545 matches found
PT-2024-8307 · Linux +4 · Linux Kernel +4
Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to a use-after-free error in the Linux kernel's SCSI core. This error occurs when the srp exit cmd priv function is called, and it attempts to access resources...
UBUNTU-CVE-2022-1729
A race condition was found the Linux kernel in perfeventopen which can be exploited by an unprivileged user to gain root privileges. The bug allows to build several exploit primitives such as kernel address information leak, arbitrary execution, etc...
Randomizing the KUSER_SHARED_DATA Structure on Windows
Windows 10 made a lot of improvements in Kernel Address Space Layout Randomization KASLR that increases the cost of exploitation, particularly for remote code execution exploits. Many kernel virtual address space VAS locations including kernel stacks, pools, system PTEs etc. are randomized. A...
Randomizing the KUSER_SHARED_DATA Structure on Windows
Windows 10 made a lot of improvements in Kernel Address Space Layout Randomization KASLR that increases the cost of exploitation, particularly for remote code execution exploits. Many kernel virtual address space VAS locations including kernel stacks, pools, system PTEs etc. are randomized. A...
Randomizing the KUSER_SHARED_DATA Structure on Windows
Windows 10 made a lot of improvements in Kernel Address Space Layout Randomization KASLR that increases the cost of exploitation, particularly for remote code execution exploits. Many kernel virtual address space VAS locations including kernel stacks, pools, system PTEs etc. are randomized. A...
PT-2021-8170 · Linux +3 · Linux Kernel +3
Name of the Vulnerable Software and Affected Versions: Linux kernel version 5.15.0 Description: The vulnerability is related to a use-after-free error in the create qp function. This issue can be exploited to potentially elevate privileges in the system. The error occurs when the create qp functi...
CVE-2020-12897
Kernel Pool Address disclosure in AMD Graphics Driver for Windows 10 may lead to KASLR bypass...
HarmonyOS Information Disclosure Vulnerability
Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. An information disclosure vulnerability exists in HarmonyOS prior to version 2.0, which stems from a vulnerability in a component of HarmonyOS that exposes...
CVE-2021-22468
A component of the HarmonyOS has a Exposure of Sensitive Information to an Unauthorized Actor vulnerability. Local attackers may exploit this vulnerability to cause kernel address leakage...
CVE-2021-22468
A component of the HarmonyOS has a Exposure of Sensitive Information to an Unauthorized Actor vulnerability. Local attackers may exploit this vulnerability to cause kernel address leakage...
CVE-2021-22468
A component of the HarmonyOS has a Exposure of Sensitive Information to an Unauthorized Actor vulnerability. Local attackers may exploit this vulnerability to cause kernel address leakage...
Code injection
A component of the HarmonyOS has a Exposure of Sensitive Information to an Unauthorized Actor vulnerability. Local attackers may exploit this vulnerability to cause kernel address leakage...
CVE-2021-22468
CVE-2021-22468 affects a HarmonyOS component exhibiting an information-disclosure vulnerability that can allow a local attacker to induce kernel address leakage. The issue, described as exposing sensitive information to an unauthorized actor, is associated with HarmonyOS and has been documented i...
CVE-2021-26318
A timing and power-based side channel attack leveraging the x86 PREFETCH instructions on some AMD CPUs could potentially result in leaked kernel address space information...
UBUNTU-CVE-2021-26318
A timing and power-based side channel attack leveraging the x86 PREFETCH instructions on some AMD CPUs could potentially result in leaked kernel address space information...
CVE-2021-26318
CVE-2021-26318 corresponds to a timing and power-based side-channel issue on some AMD CPUs that could potentially leak kernel address space information via the x86 PREFETCH instruction. Affected software/hardware: all AMD CPUs (per AMD: Side-channels Related to the x86 PREFETCH Instruction). Root...
Advanced Micro Devices Cpu 信息泄露漏洞
The Advanced Micro Devices Cpu Amd Cpu is an excellent central processor for Amd from Advanced Micro Devices, USA . The Advanced Micro Devices Cpu has a security vulnerability that can be exploited by an attacker to cause kernel address space information disclosure on some AMD cpus utilizing the...
Side-channels Related to the x86 PREFETCH Instruction
Bulletin ID: AMD-SB-1017 Potential Impact: Leaked kernel address space information Severity: Medium Summary Researchers from Graz University of Technology with CISPA Helmholtz Center for Information Security have demonstrated timing and power-based side channel attacks leveraging the x86 PREFETCH...
Huawei EMUI/Magic UI out-of-bounds address access vulnerability
Huawei Emui is an Android-based mobile operating system. Huawei Magic UI is the operating system for Honor phones. Huawei EMUI/Magic UI suffers from an out-of-bounds address access vulnerability, which can be exploited by attackers to cause random kernel address access...