CVE-2022-25477

Vulnerability in Realtek RtsPer driver for PCIe Card Reader RtsPer.sys before 10.0.22000.21355 and Realtek RtsUer driver for USB Card Reader RtsUer.sys before 10.0.22000.31274 leaks driver logs that contain addresses of kernel mode objects, weakening KASLR...

CVE-2022-25478

Vulnerability in Realtek RtsPer driver for PCIe Card Reader RtsPer.sys before 10.0.22000.21355 and Realtek RtsUer driver for USB Card Reader RtsUer.sys before 10.0.22000.31274 provides read and write access to the PCI configuration space of the device...

CVE-2022-25479

Vulnerability in Realtek RtsPer driver for PCIe Card Reader RtsPer.sys before 10.0.22000.21355 and Realtek RtsUer driver for USB Card Reader RtsUer.sys before 10.0.22000.31274 allows for the leakage of kernel memory from both the stack and the heap...

CVE-2022-25478

Vulnerability in Realtek RtsPer driver for PCIe Card Reader RtsPer.sys before 10.0.22000.21355 and Realtek RtsUer driver for USB Card Reader RtsUer.sys before 10.0.22000.31274 provides read and write access to the PCI configuration space of the device...

CVE-2022-25477

Vulnerability in Realtek RtsPer driver for PCIe Card Reader RtsPer.sys before 10.0.22000.21355 and Realtek RtsUer driver for USB Card Reader RtsUer.sys before 10.0.22000.31274 leaks driver logs that contain addresses of kernel mode objects, weakening KASLR...

CVE-2022-25480

Vulnerability in Realtek RtsPer driver for PCIe Card Reader RtsPer.sys before 10.0.22000.21355 and Realtek RtsUer driver for USB Card Reader RtsUer.sys before 10.0.22000.31274 allows writing to kernel memory beyond the SystemBuffer of the IRP...

Various Realtek products Security breaches

Realtek RtsPer driver for PCIe Card Reader and Realtek RtsUer driver for USB Card Reader are both a card reader driver from Realtek Semiconductor Realtek of China. A security vulnerability exists in several Realtek products that originates in kernel memory outside of the SystemBuffer, which allow...

Realtek RtsPer driver for PCIe Card Reader and Realtek RtsUer driver for USB Card Reader Security Vulnerabilities

Realtek RtsPer driver for PCIe Card Reader and Realtek RtsUer driver for USB Card Reader are both a card reader driver from Realtek Semiconductor Realtek of China. A security vulnerability exists in Realtek RtsPer driver for PCIe Card Reader and Realtek RtsUer driver for USB Card Reader. This...

Various Realtek products Security breaches

Realtek RtsPer driver for PCIe Card Reader and Realtek RtsUer driver for USB Card Reader are both a card reader driver from Realtek Semiconductor Realtek, a Chinese company. A security vulnerability exists in several Realtek products. An attacker could exploit the vulnerability to leak kernel...

CVE-2022-25479

Overview: CVE-2022-25479 describes memory leakage in Realtek RtsPer.sys (PCIe Card Reader) and RtsUer.sys (USB Card Reader) drivers, before 10.0.22000.21355 and 10.0.22000.31274 respectively. Root cause / impact: memory release errors allow leakage of kernel memory from stack and heap; exploitati...

Realtek RtsPer driver for PCIe Card Reader and Realtek RtsUer driver for USB Card Reader Security Vulnerabilities

Realtek RtsPer driver for PCIe Card Reader and Realtek RtsUer driver for USB Card Reader are both a card reader driver from Realtek Semiconductor Realtek of China. A security vulnerability exists in Realtek RtsPer driver for PCIe Card Reader and Realtek RtsUer driver for USB Card Reader. An...

CVE-2022-25479

Vulnerability in Realtek RtsPer driver for PCIe Card Reader RtsPer.sys before 10.0.22000.21355 and Realtek RtsUer driver for USB Card Reader RtsUer.sys before 10.0.22000.31274 allows for the leakage of kernel memory from both the stack and the heap...

CVE-2022-25478

Realtek RtsPer.sys (PCIe Card Reader) and Realtek RtsUer.sys (USB Card Reader) are affected. Versions prior to 10.0.22000.21355 (RtsPer) and prior to 10.0.22000.31274 (RtsUer) expose read/write access to the device PCI configuration space due to insufficient input validation. This is the concrete...

PT-2024-6701 · Foxit · Foxit Pdf Reader

Name of the Vulnerable Software and Affected Versions: Foxit PDF Reader affected versions not specified Description: This issue allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader. User interaction is required to exploit this issue, where the...

PT-2024-6694 · Foxit · Foxit Pdf Reader

Name of the Vulnerable Software and Affected Versions: Foxit PDF Reader affected versions not specified Description: This issue allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader. User interaction is required to exploit this issue, where the...

PT-2024-6696 · Foxit · Foxit Pdf Reader

Name of the Vulnerable Software and Affected Versions: Foxit PDF Reader affected versions not specified Description: This issue allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader. User interaction is required to exploit this issue, where the...

PT-2024-6702 · Foxit · Foxit Pdf Reader

Name of the Vulnerable Software and Affected Versions: Foxit PDF Reader affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this issue, where the target mus...

PT-2024-6693 · Foxit · Foxit Pdf Reader

Name of the Vulnerable Software and Affected Versions: Foxit PDF Reader affected versions not specified Description: The issue is related to a use-after-free vulnerability in the handling of AcroForms in Foxit PDF Reader. This vulnerability allows remote attackers to execute arbitrary code on...

PT-2024-6329 · Adobe · Acrobat Reader +3

Name of the Vulnerable Software and Affected Versions: Acrobat Reader versions 20.005.30636 through 24.003.20054 and earlier Adobe Acrobat 2020 and earlier Adobe Acrobat 2024 and earlier Adobe Acrobat Reader 2020 and earlier Adobe Acrobat Reader Document Cloud and earlier Adobe Acrobat Document...

Important: ecs-service-connect-agent

Issue Overview: Envoy is a cloud-native, open source edge and service proxy. A theoretical request smuggling vulnerability exists through Envoy if a server can be tricked into adding an upgrade header into a response. Per RFC https://www.rfc-editor.org/rfc/rfc7230section-6.7 a server sends 101 wh...