PT-2024-10291

Name of the Vulnerable Software and Affected Versions macOS versions prior to 15.2 Description The issue is related to a configuration problem that has been addressed with additional restrictions. It allows an app to modify protected parts of the file system. The vulnerability can be exploited by...

CLSA-2024-1731605761 Fix of 67 CVEs

CVE-url: https://ubuntu.com/security/CVE-2024-42265 - protect the fetch of -fdfd in dodup2 from mispredictions CVE-url: https://ubuntu.com/security/CVE-2024-47669 - nilfs2: fix state management in error path of log writing function CVE-url: https://ubuntu.com/security/CVE-2023-52918 - media: pci:...

kernel: drivers: core: synchronize really_probe() and dev_uevent()

This CVE has been marked as Rejected by the assigning CNA...

Microsoft Windows Kernel Mode Drivers 安全漏洞

Microsoft Windows Kernel Mode Drivers is a Windows kernel mode driver from Microsoft Corporation USA. A security vulnerability exists in Microsoft Windows Kernel Mode Drivers. An attacker could exploit the vulnerability to obtain sensitive information. The following products and editions are...

Microsoft Windows Kernel Mode Drivers 资源管理错误漏洞

Microsoft Windows Kernel Mode Drivers is a Windows kernel mode driver from Microsoft Corporation USA. A resource management error vulnerability exists in Microsoft Windows Kernel Mode Drivers. An attacker could exploit the vulnerability to elevate privileges. The following products and versions a...

kernel: drivers: core: synchronize really_probe() and dev_uevent()

This CVE has been marked as Rejected by the assigning CNA...

Microsoft Windows Kernel Mode Drivers 安全漏洞

Microsoft Windows Kernel Mode Drivers is a Windows kernel mode driver from Microsoft Corporation USA. A security vulnerability exists in Microsoft Windows Kernel Mode Drivers. An attacker could exploit the vulnerability to obtain sensitive information. The following products and editions are...

PT-2024-29425 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue is related to kernel drivers peeking into memory, referred to as PhysMeme. There is no detailed information about the issue, its impact, or th...

Microsoft Windows Kernel Mode Drivers 安全漏洞

Microsoft Windows Kernel Mode Drivers is a Windows kernel mode driver from Microsoft Corporation USA. A security vulnerability exists in Microsoft Windows Kernel Mode Drivers. An attacker could exploit the vulnerability to elevate privileges. The following products and versions are affected:Windo...

Microsoft Windows Kernel Mode Drivers 缓冲区错误漏洞

Microsoft Windows Kernel Mode Drivers is a Windows kernel mode driver from Microsoft Corporation USA. A buffer error vulnerability exists in Microsoft Windows Kernel Mode Drivers. An attacker could exploit the vulnerability to elevate privileges. The following products and versions are...

The vulnerability of the gswipremove() function in Lantiq/Intel GSWIP kernel drivers for Linux operating systems allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the gswipremove function in the drivers/net/dsa/lantiqgswip.c file of the Lantiq/Intel GSWIP driver for the Linux operating system is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the...

The vulnerability of the UnserializePropertySet() function in the Kernel-mode operating system drivers of Windows, which allows a hacker to exploit their privileges.

The vulnerability of the UnserializePropertySet function in the Kernel-mode operating system drivers of Windows is related to the assignment of an untrusted pointer. Exploiting this vulnerability could allow an attacker to gain increased privileges...

Vulnerabilities fixed in Microsoft Windows

Microsoft has fixed vulnerabilities in Windows. A malicious party can exploit the vulnerabilities to carry out attacks that can lead to the following categories of damage: - Denial-of-Service DoS - Circumvention of security measure - Remote code execution Administrator/Root rights - Remote code...

VulnCheck KEV: CVE-2024-4610

Arm Bifrost and Valhall GPU kernel drivers contain a use-after-free vulnerability that allows a local, non-privileged user to make improper GPU memory processing operations to gain access to already freed memory...

Linux kernel security vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel, which stems from a vulnerability in the Drivers:hv:vmbus module...

[SECURITY] Fedora 38 Update: tpm2-tss-4.0.2-1.fc38

tpm2-tss is a software stack supporting Trusted Platform ModuleTPM 2.0 syst em APIs. It sits between TPM driver and applications, providing TPM2.0 specified APIs for applications to access TPM module through kernel TPM drivers...

The vulnerability of the DVFS (Dynamic Voltage and Frequency Scaling) function in the Tegra 30 embedded system operating system drivers allows a hacker to cause a service failure.

The vulnerability of the DVFS Dynamic Voltage and Frequency Scaling function in the Tegra 30 embedded system’s Linux kernel drivers is related to improper cleaning or release of resources. Exploiting this vulnerability can allow an attacker to cause service failures...

Buffer overflow

Out-of-bounds Write vulnerability in Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows a local non-privileged user to make improper GPU memory processing operations. Depending on the configuration of the Mali GPU Kernel...

CVE-2023-5643

Summary (CVE-2023-5643) : An out-of-bounds write vulnerability exists in Arm Mali GPU kernel drivers (Bifrost, Valhall) and Arm 5th Gen GPU Architecture Kernel Driver. The issue allows a local, non-privileged user to trigger improper GPU memory processing, potentially writing outside buffer bound...

Vulnerabilities fixed in Microsoft Windows

Microsoft has fixed vulnerabilities in Windows. A malicious party can exploit the vulnerabilities to launch attacks execute attacks that can lead to the following categories of damage: Denial-of-Service DoS. Remote code execution User Rights Spoofing Access to system data Increased user privilege...