8022 matches found
PT-2025-37039
Name of the Vulnerable Software and Affected Versions: AxxonSoft Axxon One / AxxonNet versions 2.0.4 and earlier Description: The ARP Agent component in AxxonSoft Axxon One / AxxonNet contains a flaw where sensitive information is inserted into log files. A local attacker can obtain plaintext...
CVE-2025-55317
Improper link resolution before file access 'link following' in Microsoft AutoUpdate MAU allows an authorized attacker to elevate privileges locally...
CVE-2025-55245
Improper link resolution before file access 'link following' in Xbox allows an authorized attacker to elevate privileges locally...
CVE-2025-55245
Improper link resolution before file access 'link following' in Xbox allows an authorized attacker to elevate privileges locally...
Microsoft AutoUpdate (MAU) Elevation of Privilege Vulnerability
Improper link resolution before file access 'link following' in Microsoft AutoUpdate MAU allows an authorized attacker to elevate privileges locally...
Xbox Gaming Services Elevation of Privilege Vulnerability
Improper link resolution before file access 'link following' in Xbox allows an authorized attacker to elevate privileges locally...
PT-2025-36894
Name of the Vulnerable Software and Affected Versions: Xbox affected versions not specified Description: An improper link resolution issue before file access 'link following' exists in Xbox, potentially allowing a local attacker to elevate privileges. Recommendations: At the moment, there is no...
PT-2025-36896
Name of the Vulnerable Software and Affected Versions: Microsoft AutoUpdate affected versions not specified Description: An improper link resolution before file access 'link following' in Microsoft AutoUpdate MAU allows an authorized attacker to elevate privileges locally. Recommendations: At the...
PT-2025-36849
Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: An improper resolution of path equivalence in Windows MapUrlToZone can allow an unauthorized attacker to bypass a security feature over a network. This security-feature bypass can affect th...
Microsoft AutoUpdate for macOS < 4.80 Elevation of Privilege (September 2025)
The version of Microsoft AutoUpdate installed on the remote macOS ost is prior to 4.80. It is, therefore, affected by an elevation of privilege vulnerability: - Improper link resolution before file access 'link following' in Microsoft AutoUpdate MAU allows an authorized attacker to elevate...
media: usbtv: Lock resolution while streaming
...
CVE-2025-39716
In the Linux kernel, the following vulnerability has been resolved: parisc: Revise getuser to probe user read access Because of the way read access support is implemented, read access interruptions are only triggered at privilege levels 2 and 3. The kernel executes at privilege level 0, so getuse...
CVE-2025-39715
In the Linux kernel, the following vulnerability has been resolved: parisc: Revise gateway LWS calls to probe user read access We use load and stbys,e instructions to trigger memory reference interruptions without writing to memory. Because of the way read access support is implemented, read acce...
CVE-2025-39713
In the Linux kernel, the following vulnerability has been resolved: media: rainshadow-cec: fix TOCTOU race condition in raininterrupt In the interrupt handler raininterrupt, the buffer full check on rain-buflen is performed before acquiring rain-buflock. This creates a Time-of-Check to Time-of-Us...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a memory overflow caused by unlocked resolution, which could lead to a system crash...
Hono 安全漏洞
Hono is a web framework written in TypeScript from the Hono community. A security vulnerability exists in Hono 4.9.5 and earlier versions, which stems from an error in the path resolution of the getPath function and could lead to bypassing proxy ACLs...
CVE-2025-38721
In the Linux kernel, the following vulnerability has been resolved: netfilter: ctnetlink: fix refcount leak on table dump There is a reference count leak in ctnetlinkdumptable: if res ctgeneral; // HERE cb-args1 = unsigned longct; ... While its very unlikely, its possible that ct == last. If this...
net: appletalk: Fix use-after-free in AARP proxy probe
...
SREC: Encrypted Semantic Super-Resolution Enhanced Communication
Semantic communication SemCom, as a typical paradigm of deep integration between artificial intelligence AI and communication technology, significantly improves communication efficiency and resource utilization efficiency. However, the security issues of SemCom are becoming increasingly prominent...