5971 matches found
CVE-2024-21823
Hardware logic with insecure de-synchronization in IntelR DSA and IntelR IAA for some IntelR 4th or 5th generation XeonR processors may allow an authorized user to potentially enable escalation of privilege local access...
UBUNTU-CVE-2024-21823
Hardware logic with insecure de-synchronization in IntelR DSA and IntelR IAA for some IntelR 4th or 5th generation XeonR processors may allow an authorized user to potentially enable escalation of privilege local access...
CVE-2024-21823
Hardware logic with insecure de-synchronization in IntelR DSA and IntelR IAA for some IntelR 4th or 5th generation XeonR processors may allow an authorized user to potentially enable escalation of privilege local access...
CVE-2024-21823: Hardware Logic with Insecure De-Synchronization between Control and Data Channels
Hardware logic with insecure de-synchronization in IntelR DSA and IntelR IAA for some IntelR 4th or 5th generation XeonR processors may allow an authorized user to potentially enable escalation of privilege local access...
PT-2024-5465
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 126.0.6478.182 Microsoft Edge affected versions not specified Description The issue is related to a synchronization error when using a shared resource in the DevTools of Google Chrome and Microsoft Edge browsers...
Linux AF_UNIX Sockets Heap Buffer Overflow DoS
The vulnerability of the unixstatedoublelock function in the net/unix/afunix.c module, which implements AFUNIX sockets in Linux operating systems, is related to a violation of synchronization mechanisms. Exploiting this vulnerability could allow an attacker to cause a service failure...
May 14, 2024—KB5037763 (OS Build 14393.6981) - EXPIRED
May 14, 2024—KB5037763 OS Build 14393.6981 - EXPIRED Applies To Windows 10, version 1607, all editions Windows Server 2016, all editions EXPIRATION NOTICE IMPORTANT As of March 31, 2026, this update is no longer available from the Microsoft Update Catalog or other release channels. We recommend...
CVE-2024-30046: Concurrent Execution using Shared Resource with Improper Synchronization
Visual Studio Denial of Service Vulnerability...
PT-2024-3642
Name of the Vulnerable Software and Affected Versions Microsoft Visual Studio affected versions not specified Microsoft .NET affected versions not specified Description The issue is caused by synchronization errors when using a shared resource. It may allow a remote attacker to cause a denial of...
Windows Distributed File System Code Execution
The vulnerability of the distributed file system DFS in the Windows operating system is related to synchronization errors when using a shared resource. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...
BFS Windows Server Privilege Escalation
The vulnerability of the Brokering File System BFS in the Windows Server operating system is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to increase their privileges...
BFS Windows Server Privilege Escalation
The vulnerability of the Brokering File System BFS in the Windows Server operating system is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to increase their privileges...
Ivanti Secure Access Client Privilege Escalation
The vulnerability of the VPN server for corporate networks of Ivanti Secure Access Client formerly Pulse Secure Desktop Client on Windows operating systems is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow attackers to increase their...
CVE-2022-48689: Concurrent Execution using Shared Resource with Improper Synchronization
In the Linux kernel, the following vulnerability has been resolved: tcp: TX zerocopy should not sense pfmemalloc status We got a recent syzbot report 1 showing a possible misuse of pfmemalloc page status in TCP zerocopy paths. Indeed, for pages coming from user space or other layers, using...
PT-2024-5405
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.37 Description The vulnerability is related to the drm: zynqmp dpsub module in the Linux kernel. It is caused by the zynqmp dp hpd work func function calling drm bridge hpd notify, which expects hpd mutex to ...
AZL-42229 CVE-2024-27014 affecting package kernel for versions less than 5.15.158.1-1
In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Prevent deadlock while disabling aRFS When disabling aRFS under the priv-statelock, any scheduled aRFS works are canceled using the cancelworksync function, which waits for the work to end if it has already started...
kernel: af_unix: Fix data-races around user->unix_inflight
In the Linux kernel, the following vulnerability has been resolved: afunix: Fix data-races around user-unixinflight. user-unixinflight is changed under spinlockunixgclock, but toomanyunixfds reads it locklessly. Let's annotate the write/read accesses to user-unixinflight. BUG: KCSAN: data-race in...
kernel: TCP-spoofed ghost ACKs and leak leak initial sequence number
A flaw was found in the Linux kernel. Two TCP spoofing primitives exist where an attacker can brute force the server-chosen send window by acknowledging data that was never sent, called "ghost ACKs." There are side channels that also allow the attacker to leak the otherwise secret server-chosen...
kernel: Linux kernel (soundwire): Memory corruption due to incorrect device enumeration completion
A flaw was found in the Linux kernel's soundwire subsystem. The code responsible for managing device enumeration completion, which allows drivers to synchronize with soundwire devices, contains a defect. This issue can lead to memory corruption if drivers are still waiting for completion, as the...
Windows kernel Privilege Escalation
The vulnerability of the Windows operating system’s kernel is related to synchronization errors when using a shared resource „Race Conditions“. Exploiting this vulnerability can allow an attacker to increase their privileges...