Lucene search
+L

2687 matches found

Positive Technologies
Positive Technologies
•added 2025/11/28 12:00 a.m.•17 views

PT-2025-48334

Netskope was notified about a potential gap in its agent NS Client on Windows systems. If this gap is successfully exploited, a local, authenticated user with Administrator privileges can improperly load the driver as a generic kernel service. This triggers the flaw, causing a system crash...

5.9CVSS6.6AI score0.00126EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2025/11/27 12:00 a.m.•7 views

The vulnerability of the Kernel Driver component of the NVIDIA GPU Display Driver software allows a hacker to cause a system failure.

The vulnerability of the Kernel Driver component of the NVIDIA GPU Display Driver software-related software driver is related to pointer dereferencing errors. Exploiting this vulnerability can allow an attacker to cause a system failure...

5.5CVSS5.8AI score0.00147EPSS
SaveExploits0References4Affected Software18
RedhatCVE
RedhatCVE
•added 2025/11/26 4:56 p.m.•13 views

CVE-2025-58407

Kernel or driver software installed on a Guest VM may post improper commands to the GPU Firmware to exploit a TOCTOU race condition and trigger a read and/or write of data outside the allotted memory escaping the virtual machine...

7.4CVSS7AI score0.00193EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2025/11/20 12:00 a.m.•19 views

TencentOS Server 4: kernel (TSSA-2025:0348)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2025:0348 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities...

9.8CVSS6.7AI score0.00685EPSS
SaveExploits0References101
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/17 12:00 a.m.•3 views

CVE-2025-58407: Time-of-check Time-of-use (TOCTOU) Race Condition

Kernel or driver software installed on a Guest VM may post improper commands to the GPU Firmware to exploit a TOCTOU race condition and trigger a read and/or write of data outside the allotted memory escaping the virtual machine...

7.4CVSS5.8AI score0.00193EPSS
SaveExploits0References1
Redos
Redos
•added 2025/11/17 12:00 a.m.•19 views

ROS-20251117-01

A vulnerability in the NVIDIA display driver is related to NULL pointer dereferencing. Exploitation of the vulnerability could allow an attacker to cause a denial of service A vulnerability in the Guest driver and Virtual GPU Manager components of the NVIDIA GPU driver is related to pointer...

5.5CVSS5.8AI score0.00218EPSS
SaveExploits0
BDU FSTEC
BDU FSTEC
•added 2025/11/17 12:00 a.m.•13 views

The vulnerability of the amdgpupci_error_detected() function in the driver/gpu/drm/amd/amdgpu/amdgpu_device.c file of the Linux operating system’s AMD GPU kernel support module allows a malicious actor to cause a service failure.

The vulnerability of the amdgpupcierrordetected function in the driver/gpu/drm/amd/amdgpu/amdgpudevice.c file of the Direct Rendering Infrastructure DRI support driver for AMD GPU cores in the Linux operating system is related to improper resource locking. Exploiting this vulnerability can allow ...

5.5CVSS6.5AI score0.00206EPSS
SaveExploits0References8Affected Software2
BDU FSTEC
BDU FSTEC
•added 2025/11/17 12:00 a.m.•14 views

The vulnerability in the mac80211_hwsim_beacon() function of the drivers/net/wireless/mac80211_hwsim.c module of the Linux kernel driver for wireless adapter support allows a hacker to cause a service failure.

The vulnerability of the mac80211hwsimbeacon function in the drivers/net/wireless/mac80211hwsim.c module of the Linux wireless adapter driver support module is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to cause a service failure...

5.5CVSS6.1AI score0.00239EPSS
SaveExploits0References11Affected Software1
BDU FSTEC
BDU FSTEC
•added 2025/11/16 12:00 a.m.•11 views

The vulnerability of the __mdiobus_register() function in the drivers/net/phy/mdio_bus.c module of the Linux kernel-based network adapter driver framework allows a attacker to cause a service failure.

The vulnerability of the mdiobusregister function in the drivers/net/phy/mdiobus.c module of the Linux kernel-based network adapter driver framework is related to the lack of memory release after the effective lifespan of the function has ended. Exploiting this vulnerability could allow an attack...

5.5CVSS6.6AI score0.00234EPSS
SaveExploits0References20Affected Software1
BDU FSTEC
BDU FSTEC
•added 2025/11/16 12:00 a.m.•14 views

The vulnerability of the msm_edp_ctrl_power() function in the drivers/gpu/drm/msm/edp/edp_ctrl.c file of the Direct Rendering Infrastructure (DRI) driver for the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the msmedpctrlpower function in the drivers/gpu/drm/msm/edp/edpctrl.c file, a driver for supporting Direct Rendering Infrastructure DRI in Linux kernel, is related to pointer manipulation. Exploiting this vulnerability can allow an attacker to cause a service failure...

5.5CVSS6.4AI score0.00226EPSS
SaveExploits0References19Affected Software1
BDU FSTEC
BDU FSTEC
•added 2025/11/16 12:00 a.m.•15 views

The vulnerability of the hfi1_ipoib_txreq_init() function in the drivers/infiniband/hw/hfi1/ipoib_tx.c module of the Linux operating system’s InfiniBand driver allows a attacker to cause a service failure.

The vulnerability of the hfi1ipoibtxreqinit function in the drivers/infiniband/hw/hfi1/ipoibtx.c module of the Linux kernel’s InfiniBand support driver is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to cause a service failure...

