14059 matches found
CVE-2025-40161
In the Linux kernel, the following vulnerability has been resolved: mailbox: zynqmp-ipi: Fix SGI cleanup on unbind The driver incorrectly determines SGI vs SPI interrupts by checking IRQ number 16, which fails with dynamic IRQ allocation. During unbind, this causes improper SGI cleanup leading to...
CVE-2025-40161
In the Linux kernel, the following vulnerability has been resolved: mailbox: zynqmp-ipi: Fix SGI cleanup on unbind The driver incorrectly determines SGI vs SPI interrupts by checking IRQ number 16, which fails with dynamic IRQ allocation. During unbind, this causes improper SGI cleanup leading to...
Vulnerability of the Storage component in Google Chrome and Microsoft Edge browsers; perform user interface replacement.
The vulnerability of the Storage component in Google Chrome and Microsoft Edge is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to replace the user interface with a specially created HTML page...
CVE-2025-64345: Concurrent Execution using Shared Resource with Improper Synchronization
Wasmtime is a runtime for WebAssembly. Prior to version 38.0.4, 37.0.3, 36.0.3, and 24.0.5, Wasmtime's Rust embedder API contains an unsound interaction where a WebAssembly shared linear memory could be viewed as a type which provides safe access to the host Rust to the contents of the linear...
CVE-2025-63353: Improper Access Control
A vulnerability in FiberHome GPON ONU HG6145F1 RP4423 allows the device's factory default Wi-Fi password WPA/WPA2 pre-shared key to be predicted from the SSID. The device generates default passwords using a deterministic algorithm that derives the router passphrase from the SSID, enabling an...
The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers allows attackers to execute arbitrary code.
The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...
The vulnerability of the Windows kernel component of the Windows operating system allows attackers to enhance their privileges.
The vulnerability of the Windows Kernel component of the Windows operating system is related to synchronization errors when using shared resources “Race Conditions”. Exploiting this vulnerability can allow an attacker to gain increased privileges...
The vulnerability of the DirectX Graphics Kernel subsystem (Dxgkrnl.sys) in Windows operating systems, which allows attackers to escalate their privileges
The vulnerability of the DirectX Graphics Kernel subsystem Dxgkrnl.sys in Windows operating systems is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow attackers to gain increased privileges...
The vulnerability of the DirectX Graphics Kernel subsystem (Dxgkrnl.sys) in Windows operating systems, which allows a hacker to cause a service failure
The vulnerability of the DirectX Graphics Kernel Dxgkrnl.sys driver in Windows operating systems is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...
wasmtime 竞争条件问题漏洞
wasmtime is a lightweight WebAssembly runtime open-sourced by the Bytecode Alliance. A compete condition issue vulnerability exists in wasmtime versions prior to 38.0.4, 37.0.3, 36.0.3, and 24.0.5, which stems from a data contention risk in shared linear memory...
CVE-2025-63419
Cross Site Scripting XSS vulnerability in CrushFTP 11.3.648. The Web-Based Server has a feature where users can share files, the feature reflects the filename to an emailbody field with no sanitations leading to HTML Injection...
CVE-2025-40763
A vulnerability has been identified in Altair Grid Engine All versions V2026.0.0. Affected products do not properly validate environment variables when loading shared libraries, allowing path hijacking through malicious library substitution. This could allow a local attacker to execute arbitrary...
EUVD-2025-102297
Malicious code in sharedpinnipedz3n npm...
EUVD-2025-102294
Malicious code in sharedrhinocerosz3n npm...
CVE-2025-40763
A vulnerability has been identified in Altair Grid Engine All versions V2026.0.0. Affected products do not properly validate environment variables when loading shared libraries, allowing path hijacking through malicious library substitution. This could allow a local attacker to execute arbitrary...
CVE-2025-40763
CVE-2025-40763 affects Altair Grid Engine (all versions
CVE-2025-3717
The CVE-2025-3717 issue affects Grafana Snowflake Datasource Plugin (versions 1.5.0 up to, but not including, 1.14.1). When Oauth passthrough is enabled and multiple users share the same datasource on a single Grafana instance, the wrong user identifier could be used, potentially causing unauthor...
CVE-2025-62218
Concurrent execution using shared resource with improper synchronization 'race condition' in Microsoft Wireless Provisioning System allows an authorized attacker to elevate privileges locally...