5879 matches found
EUVD-2025-93450
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Speech allows an authorized attacker to elevate privileges locally...
CVE-2025-59507
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Speech allows an authorized attacker to elevate privileges locally...
Windows Kernel Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Kernel allows an authorized attacker to elevate privileges locally...
kernel: mm: zswap: properly synchronize freeing resources during CPU hotunplug
In the Linux kernel, the following vulnerability has been resolved: mm: zswap: properly synchronize freeing resources during CPU hotunplug In zswapcompress and zswapdecompress, the per-CPU acompctx of the current CPU at the beginning of the operation is retrieved and used throughout. However, sin...
kernel: acpi: typec: ucsi: Introduce a ->poll_cci method
In the Linux kernel, the following vulnerability has been resolved: acpi: typec: ucsi: Introduce a -pollcci method For the ACPI backend of UCSI the UCSI "registers" are just a memory copy of the register values in an opregion. The ACPI implementation in the BIOS ensures that the opregion contents...
kernel: acpi: typec: ucsi: Introduce a ->poll_cci method
In the Linux kernel, the following vulnerability has been resolved: acpi: typec: ucsi: Introduce a -pollcci method For the ACPI backend of UCSI the UCSI "registers" are just a memory copy of the register values in an opregion. The ACPI implementation in the BIOS ensures that the opregion contents...
kernel: mm: zswap: properly synchronize freeing resources during CPU hotunplug
In the Linux kernel, the following vulnerability has been resolved: mm: zswap: properly synchronize freeing resources during CPU hotunplug In zswapcompress and zswapdecompress, the per-CPU acompctx of the current CPU at the beginning of the operation is retrieved and used throughout. However, sin...
panthor_groupdestroy() Function DRI Kernel DoS
The vulnerability of the panthorgroupdestroy function in the drivers/gpu/drm/panthor/panthorsched.c driver for the Direct Rendering Infrastructure DRI support in the Linux operating system is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an...
PT-2025-46456
Name of the Vulnerable Software and Affected Versions Windows DirectX affected versions not specified Description A race condition exists in Windows DirectX due to concurrent execution using a shared resource with improper synchronization. This allows an authorized attacker to elevate privileges...
ALSA-2025:20095 Moderate: kernel security update
The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: xen: Xen hypercall page unsafe against speculative attacks Xen Security Advisory 466 CVE-2024-53241 kernel: exfat: fix out-of-bounds access of directory entries CVE-2024-53147 kernel: zra...
PT-2025-46484
Name of the Vulnerable Software and Affected Versions Windows DirectX affected versions not specified Description A race condition exists in Windows DirectX due to concurrent execution using a shared resource with improper synchronization. This allows an authorized attacker to cause a denial of...
CVE-2025-64683: Concurrent Execution using Shared Resource with Improper Synchronization
In JetBrains Hub before 2025.3.104432 information disclosure was possible via the Users API...
Microsoft Windows Bluetooth Service Resource Management Error Vulnerability
Microsoft Windows Bluetooth Service is a Bluetooth driver from Microsoft Microsoft Corporation, USA. A resource management error vulnerability exists in Microsoft Windows Bluetooth Service that stems from a contention condition due to improper synchronization of shared resources, which can be...
CVE-2025-64682: Concurrent Execution using Shared Resource with Improper Synchronization
In JetBrains Hub before 2025.3.104432 a race condition allowed bypass of the Agent-user limit...
PT-2025-54661
Уязвимость функции mddev unlock модуля drivers/md/md.c драйвера нескольких устройств RAID и LVM ядра операционной системы Linux связана с ошибками синхронизации при использовании общего ресурса. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании...
Linux NVME Kernel Driver Heap Buffer Overflow DoS
The vulnerability of the nvmepciNRMs function in the drivers/nvme/host/pci.c module of the Linux NVME kernel driver is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause a service failure...
Red Database Heap Buffer Overflow DoS
The vulnerability of the AggTraceMemoryFile::updateVersion function in the AggTraceSharedMemory.cpp module of the “Red Database” database management system is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause a service...
Red Database Synchronization Failure
The vulnerability of the “Red Database” database management system is related to synchronization errors when using a common resource. Exploiting this vulnerability can allow an attacker to cause a service failure on the server...
Red Database Plugin Buffer Overflow DoS
The vulnerability in the ConfiguredPlugin::release function of the PluginManager.cpp module of the database management system “Red Database” is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to cause a service failure on the...
Linux Kernel Heap Buffer Overflow DoS
The vulnerability of the dotask function in the Linux operating system’s kernel is related to synchronization errors when using shared resources „Race Conditions“. Exploiting this vulnerability can allow a perpetrator to cause service failures...