5.5CVSS6.1AI score0.00206EPSS
SaveExploits0References6Affected Software1
BDU FSTEC
BDU FSTEC
•added 2025/11/16 12:00 a.m.•30 views

The vulnerability of the ksz_switch_remove() function in the drivers/net/dsa/microchip/ksz_common.c file of the DSA kernel support driver for the Linux operating system allows a attacker to cause a service failure.

The vulnerability of the kszswitchRemove function in the drivers/net/dsa/microchip/kszcommon.c file of the DSA kernel support driver for the Linux operating system is related to the assignment of pointers. Exploiting this vulnerability could allow an attacker to cause a service failure...

5.5CVSS6.1AI score0.00225EPSS
SaveExploits0References9Affected Software1
BDU FSTEC
BDU FSTEC
•added 2025/11/16 12:00 a.m.•14 views

The vulnerability of the `coretempremove_core()` function in the `drivers/hwmon/coretemp.c` driver for monitoring Linux kernel equipment allows a attacker to cause a service failure.

The vulnerability of the coretempremovecore function in the drivers/hwmon/coretemp.c file, a driver for monitoring the Linux kernel, is related to the use of pointers. Exploiting this vulnerability could allow an attacker to cause a system failure...

5.5CVSS6.5AI score0.00236EPSS
SaveExploits0References19Affected Software1
BDU FSTEC
BDU FSTEC
•added 2025/11/16 12:00 a.m.•16 views

The vulnerability of the wilc_wlan_init() function in the drivers/net/wireless/microchip/wilc1000/wlan.c file of the Microchip driver module allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information in Linux operating system-based devices.

The vulnerability of the wilcwlaninit function in the drivers/net/wireless/microchip/wilc1000/wlan.c file of the Microchip Linux kernel driver for wireless adapter support is related to unvalidated array indexing. Exploiting this vulnerability could allow an attacker to compromise the...

5.6CVSS6.9AI score0.00246EPSS
SaveExploits0References13Affected Software1
BDU FSTEC
BDU FSTEC
•added 2025/11/14 12:00 a.m.•12 views

Vulnerability of the amdgpu_umchandle_bad_pages() function in the driver/gpu/drm/amd/amdgpu/amdgpu_umc.c file – This driver is part of the Linux operating system’s Direct Rendering Infrastructure (DRI) support for AMD GPU cores. It allows a hacker to trigger a service failure.

Vulnerability of the amdgpuumchandlebadpages function in the driver/gpu/drm/amd/amdgpu/amdgpuumc.c file – The Linux kernel driver for AMD GPU Direct Rendering Infrastructure supports the reallocation of previously released memory. Exploiting this vulnerability can allow an attacker to cause a...

4.4CVSS6.5AI score0.00207EPSS
SaveExploits0References8Affected Software3
BDU FSTEC
BDU FSTEC
•added 2025/11/14 12:00 a.m.•18 views

Vulnerability of the __alloc_range() function in the drivers/gpu/drm/drm_buddy.c module – The DRI driver for Linux’s kernel, which allows attackers to compromise the integrity of protected information.

Vulnerability of the allocrange function in the drivers/gpu/drm/drmbuddy.c module – The DRI driver for Linux’s kernel-based direct rendering infrastructure is vulnerable due to insufficient handling of exceptional conditions. Exploiting this vulnerability could allow an attacker to compromise the...

3.3CVSS5.8AI score0.00206EPSS
SaveExploits0References9Affected Software2
BDU FSTEC
BDU FSTEC
•added 2025/11/14 12:00 a.m.•13 views

Vulnerability of the process_update_result() function in the drivers/md/dm-vdo/dedupe.c module – A driver for supporting multiple device types (RAID and LVM) in the Linux kernel, which allows a hacker to cause service failure.

Vulnerability of the processupdateresult function in the drivers/md/dm-vdo/dedupe.c module – The driver for supporting multiple devices RAID and LVM in the Linux kernel is vulnerable due to the lack of protection against accessing an uninitialized pointer. Exploiting this vulnerability could allo...

5.5CVSS6AI score0.00214EPSS
SaveExploits0References11Affected Software2
RedhatCVE
RedhatCVE
•added 2025/11/12 5:07 p.m.•14 views

CVE-2025-13032

Double fetch in sandbox kernel driver in Avast/AVG Antivirus 25.3 on windows allows local attacker to escalate privelages via pool overflow...

9.9CVSS6.9AI score0.00248EPSS
SaveExploits0References1
Debian CVE
Debian CVE
•added 2025/11/12 10:23 a.m.•21 views

CVE-2025-40156

In the Linux kernel, the following vulnerability has been resolved: PM / devfreq: mtk-cci: Fix potential error pointer dereference in probe The drv-sramreg pointer could be set to ERRPTR-EPROBEDEFER which would lead to a error pointer dereference. Use ISERRORNULL to check that the pointer is vali...

5.8AI score0.00187EPSS
SaveExploits0
EUVD
EUVD
•added 2025/11/11 6:30 p.m.•14 views

EUVD-2025-93542

Double fetch in sandbox kernel driver in Avast/AVG Antivirus 25.3 on windows allows local attacker to escalate privelages via pool overflow...

9.9CVSS6.4AI score0.00248EPSS
SaveExploits0References2
Rows per page
Query Builder