4248 matches found
CVE-2022-27540: Time-of-check Time-of-use (TOCTOU) Race Condition
A potential Time-of-Check to Time-of Use TOCTOU vulnerability has been identified in the HP BIOS for certain HP PC products, which might allow arbitrary code execution, denial of service, and information disclosure. HP is releasing BIOS updates to mitigate the potential vulnerability...
EulerOS 2.0 SP12 : iSulad (EulerOS-SA-2024-1872)
According to the versions of the iSulad package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Time-of-check Time-of-use TOCTOU Race Condition vulnerability in openEuler iSulad on Linux allows Leveraging Time-of-Check and Time-of-Use TOCTOU...
Unspecified Vulnerability in Dell PowerEdge Server BIOS (CNVD-2024-29653)
Dell PowerEdge Server BIOS is a system update driver from Dell USA. A security vulnerability exists in the Dell PowerEdge Server BIOS, which originated when the server BIOS contained a TOCTOU Competitive Condition vulnerability that could be exploited by an attacker to gain access to unauthorized...
CVE-2024-0171
Dell PowerEdge Server BIOS contains an TOCTOU race condition vulnerability. A local low privileged attacker could potentially exploit this vulnerability to gain access to otherwise unauthorized resources...
CVE-2024-0171
Dell PowerEdge Server BIOS contains an TOCTOU race condition vulnerability. A local low privileged attacker could potentially exploit this vulnerability to gain access to otherwise unauthorized resources...
CVE-2024-0171
Dell PowerEdge Server BIOS contains a TOCTOU race condition that could allow a local, low-privilege attacker to access restricted resources. Affected component is the BIOS on Dell PowerEdge servers; root cause is a TOCTOU concurrency issue. The vulnerability is rated locally exploitable with high...
CVE-2024-0171
Dell PowerEdge Server BIOS contains an TOCTOU race condition vulnerability. A local low privileged attacker could potentially exploit this vulnerability to gain access to otherwise unauthorized resources...
PT-2024-15365
Name of the Vulnerable Software and Affected Versions Dell PowerEdge Server BIOS affected versions not specified Description The issue is related to a TOCTOU race condition vulnerability. A local low privileged attacker could potentially exploit this vulnerability to gain access to otherwise...
CVE-2024-0171: Time-of-check Time-of-use (TOCTOU) Race Condition
Dell PowerEdge Server BIOS contains an TOCTOU race condition vulnerability. A local low privileged attacker could potentially exploit this vulnerability to gain access to otherwise unauthorized resources...
HP PC BIOS Additional Security Update for TOCTOU
A potential Time-of-Check to Time-of Use TOCTOU vulnerability has been identified in the HP BIOS for certain HP PC products, which might allow arbitrary code execution, denial of service, and information disclosure. HP is releasing BIOS updates to mitigate the potential vulnerability. HP has...
CVE-2024-27180 TOCTOU vulnerability
An attacker with admin access can install rogue applications. As for the affected products/models/versions, see the reference URL...
CVE-2024-27180 TOCTOU vulnerability
An attacker with admin access can install rogue applications. As for the affected products/models/versions, see the reference URL...
CVE-2024-5558
CWE-367: Time-of-check Time-of-use TOCTOU Race Condition vulnerability exists that could cause escalation of privileges when an attacker abuses a limited admin account...
CVE-2024-5558: Time-of-check Time-of-use (TOCTOU) Race Condition
CWE-367: Time-of-check Time-of-use TOCTOU Race Condition vulnerability exists that could cause escalation of privileges when an attacker abuses a limited admin account...
CVE-2024-30088
Windows Kernel Elevation of Privilege Vulnerability...
CVE-2024-30099: Time-of-check Time-of-use (TOCTOU) Race Condition
Windows Kernel Elevation of Privilege Vulnerability...
CVE-2024-30088: Time-of-check Time-of-use (TOCTOU) Race Condition
Windows Kernel Elevation of Privilege Vulnerability...
Windows Kernel Time of Check Time of Use LPE in AuthzBasepCopyoutInternalSecurityAttributes
CVE-2024-30088 is a Windows Kernel Elevation of Privilege Vulnerability which affects many recent versions of Windows 10, Windows 11 and Windows Server 2022. The vulnerability exists inside the function called AuthzBasepCopyoutInternalSecurityAttributes specifically when the kernel copies the...