312 matches found
CVE-2025-27492
CVE-2025-27492 arises from a race condition in Windows Secure Channel (Schannel) due to improper synchronization on a shared resource, enabling a locally authenticated attacker to elevate privileges. The entry is supported by multiple sources noting a Windows Privilege Elevation vulnerability and...
CVE-2025-27492 Windows Secure Channel Elevation of Privilege Vulnerability
...
CVE-2025-26649
CVE-2025-26649 describes a race condition in Windows Secure Channel (concurrent execution using a shared resource with improper synchronization) that could allow a locally authenticated user to elevate privileges. Primary sources (MSRC/NVD) confirm the vulnerability exists in the Windows Secure C...
CVE-2025-26649 Windows Secure Channel Elevation of Privilege Vulnerability
...
Windows Secure Channel Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Secure Channel allows an authorized attacker to elevate privileges locally...
Windows Secure Channel Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Secure Channel allows an authorized attacker to elevate privileges locally...
CVE-2025-27492: Concurrent Execution using Shared Resource with Improper Synchronization
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Secure Channel allows an authorized attacker to elevate privileges locally...
CVE-2025-26649: Concurrent Execution using Shared Resource with Improper Synchronization
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Secure Channel allows an authorized attacker to elevate privileges locally...
PT-2025-15502
Name of the Vulnerable Software and Affected Versions: Windows Secure Channel affected versions not specified Description: The issue is related to a 'race condition' due to improper synchronization when using shared resources, allowing an authorized attacker to elevate privileges locally. This ca...
Microsoft Windows Secure Channel resource management error vulnerability
Microsoft Windows Secure Channel is a security support provider SSP from Microsoft Corporation that contains a set of security protocols that provide authentication and secure, private communications through encryption. A resource management error vulnerability exists in Microsoft Windows Secure...
Microsoft Windows Secure Channel resource management error vulnerability
Microsoft Windows Secure Channel is a Security Support Provider SSP from Microsoft Corporation that contains a set of security protocols that provide authentication and secure, private communications through encryption. A resource management error vulnerability exists in Microsoft Windows Secure...
PT-2025-15550 · Microsoft · Windows Secure Channel +1
Name of the Vulnerable Software and Affected Versions: Windows Secure Channel affected versions not specified Description: The issue is related to concurrent execution using a shared resource with improper synchronization, also known as a 'race condition', in Windows Secure Channel. This allows a...
DEBIAN-CVE-2024-57985
In the Linux kernel, the following vulnerability has been resolved: firmware: qcom: scm: Cleanup global 'scm' on probe failures If SCM driver fails the probe, it should not leave global 'scm' variable assigned, because external users of this driver will assume the probe finished successfully. For...
[SECURITY] Fedora 41 Update: openssh-9.9p1-3.fc41
SSH Secure SHell is a program for logging into and executing commands on a remote machine. SSH is intended to replace rlogin and rsh, and to provide secure encrypted communications between two untrusted hosts over an insecure network. X11 connections and arbitrary TCP/IP ports can also be forward...
CLSA-2024-1735065713 Fix CVE(s): CVE-2023-28708
SECURITY UPDATE: Missing secure attribute in session cookies when using RemoteIpFilter with X-Forwarded-Proto header set to https - debian/patches/CVE-2023-28708.patch: Fix JSessionId secure attribute missing when RemoteIpFilter determines request submitted via secure channel - CVE-2023-28708...
Secure Channel Spoofing
The vulnerability of the Secure Channel component in Windows operating systems is related to errors in the certificate authentication process. Exploiting this vulnerability can allow a malicious actor to perform a spoofing attack remotely...
firmware: qcom: scm: Mark get_wq_ctx() as atomic call
...
Vulnerabilities fixed in Microsoft Windows
Microsoft has fixed vulnerabilities in Windows. A malicious party can exploit the vulnerabilities to carry out attacks that can lead to the categories of damage listed below. The most serious vulnerability has been assigned attribute CVE-2024-38124 and is located in the NETLOGON functionality...
