27173 matches found
CVE-2020-37234 Internet Download Manager 6.38.12 Scheduler Buffer Overflow
Internet Download Manager 6.38.12 contains a buffer overflow vulnerability in the Scheduler component that allows local attackers to crash the application by supplying oversized input. Attackers can paste malicious data exceeding 5000 bytes into the 'Open the following file when done' field to...
CVE-2020-37232
The CVE-2020-37232 entry concerns Advanced System Care Service 13.0.0.157, which has an unquoted service path in the AdvancedSystemCareService13 binary. This allows local attackers to escalate privileges by placing a malicious executable in the system root that will be launched with LocalSystem p...
CVE-2020-37231 Privacy Drive 3.17.0 Unquoted Service Path Privilege Escalation
Privacy Drive 3.17.0 contains an unquoted service path vulnerability in the pdsvc.exe service binary that allows local attackers to escalate privileges by exploiting the service startup process. Attackers can place malicious executables in the unquoted path directories to execute arbitrary code...
CVE-2020-37230 Syncplify.me Server! 5.0.37 Unquoted Service Path Privilege Escalation
Syncplify.me Server! 5.0.37 contains an unquoted service path vulnerability in the SMWebRestServicev5 service that allows local attackers to escalate privileges by exploiting the unquoted binary path. Attackers can insert a malicious executable into the service path and execute it with LocalSyste...
CVE-2025-48519
An improper input validation vulnerability within the AMD Platform Management Framework PMF driver can allow a local attacker to read or write Out-of-Bounds, potentially resulting in privilege escalation...
PT-2026-41429
OKI sPSV Port Manager 1.0.41 contains an unquoted service path vulnerability in the sPSVOpLclSrv service that allows local attackers to escalate privileges by inserting executable files into the unquoted path. Attackers can place a malicious executable in a directory within the service path that...
CVE-2026-43328
A flaw was found in the Linux kernel's cpufreq governor. An error in the cpufreqdbsgovernorinit function's cleanup path, specifically when kobjectinitandadd fails, causes a double free of memory. This memory corruption vulnerability can be exploited by a local attacker, potentially leading to...
CVE-2026-20718
A flaw was found in IntelR NPU Driver software installers. Incorrect default permissions may allow an unprivileged, authenticated local attacker to escalate privileges. This high-complexity attack requires user interaction and can lead to significant impacts on the confidentiality, integrity, and...
CVE-2025-0044
An out-of-bounds read in power management firmware by a malicious local attacker with low privileges could potentially lead to a partial loss of confidentiality and availability...
CVE-2025-29944
A buffer overflow vulnerability within AMD Sensor Fusion Hub Driver can allow a local attacker to write out of bounds, potentially resulting in denial of service or crash...
EUVD-2025-209880
An out-of-bounds read in power management firmware by a malicious local attacker with low privileges could potentially lead to a partial loss of confidentiality and availability...
CVE-2025-0044
CVE-2025-0044 describes an out-of-bounds read in power management firmware. A malicious local attacker with low privileges could incur a partial loss of confidentiality and availability. Affected: power management firmware (component-level detail not provided). Root cause: out-of-bounds read. Imp...
CVE-2025-0044
An out-of-bounds read in power management firmware by a malicious local attacker with low privileges could potentially lead to a partial loss of confidentiality and availability...
CVE-2025-0044
An out-of-bounds read in power management firmware by a malicious local attacker with low privileges could potentially lead to a partial loss of confidentiality and availability...
CVE-2025-48521
Improper input validation in the AMD Secure Processor ASP PCI driver could allow a local attacker to trigger a Use-After-Free UAF condition, potentially resulting in a loss of platform integrity or crash...
CVE-2025-0045
Improper Input validation in the AMD Secure Processor ASP PCI driver may allow a local attacker to create a buffer overflow condition, potentially resulting in a crash or denial of service...
CVE-2025-48519
An improper input validation vulnerability within the AMD Platform Management Framework PMF driver can allow a local attacker to read or write Out-of-Bounds, potentially resulting in privilege escalation...
CVE-2025-29944
A buffer overflow vulnerability within AMD Sensor Fusion Hub Driver can allow a local attacker to write out of bounds, potentially resulting in denial of service or crash...