChatGPT chats could be found on Google Trump Administration and Big Tech want you to share your health data Prison visitor details shared with all inmates at...

Trump Administration and Big Tech want you to share your health data

US President Donald Trump announced a loose plan Wednesday to allow Americans to voluntarily upload and port their medical records across hospitals, clinics, technology companies, and health apps, with broad participation from Google, Apple, OpenAI, Amazon, and more. While the system could help...