973 matches found
Win32k Information Disclosure Vulnerability
An information disclosure vulnerability exists when the win32k component improperly provides kernel information. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user’s system. To exploit this vulnerability, an attacker would have to log ...
PT-2019-4169
Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description The issue is related to an information disclosure vulnerability in the win32k component, which improperly provides kernel information. This could allow an attacker to disclose protected...
CVE-2019-1469: Exposure of Sensitive Information to an Unauthorized Actor
An information disclosure vulnerability exists when the win32k component improperly provides kernel information, aka 'Win32k Information Disclosure Vulnerability'...
CVE-2019-19036
A NULL pointer dereference flaw in the btrfsrootnode in fs/btrfs/ctree.c may occur if the rcudereference function return is not validated in time of failure. This flaw could allow an attacker to crash the system or leak internal kernel information. Mitigation Mitigation for this issue is either n...
CVE-2019-1440
An information disclosure vulnerability exists when the win32k component improperly provides kernel information, aka 'Win32k Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-1436...
CVE-2019-1436
An information disclosure vulnerability exists when the win32k component improperly provides kernel information, aka 'Win32k Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-1440...
Information disclosure
An information disclosure vulnerability exists when the win32k component improperly provides kernel information, aka 'Win32k Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-1440...
CVE-2019-1440
An information disclosure vulnerability exists when the win32k component improperly provides kernel information, aka 'Win32k Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-1436...
PT-2019-3884
Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description The issue is related to an information disclosure problem in the win32k component, which can improperly provide kernel information. This can allow an attacker to obtain sensitive information...
PT-2019-3888
Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description The issue is related to an information disclosure problem in the win32k component, which can improperly provide kernel information. This can allow an attacker to obtain sensitive information...
CVE-2019-1436: Exposure of Sensitive Information to an Unauthorized Actor
An information disclosure vulnerability exists when the win32k component improperly provides kernel information, aka 'Win32k Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-1440...
CVE-2019-1440: Exposure of Sensitive Information to an Unauthorized Actor
An information disclosure vulnerability exists when the win32k component improperly provides kernel information, aka 'Win32k Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-1436...
kernel: Heap address information leak while using L2CAP_GET_CONF_OPT
A flaw was found in the Linux kernel's implementation of Logical Link Control and Adaptation Protocol L2CAP, part of the Bluetooth stack. An attacker, within the range of standard Bluetooth transmissions, can create and send a specially crafted packet. The response to this specially crafted packe...
CVE-2019-16232
A NULL pointer dereference flaw may occur in the Linux kernel’s drivers/net/wireless/marvell/libertas/ifsdio.c function, if the allocworkqueue function return is not validated in time of failure. This flaw could allow an attacker to crash the system or leak kernel internal information. Mitigation...
Amazon Linux 2 : kernel (ALAS-2019-1253)
There is a newly discovered variant side-channel attack of Spectre V1 which leverages SWAPGS instructions to bypass KPTI/KVA mitigations. This could lead to a kernel information disclosure. CVE-2019-1125 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...
Medium: kernel
Issue Overview: There is a newly discovered variant side-channel attack of Spectre V1 which leverages SWAPGS instructions to bypass KPTI/KVA mitigations. This could lead to a kernel information disclosure. CVE-2019-1125 Affected Packages: kernel Note: This advisory is applicable to Amazon Linux 2...
Medium: kernel
Issue Overview: There is a newly discovered variant side-channel attack of Spectre V1 which leverages SWAPGS instructions to bypass KPTI/KVA mitigations. This could lead to a kernel information disclosure Affected Packages: kernel Issue Correction: Run yum update kernel or yum update --advisory...
CVE-2019-1096
An information disclosure vulnerability exists when the win32k component improperly provides kernel information, aka 'Win32k Information Disclosure Vulnerability'...
Information disclosure
An information disclosure vulnerability exists when the win32k component improperly provides kernel information, aka 'Win32k Information Disclosure Vulnerability'...