124 matches found
CVE-2025-21293
CVE-2025-21293 CVE-2025-21293 is an elevation of privilege vulnerability in Active Directory Domain Services. It allows "Network Configuration Operators" to execute code with SYSTEM privileges via Windows Performance Counters. Affected Windows versions include Windows 10, 11, and Server. Microsof...
resmack-fuzz-test
Resmack Fuzz Test This project is an exploration of a feedback-driven fuzzer that uses: ptrace for instrumentation with dynamic memory breakpoints specified by the target process process snapshotting/restoring using /proc/pid/map, /proc/pid/clearrefs, and /proc/pid/pagemap using processvmwritev...
Perfusion
Perfusion On Windows 7 , Windows Server 2008R2 , Windows 8 , and Windows Server 2012 , the registry key of the RpcEptMapper and DnsCache 7/2008R2 only services is configured with weak permissions. Any local user can create a Performance subkey and then leverage the Windows Performance Counters to...
CVE-2026-58089
When a process calls execve2 to execute a setuid or setgid image, hwpmc4 is supposed to detach PMCs owned by unprivileged processes. An inverted check meant that this scenario was not handled properly. An unprivileged local user who has attached PMCs to a process can continue monitoring it after...
CVE-2026-58089 hwpmc fails to detach PMCs during exec credential transitions
When a process calls execve2 to execute a setuid or setgid image, hwpmc4 is supposed to detach PMCs owned by unprivileged processes. An inverted check meant that this scenario was not handled properly. An unprivileged local user who has attached PMCs to a process can continue monitoring it after...
CVE-2026-53370
In the Linux kernel, the following vulnerability has been resolved: perf/x86/intel: Improve validation and configuration of ACR masks Currently there are several issues on the user space ACR mask validation and configuration. - The validation for user space ACR mask attr.config2 is incomplete,...
Linux kernel 安全漏洞
The Linux kernel is the core of the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from the perf/arm-cmn driver not rejecting hardware configurations that are not supported, potentially...
CVE-2026-24082
Memory Corruption when copying data from a freed source while executing performance counter deselect operation...
Amazon Linux 2023 : bpftool6.18, kernel6.18, kernel6.18-devel (ALAS2023-2026-1596)
It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-1596 advisory. In the Linux kernel, the following vulnerability has been resolved: nvme: fix memory allocation in nvmeprreadkeys CVE-2026-23244 In the Linux kernel, the following vulnerability has been...
CVE-2026-25165
Null pointer dereference in Windows Performance Counters allows an authorized attacker to elevate privileges locally...
The vulnerability of monitoring and diagnostic tools for performance counters in Windows operating systems allows attackers to exploit their privileges.
The vulnerability of the performance monitoring and diagnostic tools of the Windows operating system’s Performance Counters is related to pointer aliasing. Exploiting this vulnerability can allow an attacker to enhance their privileges...
EUVD-2026-10628
Null pointer dereference in Windows Performance Counters allows an authorized attacker to elevate privileges locally...
CVE-2026-25165
Null pointer dereference in Windows Performance Counters allows an authorized attacker to elevate privileges locally...
CVE-2026-25165
Null pointer dereference in Windows Performance Counters allows an authorized attacker to elevate privileges locally...
CVE-2026-25165
CVE-2026-25165 is a Windows local privilege escalation affecting Performance Counters. The description notes a local attack with low privileges, no user interaction, and high impact on confidentiality, integrity, and availability. The underlying root cause and affected component details are not p...
CVE-2026-25165 Performance Counters for Windows Elevation of Privilege Vulnerability
...
CVE-2026-25165 Performance Counters for Windows Elevation of Privilege Vulnerability
...
CVE-2026-25165
Null pointer dereference in Windows Performance Counters allows an authorized attacker to elevate privileges locally...
