PT-2023-5631 · Mediatek · Mediatek Microcode

Name of the Vulnerable Software and Affected Versions: MediaTek microcode affected versions not specified Description: The issue is related to a possible use after free due to a race condition in thermal management, which could lead to local escalation of privilege. System execution privileges ar...

Portmapper Service B&R Automation Runtime DoS

The vulnerability of the Portmapper service in B&R Automation Runtime software for process control and management involves initialization errors. Exploiting this vulnerability can allow a malicious actor to trigger a service failure by sending SYN requests...

Bluetooth Unisoc Chipset Synchronization Error DoS

The vulnerability of the Bluetooth microprogramming software-based Unisoc chipsets is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow attackers to cause service failures...

Network Load Balancing Windows Code Execution

The vulnerability of Network Load Balancing NLB for Windows operating systems is related to synchronization errors when using shared resources. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

DNS Server Windows Code Execution

The vulnerability of the DNS Server component of the Windows operating system is related to synchronization errors when using a shared resource. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

DNS Server Windows Code Execution

The vulnerability of the DNS Server component of the Windows operating system is related to synchronization errors when using a shared resource. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Active Directory Certificate Services Code Execution

The vulnerability of the Active Directory Certificate Services AD CS service, which manages the distribution and usage of certificates on Windows operating systems, is related to synchronization errors when using a shared resource. Exploiting this vulnerability allows an attacker to execute...

DNS Server Windows Code Execution

The vulnerability of the DNS Server component of the Windows operating system is related to synchronization errors when using a shared resource. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

DNS Server Windows Code Execution

The vulnerability of the DNS Server component of the Windows operating system is related to synchronization errors when using a shared resource. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

CVE-2023-37904: Concurrent Execution using Shared Resource with Improper Synchronization

Discourse is an open source discussion platform. Prior to version 3.0.6 of the stable branch and version 3.1.0.beta7 of the beta and tests-passed branches, more users than permitted could be created from invite links. The issue is patched in version 3.0.6 of the stable branch and version...

vmwgfx Driver Disclosure

The vulnerability of the vmwgfx driver in the Linux operating system arises due to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to disclose sensitive information that is protected by security measures...

Windows kernel Unauthorized Access

The vulnerability of the Windows operating system’s kernel is related to synchronization errors when using a shared resource „Race Condition“. Exploiting this vulnerability can allow an attacker to gain unauthorized access to the device...

Microsoft Excel Synchronization Unauthorized Access

The vulnerability of Microsoft Excel editors arises due to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to gain unauthorized access to the device...

Windows kernel Unauthorized Access

The vulnerability of the Windows operating system’s kernel is related to synchronization errors when using a shared resource „Race Condition“. Exploiting this vulnerability can allow an attacker to gain unauthorized access to the device...

Data Synchronization Application Disclosure Information

The vulnerability of the data synchronization application, Issue Sync – Synchronization for Jira, is related to the disclosure of information. Exploiting this vulnerability allows a malicious actor to obtain user credentials through a request at /rest/synchronizer/1.0/technicalUser...

Windows Clip Service Privilege Escalation

The vulnerability of the Windows Clip Service in the Windows operating system is related to synchronization errors when using a shared resource “Race Condition”. Exploiting this vulnerability can allow an attacker to gain increased privileges...

PT-2023-8486 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 11.7.9 macOS versions prior to 12.6.8 macOS versions prior to 13.5 Description: A race condition was addressed with improved state handling, which could allow an app to gain root privileges. The issue is caused by...

CVE-2023-32257: Concurrent Execution using Shared Resource with Improper Synchronization

A flaw was found in the Linux kernel's ksmbd, a high-performance in-kernel SMB server. The specific flaw exists within the processing of SMB2SESSIONSETUP and SMB2LOGOFF commands. The issue results from the lack of proper locking when performing operations on an object. An attacker can leverage th...

CVE-2023-32258: Concurrent Execution using Shared Resource with Improper Synchronization

A flaw was found in the Linux kernel's ksmbd, a high-performance in-kernel SMB server. The specific flaw exists within the processing of SMB2LOGOFF and SMB2CLOSE commands. The issue results from the lack of proper locking when performing operations on an object. An attacker can leverage this...

Netskope client service Privilege Escalation

The vulnerability of the Netskope client service is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to increase their privileges...