2687 matches found
The vulnerability of the `nvme_fc_create_association()` function in the drivers/nvme/host/fc.c module of the Linux operating system’s NVME kernel driver allows a attacker to cause a service failure.
The vulnerability of the nvmefccreateassociation function in the drivers/nvme/host/fc.c file of the Linux kernel’s NVME driver is related to the lack of synchronization. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the do_rbd_add() function in the drivers/block/rbd.c module of the Linux kernel’s block devices driver allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the dorbdadd function in the drivers/block/rbd.c module of the Linux kernel’s block devices driver is related to the reutilization of previously freed memory, as a result of the release of the rbddev structure’s fields spec and opts. Exploiting this vulnerability could allow ...
The vulnerability in the drivers/scsi/mpi3mr/mpi3mr_fw.c file of the Linux operating system’s SCSI kernel driver allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the drivers/scsi/mpi3mr/mpi3mrfw.c module of the Linux operating system’s SCSI kernel device driver is related to accessing memory beyond the permissible buffer data size due to computational errors. Exploiting this vulnerability could allow an attacker to compromise the...
The vulnerability of the phy_config_inband() function in the drivers/net/phy/phy.c file of the Linux physical layer network driver kernel module allows a hacker to cause a service failure.
The vulnerability of the phyconfiginband function in the drivers/net/phy/phy.c file of the Linux physical layer network driver is related to mutual locking. Exploiting this vulnerability could allow a attacker to cause a service failure...
EUVD-2025-208750
A local attacker can bypass OpenEDR's 2.5.1.0 self-defense mechanism by renaming a malicious executable to match a trusted process name e.g., csrss.exe, edrsvc.exe, edrcon.exe. This allows unauthorized interaction with the OpenEDR kernel driver, granting access to privileged functionality such as...
CVE-2025-69784
A local, non-privileged attacker can abuse a vulnerable IOCTL interface exposed by the OpenEDR 2.5.1.0 kernel driver to modify the DLL injection path used by the product. By redirecting this path to a user-writable location, an attacker can cause OpenEDR to load an attacker-controlled DLL into...
CVE-2025-69783
A local attacker can bypass OpenEDR's 2.5.1.0 self-defense mechanism by renaming a malicious executable to match a trusted process name e.g., csrss.exe, edrsvc.exe, edrcon.exe. This allows unauthorized interaction with the OpenEDR kernel driver, granting access to privileged functionality such as...
CVE-2025-69784
A local, non-privileged attacker can exploit a vulnerable IOCTL interface in the OpenEDR 2.5.1.0 kernel driver to modify the product's DLL injection path . By redirecting this path to a user-writable location, an attacker can force OpenEDR to load an attacker-controlled DLL into high-privilege pr...
CVE-2025-69783
A local attacker can bypass OpenEDR's 2.5.1.0 self-defense mechanism by renaming a malicious executable to match a trusted process name e.g., csrss.exe, edrsvc.exe, edrcon.exe. This allows unauthorized interaction with the OpenEDR kernel driver, granting access to privileged functionality such as...
CVE-2025-69784: Uncontrolled Search Path Element
A local, non-privileged attacker can abuse a vulnerable IOCTL interface exposed by the OpenEDR 2.5.1.0 kernel driver to modify the DLL injection path used by the product. By redirecting this path to a user-writable location, an attacker can cause OpenEDR to load an attacker-controlled DLL into...
CVE-2025-69784
A local, non-privileged attacker can abuse a vulnerable IOCTL interface exposed by the OpenEDR 2.5.1.0 kernel driver to modify the DLL injection path used by the product. By redirecting this path to a user-writable location, an attacker can cause OpenEDR to load an attacker-controlled DLL into...
CVE-2025-69783
OpenEDR version 2.5.1.0 contains a security vulnerability where a local attacker can bypass the software's self-defense mechanism . By renaming a malicious executable to match a trusted process name (such as csrss.exe, edrsvc.exe, or edrcon.exe), an attacker can gain unauthorized interaction with...
The vulnerability of the acpi_ns_walk_namespace() function in the drivers/acpi/acpica/nswalk.c driver for the ACPI driver (an extended configuration and power management interface) in the Linux kernel allows a malicious actor to cause a service failure.
The vulnerability of the acpinswalknamespace function in the drivers/acpi/acpica/nswalk.c driver of the ACPI driver an extended configuration and power management interface of the Linux kernel is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a...
CVE-2025-69783: Execution with Unnecessary Privileges
A local attacker can bypass OpenEDR's 2.5.1.0 self-defense mechanism by renaming a malicious executable to match a trusted process name e.g., csrss.exe, edrsvc.exe, edrcon.exe. This allows unauthorized interaction with the OpenEDR kernel driver, granting access to privileged functionality such as...
CVE-2025-69784
A local, non-privileged attacker can abuse a vulnerable IOCTL interface exposed by the OpenEDR 2.5.1.0 kernel driver to modify the DLL injection path used by the product. By redirecting this path to a user-writable location, an attacker can cause OpenEDR to load an attacker-controlled DLL into...
The vulnerability of the Multiple UNC Provider Kernel Driver in Windows operating systems allows attackers to gain increased privileges.
The vulnerability of the Multiple UNC Provider Kernel Driver in Windows operating systems is related to operations that go beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...
The vulnerability of the drivers/net/ethernet/mellanox/mlx5 kernel component of the Linux operating system, which allows a hacker to cause a service failure.
The vulnerability of the drivers/net/ethernet/mellanox/mlx5 kernel component of the Linux operating system is related to insufficient checking of the status of shared resources. Exploiting this vulnerability can allow an attacker to cause service failures...
CVE-2026-24283 Multiple UNC Provider Kernel Driver Elevation of Privilege Vulnerability
...
CVE-2026-24283
CVE-2026-24283 involves a local elevation-of-privilege in the UNC Provider Kernel Driver. The vulnerability is rated HIGH with CVSS 3.1: 8.8, impacting confidentiality, integrity, and availability at HIGH levels, exploitable with LOCAL attack vector and LOW complexity, requiring LOW privileges an...
