FreeBSD-SA-23:12.msdosfs

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-23:12.msdosfs Security Advisory The FreeBSD Project Topic: msdosfs data disclosure Category: core Module: msdosfs FAT file system driver Announced: 2023-10-03...

CVE-2023-38143: Heap-based Buffer Overflow

Windows Common Log File System Driver Elevation of Privilege Vulnerability...

CVE-2023-38144: Buffer Over-read

Windows Common Log File System Driver Elevation of Privilege Vulnerability...

Microsoft Windows Multiple Vulnerabilities (KB5009543)

This host is missing an important security update according to Microsoft KB5009543 SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

CVE-2023-36900: Integer Overflow or Wraparound

Windows Common Log File System Driver Elevation of Privilege Vulnerability...

PT-2023-4377 · Microsoft · Windows Common Log File System Driver +1

Name of the Vulnerable Software and Affected Versions: Windows Common Log File System Driver affected versions not specified Description: The issue is related to insufficient access control in the Windows Common Log File System Driver, which can be exploited to elevate privileges. This allows an...

The vulnerability of the file system driver of the Windows operating system allows a hacker to escalate their privileges.

The vulnerability of the file system driver of the Windows operating system is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to enhance their privileges...

CVE-2023-35299: Out-of-bounds Read

Windows Common Log File System Driver Elevation of Privilege Vulnerability...

CVE-2023-28266: Buffer Over-read

Windows Common Log File System Driver Information Disclosure Vulnerability...

CVE-2023-28252: Heap-based Buffer Overflow

Windows Common Log File System Driver Elevation of Privilege Vulnerability...

SUSE CVE-2022-4842

A flaw NULL Pointer Dereference in the Linux kernel NTFS3 driver function attrpunchhole was found. A local user could use this flaw to crash the system...

Update now! February's Patch Tuesday tackles three zero-days

The Patch Tuesday roundup from Microsoft for February 2023 includes three zero-days. Not exactly what we had in mind for Valentine's Day. Microsoft classifies a vulnerability as a zero-day if it is publicly disclosed or actively exploited with no official fix available. As far as we can tell, onl...

CVE-2023-23376: Heap-based Buffer Overflow

Windows Common Log File System Driver Elevation of Privilege Vulnerability...

CVE-2023-21812: Heap-based Buffer Overflow

Windows Common Log File System Driver Elevation of Privilege Vulnerability...

KLA20233 Multiple vulnerabilities in Microsoft Windows

Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to obtain sensitive information, execute arbitrary code, gain privileges, cause denial of service. Below is a complete list of vulnerabilities: 1. An information disclosure vulnerability in...

Vulnerabilities fixed in Microsoft Windows

Microsoft has fixed vulnerabilities in Windows. The vulnerabilities allow a malicious person to carry out attacks execute attacks that can lead to the following categories of damage: Denial-of-Service DoS. Remote code execution Administrator/Root rights Remote code execution User rights Access to...

PT-2023-1401

Name of the Vulnerable Software and Affected Versions Windows Common Log File System Driver affected versions not specified Description The issue is related to an elevation-of-privilege vulnerability in the Windows Common Log File System Driver, which is caused by insufficient access control. Thi...

The vulnerability of the NTFS file system driver in Linux operating systems allows a hacker to trigger a service failure.

The vulnerability of the NTFS file system driver in Linux operating systems is related to the assignment of a null pointer in the attrpunchhole function. Exploiting this vulnerability can allow an attacker to cause a service failure...

PT-2022-5919

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to a use-after-free vulnerability in the Linux kernel's NFS file system driver. This flaw allows a remote attacker to cause a denial of service. The vulnerability is...

The vulnerability of the file system driver of Windows operating systems allows a hacker to execute arbitrary code with system privileges.

The vulnerability of the file system driver of Windows operating systems is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code with system privileges...