21455 matches found
PT-2025-49388
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the exFAT file system within the Linux kernel that can lead to a Denial-of-Service DoS condition. Malformed dentries in an exFAT filesystem can cause the kernel to hang...
UBUNTU-CVE-2025-9640
A flaw was found in Samba, in the vfsstreamsxattr module, where uninitialized heap memory could be written into alternate data streams. This allows an authenticated user to read residual memory content that may include sensitive data, resulting in an information disclosure vulnerability...
PT-2025-42383
Name of the Vulnerable Software and Affected Versions Creative Cloud Desktop versions 6.7.0.278 and earlier Description A Time-of-check Time-of-use TOCTOU Race Condition exists in Creative Cloud Desktop that could allow arbitrary file system write. An attacker with low privileges could exploit th...
QNAP QTS and QuTS hero null pointer dereference vulnerability (CNVD-2025-27564)
QNAP QTS is a NAS operating system developed by QNAPSystems, Inc. designed for network attached storage devices, providing data management, backup, multimedia entertainment, etc. QNAP QuTS hero is an enterprise-grade operating system developed by QNAP for its networked storage devices NAS, which ...
CVE-2025-54271: Time-of-check Time-of-use (TOCTOU) Race Condition
Creative Cloud Desktop versions 6.7.0.278 and earlier are affected by a Time-of-check Time-of-use TOCTOU Race Condition vulnerability that could lead to arbitrary file system write. A low-privileged attacker could exploit the timing between the check and use of a resource, potentially allowing...
PT-2025-42317
Name of the Vulnerable Software and Affected Versions Samba affected versions not specified Description An issue exists in Samba’s vfs streams xattr module where uninitialized heap memory can be written into alternate data streams. This can allow an authenticated user to read residual memory...
EUVD-2025-34389
Windows Resilient File System ReFS Deduplication Service Elevation of Privilege Vulnerability...
EUVD-2025-34290
Windows Resilient File System ReFS Deduplication Service Elevation of Privilege Vulnerability...
EUVD-2025-34302
Use after free in Microsoft Brokering File System allows an unauthorized attacker to elevate privileges locally...
EUVD-2025-34411
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Resilient File System ReFS allows an unauthorized attacker to elevate privileges locally...
EUVD-2025-34421
Use after free in Windows NTFS allows an unauthorized attacker to elevate privileges locally...
CVE-2025-59210
Windows Resilient File System ReFS Deduplication Service Elevation of Privilege Vulnerability...
CVE-2025-59206
Windows Resilient File System ReFS Deduplication Service Elevation of Privilege Vulnerability...
CVE-2025-59206
Windows Resilient File System ReFS Deduplication Service Elevation of Privilege Vulnerability...
CVE-2025-59189
Use after free in Microsoft Brokering File System allows an unauthorized attacker to elevate privileges locally...
CVE-2025-59189
Use after free in Microsoft Brokering File System allows an unauthorized attacker to elevate privileges locally...
CVE-2025-55687
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Resilient File System ReFS allows an unauthorized attacker to elevate privileges locally...
CVE-2025-55687
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Resilient File System ReFS allows an unauthorized attacker to elevate privileges locally...