449 matches found
Microsoft Windows ALPC 竞争条件问题漏洞
Microsoft Windows ALPC is an inter-process communication tool for high-speed messaging from Microsoft Corporation USA. A Competing Conditions Issue vulnerability exists in Microsoft Windows ALPC, which can be exploited by a local attacker to elevate privileges on a system...
UBUNTU-CVE-2021-23556
The package guake before 3.8.5 are vulnerable to Exposed Dangerous Method or Function due to the exposure of executecommand and executecommandbyuuid methods via the d-bus interface, which makes it possible for a malicious user to run an arbitrary command via the d-bus method. Note: Exploitation...
Mozilla: Use-after-free in WebGPU IPC Framework
An unexpected message in the WebGPU IPC framework could lead to an exploitable sandbox escape and a use-after-free issue. An attacker with enough privileges could exploit this flaw leading to a complete system compromise...
CVE-2022-24505
Windows ALPC Elevation of Privilege Vulnerability...
Mozilla Firefox 资源管理错误漏洞
Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. A resource management error vulnerability exists in Mozilla Firefox versions prior to 97, which stems from a post-release usage error when processing messages in the WebGPU IPC framework. An attacker...
PT-2021-8042 · Linux +4 · Linux Kernel +4
Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 5.17-rc1 Description: The issue is related to an information leak flaw in the Linux kernel's TIPC protocol subsystem. This flaw occurs due to uninitialized memory when a user sends a TIPC datagram to one or more...
PT-2021-24229 · Avast · Avast Antivirus
Name of the Vulnerable Software and Affected Versions: Avast Antivirus versions prior to 20.4 Description: A privilege escalation issue in the Sandbox component allows local sandboxed code to gain elevated privileges by using system IPC interfaces, potentially leading to the acquisition of SYSTEM...
PT-2021-7581 · Apple · Apple Macos
Name of the Vulnerable Software and Affected Versions: macOS versions prior to 12.4 Description: The issue is related to a sandboxed process that may be able to circumvent sandbox restrictions. This is due to insufficient access control when handling XPC messages in the LaunchServices service of...
Important: kernel-livepatch-5.10.62-55.141
Issue Overview: A memory leak flaw in the Linux kernel's hugetlbfs memory usage was found in the way the user maps some regions of memory twice using shmget which are aligned to PUD alignment with the fault of some of the memory pages. A local user could use this flaw to get unauthorized access t...
CVE-2021-44680
An issue 4 of 6 was discovered in Veritas Enterprise Vault through 14.1.2. On start-up, the Enterprise Vault application starts several services that listen on random .NET Remoting TCP ports for possible commands from client applications. These TCP services can be exploited due to deserialization...
CVE-2021-44680
An issue 4 of 6 was discovered in Veritas Enterprise Vault through 14.1.2. On start-up, the Enterprise Vault application starts several services that listen on random .NET Remoting TCP ports for possible commands from client applications. These TCP services can be exploited due to deserialization...
CVE-2021-44679
An issue 3 of 6 was discovered in Veritas Enterprise Vault through 14.1.2. On start-up, the Enterprise Vault application starts several services that listen on random .NET Remoting TCP ports for possible commands from client applications. These TCP services can be exploited due to deserialization...
kernel: Insufficient validation of user-supplied sizes for the MSG_CRYPTO message type
A flaw was discovered in the cryptographic receive code in the Linux kernel's implementation of transparent interprocess communication. An attacker, with the ability to send TIPC messages to the target, can corrupt memory and escalate privileges on the target system...
kernel: Insufficient validation of user-supplied sizes for the MSG_CRYPTO message type
A flaw was discovered in the cryptographic receive code in the Linux kernel's implementation of transparent interprocess communication. An attacker, with the ability to send TIPC messages to the target, can corrupt memory and escalate privileges on the target system...
kernel: Insufficient validation of user-supplied sizes for the MSG_CRYPTO message type
A flaw was discovered in the cryptographic receive code in the Linux kernel's implementation of transparent interprocess communication. An attacker, with the ability to send TIPC messages to the target, can corrupt memory and escalate privileges on the target system...
kernel: Insufficient validation of user-supplied sizes for the MSG_CRYPTO message type
A flaw was discovered in the cryptographic receive code in the Linux kernel's implementation of transparent interprocess communication. An attacker, with the ability to send TIPC messages to the target, can corrupt memory and escalate privileges on the target system...
kernel: Insufficient validation of user-supplied sizes for the MSG_CRYPTO message type
A flaw was discovered in the cryptographic receive code in the Linux kernel's implementation of transparent interprocess communication. An attacker, with the ability to send TIPC messages to the target, can corrupt memory and escalate privileges on the target system...
kernel: Insufficient validation of user-supplied sizes for the MSG_CRYPTO message type
A flaw was discovered in the cryptographic receive code in the Linux kernel's implementation of transparent interprocess communication. An attacker, with the ability to send TIPC messages to the target, can corrupt memory and escalate privileges on the target system...
kernel: Insufficient validation of user-supplied sizes for the MSG_CRYPTO message type
A flaw was discovered in the cryptographic receive code in the Linux kernel's implementation of transparent interprocess communication. An attacker, with the ability to send TIPC messages to the target, can corrupt memory and escalate privileges on the target system...
USN-5135-1 linux, linux-aws, linux-aws-5.11, linux-azure, linux-azure-5.11, linux-gcp, linux-gcp-5.11, linux-hwe-5.11, linux-kvm, linux-oem-5.13, linux-oracle, linux-oracle-5.11, linux-raspi vulnerability
It was discovered that the Linux kernel did not properly account for the memory usage of certain IPC objects. A local attacker could use this to cause a denial of service memory exhaustion...