41368 matches found
UBUNTU-CVE-2025-40164
In the Linux kernel, the following vulnerability has been resolved: usbnet: Fix using smpprocessorid in preemptible code warnings Syzbot reported the following warning: BUG: using smpprocessorid in preemptible 00000000 code: dhcpcd/2879 caller is usbnetskbreturn+0x74/0x490...
CVE-2025-40170 net: use dst_dev_rcu() in sk_setup_caps()
In the Linux kernel, the following vulnerability has been resolved: net: use dstdevrcu in sksetupcaps Use RCU to protect accesses to dst-dev from sksetupcaps and skdstgsomaxsize. Also use dstdevrcu in ip6dstmtumaybeforward, and ipdstmtumaybeforward. ip4dsthoplimit can use dstdevnetrcu...
CVE-2025-40159 xsk: Harden userspace-supplied xdp_desc validation
In the Linux kernel, the following vulnerability has been resolved: xsk: Harden userspace-supplied xdpdesc validation Turned out certain clearly invalid values passed in xdpdesc from userspace can pass xp,unalignedvalidatedesc and then lead to UBs or just invalid frames to be queued for xmit...
How Malwarebytes stops the ransomware attack that most security software can’t see
Imagine this scenario: Your protection software is running perfectly. Systems are protected, definitions are up to date, behavioral analysis is active. Then, suddenly, files across your network start getting encrypted. Backups are being deleted. Ransom notes appear across your machines. Your...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from ip6output not using RCU to protect dstdevrcu access, which could lead to reuse after release...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from not properly using the RCU to protect dstdev access, which could lead to reuse after release...
EUVD-2025-93517
Protection mechanism failure for some IntelR CIP software before version WINDCA2.4.0.11001 within Ring 3: User Applications may allow an information disclosure. Unprivileged software adversary with an unauthenticated user combined with a low complexity attack may enable data exposure. This result...
EUVD-2025-84321
Collision in MiniFilter driver in Avast Software Avast Free Antivirus before 25.9 on Windows allows a local attacker with administrative privileges to disable real-time protection and self-defense mechanisms...
CVE-2025-60718
Untrusted search path in Windows Administrator Protection allows an authorized attacker to elevate privileges locally...
CVE-2025-60721
Privilege context switching error in Windows Administrator Protection allows an authorized attacker to elevate privileges locally...
CVE-2025-60721
Privilege context switching error in Windows Administrator Protection allows an authorized attacker to elevate privileges locally...
CVE-2025-60718
Untrusted search path in Windows Administrator Protection allows an authorized attacker to elevate privileges locally...
CVE-2025-60721 Windows Administrator Protection Elevation of Privilege Vulnerability
...
CVE-2025-60721
Privilege context switching error in Windows Administrator Protection allows an authorized attacker to elevate privileges locally...
CVE-2025-60721 Windows Administrator Protection Elevation of Privilege Vulnerability
...
EUVD-2025-93393
Privilege context switching error in Windows Administrator Protection allows an authorized attacker to elevate privileges locally...
CVE-2025-60721
CVE-2025-60721 is a Windows Administrator Protection elevation-of-privilege vulnerability described as a privilege context switching error that could allow an authorized local attacker to elevate privileges. The CVE entry is corroborated by multiple sources in the Connected documents, including M...
CVE-2025-60718 Windows Administrator Protection Elevation of Privilege Vulnerability
...
CVE-2025-60718
CVE-2025-60718 is a Windows Administrator Protection elevation-of-privilege flaw caused by an untrusted search path. Affected software is Windows 11 (24H2 and 25H2); base CVSS v3.1 7.8 (Local, Privilege Escalation, high impact to confidentiality, integrity, and availability). Microsoft advises ap...