Lucene search
+L

4457 matches found

Cvelist
Cvelist
•added 2023/01/10 8:53 p.m.•58 views

CVE-2021-46795

A TOCTOU time-of-check to time-of-use vulnerability exists where an attacker may use a compromised BIOS to cause the TEE OS to read memory out of bounds that could potentially result in a denial of service...

5AI score0.00137EPSS
SaveExploits0References1
CVE
CVE
•added 2023/01/10 8:53 p.m.•101 views

CVE-2021-46795

CVE-2021-46795 is a TOCTOU vulnerability where a compromised BIOS can trigger the TEE OS to read memory out-of-bounds, potentially causing a denial of service. Public details consistently describe the affected component as the TEE/ASP-SMU hardware stack in AMD platforms with BIOS-based mitigation...

4.7CVSS5.4AI score0.00137EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2023/01/10 8:53 p.m.•17 views

CVE-2021-46795

A TOCTOU time-of-check to time-of-use vulnerability exists where an attacker may use a compromised BIOS to cause the TEE OS to read memory out of bounds that could potentially result in a denial of service...

6.6AI score0.00137EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/01/10 12:00 a.m.•4 views

CVE-2023-20523: Time-of-check Time-of-use (TOCTOU) Race Condition

TOCTOU in the ASP may allow a physical attacker to write beyond the buffer bounds, potentially leading to a loss of integrity or denial of service...

5.7CVSS6AI score0.00179EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2023/01/10 12:00 a.m.•16 views

PT-2023-12589 · Tee Os · Tee Os

Name of the Vulnerable Software and Affected Versions: TEE OS affected versions not specified Description: A TOCTOU time-of-check to time-of-use issue exists, allowing an attacker with a compromised BIOS to potentially cause the TEE OS to read memory out of bounds, resulting in a denial of servic...

4.7CVSS3.8AI score0.00137EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/01/10 12:00 a.m.•4 views

CVE-2023-21537: Time-of-check Time-of-use (TOCTOU) Race Condition

Microsoft Message Queuing MSMQ Elevation of Privilege Vulnerability...

7.8CVSS5.7AI score0.00528EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/01/10 12:00 a.m.•3 views

CVE-2023-21555: Time-of-check Time-of-use (TOCTOU) Race Condition

Windows Layer 2 Tunneling Protocol L2TP Remote Code Execution Vulnerability...

8.1CVSS5.8AI score0.01103EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/01/10 12:00 a.m.•5 views

CVE-2021-46795: Time-of-check Time-of-use (TOCTOU) Race Condition

A TOCTOU time-of-check to time-of-use vulnerability exists where an attacker may use a compromised BIOS to cause the TEE OS to read memory out of bounds that could potentially result in a denial of service...

4.7CVSS5.8AI score0.00137EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/01/09 12:00 a.m.•5 views

CVE-2022-36927: Time-of-check Time-of-use (TOCTOU) Race Condition

Zoom Rooms for macOS clients before version 5.11.3 contain a local privilege escalation vulnerability. A local low-privileged user could exploit this vulnerability to escalate their privileges to root...

8.8CVSS5.8AI score0.00207EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/01/09 12:00 a.m.•7 views

CVE-2022-36929: Time-of-check Time-of-use (TOCTOU) Race Condition

The Zoom Rooms Installer for Windows prior to 5.12.6 contains a local privilege escalation vulnerability. A local low-privileged user could exploit this vulnerability during the install process to escalate their privileges to the SYSTEM user...

7.8CVSS5.8AI score0.00288EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/01/06 12:00 a.m.•4 views

CVE-2022-25716: Time-of-check Time-of-use (TOCTOU) Race Condition

Memory corruption in Multimedia Framework due to unsafe access to the data members...

7CVSS6AI score0.00081EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/01/03 12:00 a.m.•11 views

CVE-2022-32638: Time-of-check Time-of-use (TOCTOU) Race Condition

In isp, there is a possible out of bounds write due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07494449; Issue ID: ALPS07494449...

6.4CVSS5.8AI score0.001EPSS
SaveExploits0References3
OpenVAS
OpenVAS
•added 2022/12/30 12:00 a.m.•20 views

Huawei EulerOS: Security Advisory for shadow (EulerOS-SA-2022-2944)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

4.7CVSS5.2AI score0.00307EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2022/12/30 12:00 a.m.•16 views

Huawei EulerOS: Security Advisory for shadow (EulerOS-SA-2022-2918)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

4.7CVSS5.2AI score0.00307EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2022/12/28 12:00 a.m.•20 views

EulerOS Virtualization 2.10.1 : shadow (EulerOS-SA-2022-2944)

According to the versions of the shadow package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - shadow: TOCTOU time-of-check time-of-use race condition when copying and removing directory trees CVE-2013-4235 Note that Tenable...

4.7CVSS6.6AI score0.00307EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2022/12/28 12:00 a.m.•17 views

EulerOS Virtualization 2.10.0 : shadow (EulerOS-SA-2022-2918)

According to the versions of the shadow package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - shadow: TOCTOU time-of-check time-of-use race condition when copying and removing directory trees CVE-2013-4235 Note that Tenable...

4.7CVSS6.6AI score0.00307EPSS
SaveExploits0References2
Mend
Mend
•added 2022/12/22 12:00 a.m.•2 views

CVE-2022-22753

A Time-of-Check Time-of-Use bug existed in the Maintenance Updater Service that could be abused to grant Users write access to an arbitrary directory. This could have been used to escalate to SYSTEM access.This bug only affects Firefox on Windows. Other operating systems are unaffected.. This...

7.5CVSS0.00627EPSS
SaveExploits1References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/12/22 12:00 a.m.•5 views

CVE-2022-26387: Time-of-check Time-of-use (TOCTOU) Race Condition

When installing an add-on, Firefox verified the signature before prompting the user; but while the user was confirming the prompt, the underlying add-on file could have been modified and Firefox would not have noticed. This vulnerability affects Firefox 98, Firefox ESR 91.7, and Thunderbird 91.7...

7.5CVSS5.8AI score0.00649EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/12/22 12:00 a.m.•3 views

CVE-2022-22753: Time-of-check Time-of-use (TOCTOU) Race Condition

A Time-of-Check Time-of-Use bug existed in the Maintenance Updater Service that could be abused to grant Users write access to an arbitrary directory. This could have been used to escalate to SYSTEM access. This bug only affects Firefox on Windows. Other operating systems are unaffected.. This...

7.1CVSS5.9AI score0.00627EPSS
SaveExploits1References3
AlpineLinux
AlpineLinux
•added 2022/12/22 12:00 a.m.•97 views

CVE-2022-22753

A Time-of-Check Time-of-Use bug existed in the Maintenance Updater Service that could be abused to grant Users write access to an arbitrary directory. This could have been used to escalate to SYSTEM access.This bug only affects Firefox on Windows. Other operating systems are unaffected.. This...

7.1CVSS7.7AI score0.00627EPSS
SaveExploits1
Rows per page
Query Builder