5879 matches found
CVE-2025-11933
CVE-2025-11933 describes an issue in wolfSSL up to version 5.8.2 where improper input validation in the TLS 1.3 CKS extension parsing can allow a remote unauthenticated attacker to cause a denial‑of‑service with a crafted ClientHello containing duplicate CKS extensions. Affected software is wolfS...
CVE-2025-41115
SCIM provisioning was introduced in Grafana Enterprise and Grafana Cloud in April to improve how organizations manage users and teams in Grafana by introducing automated user lifecycle management. In Grafana versions 12.x where SCIM provisioning is enabled and configured, a vulnerability in user...
Incorrect privilege assignment
SCIM provisioning was introduced in Grafana Enterprise and Grafana Cloud in April to improve how organizations manage users and teams in Grafana by introducing automated user lifecycle management. In Grafana versions 12.x where SCIM provisioning is enabled and configured, a vulnerability in user...
Rsync security vulnerabilities
Rsync is a fast and versatile file copying tool open-sourced by RsyncProject. It is used for remote files and local files. A security vulnerability exists in Rsync that stems from an out-of-bounds read of the heap buffer due to a negative array index, which could lead to information disclosure...
Google Chrome DevTools Sandbox Bypass
The vulnerability of the DevTools set of tools for web development in the Google Chrome browser is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to bypass the sandboxing protection mechanisms...
Google Chrome on iO SInternals Post-Release Reuse Vulnerability
Google Chrome on iOS is a mobile browser designed by Google for Apple cell phone users, supporting cross-device synchronization, multi-tab browsing, voice search and other features to provide a smooth web browsing experience. Google Chrome on iOS suffers from an Internals reuse-after-release...
Siemens SCALANCE and RUGGEDCOM Devices Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') (CVE-2024-42232)
libceph: fix race between delayedwork and cephmoncstop The way the delayed work is handled in cephmoncstop is prone to races with monfault and possibly also finishhunting. Both of these can requeue the delayed work which wouldn't be canceled by any of the following code in case that happens after...
Siemens SCALANCE and RUGGEDCOM Devices Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') (CVE-2024-40943)
ocfs2: fix races between hole punching and AIO+DIO. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid504517; scriptversion"1.2";...
Linux InfiniBand DoS
The vulnerability of the cmaCancelOperation function in the drivers/infiniband/core/cma.c module of the Linux operating system’s InfiniBand support driver is related to synchronization errors when using shared resources. Exploiting this vulnerability could allow a attacker to cause a service...
Linux fs/ubifs/super.c Heap Buffer Overflow DoS
The vulnerability of the ubifsallocinode function in the fs/ubifs/super.c module of the Linux kernel is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause a service failure...
netfilter Flow Failure
The vulnerability of the flowoffloadqueuework function in the net/netfilter/nfflowtableoffload.c module of the netfilter kernel of the Linux operating system is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause a service...
kernel/sys.c: fix the racy usage of task_lock(tsk->group_leader) in sys_prlimit64() paths
...
Windows Ancillary Function Driver WinSock Privilege Escalation
The vulnerability of the Windows Ancillary Function Driver for WinSock operating systems is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to increase their privileges...
Linux asus_wmi_register_driver Heap Buffer Overflow DoS
The vulnerability of the asuswmiregisterdriver function in the Linux operating system is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...
Windows Speech Privilege Escalation
The vulnerability of the Windows Speech component in Windows operating systems is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to gain increased privileges...
Windows Speech Runtime Privilege Escalation
The vulnerability of the Windows Speech Runtime component in operating systems is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow attackers to gain increased privileges...
Wireless Provisioning System Privilege Escalation
The vulnerability of the Wireless Provisioning System component for Windows operating systems is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow attackers to gain increased privileges...
CVE-2024-7017: Concurrent Execution using Shared Resource with Improper Synchronization
Inappropriate implementation in DevTools in Google Chrome prior to 126.0.6478.182 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...
CVE-2025-40130
In the Linux kernel, the following vulnerability has been resolved: scsi: ufs: core: Fix data race in CPU latency PM QoS request handling The cpulatencyqosadd/remove/updaterequest interfaces lack internal synchronization by design, requiring the caller to ensure thread safety. The current...