Design/Logic Flaw

When a particular process flow is initiated, an attacker may be able to gain unauthorized elevated privileges on the affected system when having control over a specific file...

Zoom Client < 5.16.0 Multiple Vulnerabilities (ZSB-23049, ZSB-23050, ZSB-23051, ZSB-23052, ZSB-23055) - Linux

The Zoom Client is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:zoom:zoom"; ifdescription...

Zoom Client < 5.16.0 Multiple Vulnerabilities (ZSB-23047, ZSB-23049, ZSB-23050, ZSB-23051, ZSB-23052, ZSB-23055) - Windows

The Zoom Client is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:zoom:zoom"; ifdescription...

CVE-2023-41718

When a particular process flow is initiated, an attacker may be able to gain unauthorized elevated privileges on the affected system when having control over a specific file...

CVE-2023-41718

Ivanti Secure Access Client vulnerable to local privilege escalation (CVE-2023-41718) when a user has control over a specific file. Affected products are Ivanti Secure Access Client versions prior to 22.6R1. The underlying issue is a local privilege escalation vulnerability in the Windows client....

CVE-2023-43588

CVE-2023-43588 describes insufficient control flow management in Zoom Client, potentially allowing an authenticated user to disclose information over a network. The NVD entry lists a CVSS‑3.1 base score of 6.5 (MEDIUM) with Confidentiality impact HIGH, and mentions no exploitation details beyond ...

CVE-2023-43588

Insufficient control flow management in some Zoom clients may allow an authenticated user to conduct an information disclosure via network access...

CVE-2023-24587

Insufficient control flow management in firmware for some IntelR OptaneTM SSD products may allow a privileged user to potentially enable denial of service via local access...

CVE-2023-24587

Insufficient control flow management in firmware for some IntelR OptaneTM SSD products may allow a privileged user to potentially enable denial of service via local access...

CVE-2022-46299

Insufficient control flow management for some Intel Unison software may allow an authenticated user to potentially enable information disclosure via local access...

CVE-2022-46299

Insufficient control flow management for some Intel Unison software may allow an authenticated user to potentially enable information disclosure via local access...

Design/Logic Flaw

Insufficient control flow management for some Intel Unison software may allow an authenticated user to potentially enable information disclosure via local access...

Design/Logic Flaw

Insufficient control flow management in firmware for some IntelR OptaneTM SSD products may allow a privileged user to potentially enable denial of service via local access...

CVE-2023-24587

Insufficient control flow management in firmware for some IntelR OptaneTM SSD products may allow a privileged user to potentially enable denial of service via local access...

CVE-2022-46299

Insufficient control flow management for some Intel Unison software may allow an authenticated user to potentially enable information disclosure via local access...

CVE-2022-46299

Insufficient control flow management for some Intel Unison software may allow an authenticated user to potentially enable information disclosure via local access...

CVE-2022-46299

CVE-2022-46299 — Affected Intel Unison clients suffer from insufficient control flow management, enabling an authenticated user to potentially disclose information via local access. Impact limited to local access scenarios with a high confidentiality impact, per the CVE details. Affected products...

kernel: net/mlx5e: Fix cleanup null-ptr deref on encap lock

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix cleanup null-ptr deref on encap lock During module is unloaded while a peer tc flow is still offloaded, first the peer uplink rep profile is changed to a nic profile, and so neigh encap lock is destroyed. Next duri...

kernel: net: openvswitch: fix flow memory leak in ovs_flow_cmd_new

In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: fix flow memory leak in ovsflowcmdnew Syzkaller reports a memory leak of newflow in ovsflowcmdnew as it is not freed when an allocation of a key fails. BUG: memory leak unreferenced object 0xffff888116668000 siz...

kernel: net/mlx5e: Don't clone flow post action attributes second time

A use-after-free flaw was discovered in the Linux kernel’s mlx5e networking driver. The code erroneously cloned flow post action attributes a second time in mlx5etcpostactadd despite an earlier clone in mlx5ecloneflowattrforpostact. This second clone is not properly updated during neighbor update...