CVE-2023-20521: Time-of-check Time-of-use (TOCTOU) Race Condition

TOCTOU in the ASP Bootloader may allow an attacker with physical access to tamper with SPI ROM records after memory content verification, potentially leading to loss of confidentiality or a denial of service...

CVE-2023-5760

A time-of-check to time-of-use TOCTOU bug in handling of IOCTL input/output control requests. This TOCTOU bug leads to an out-of-bounds write vulnerability which can be further exploited, allowing an attacker to gain full local privilege escalation on the system.This issue affects Avast/Avg...

Design/Logic Flaw

A time-of-check to time-of-use TOCTOU bug in handling of IOCTL input/output control requests. This TOCTOU bug leads to an out-of-bounds write vulnerability which can be further exploited, allowing an attacker to gain full local privilege escalation on the system.This issue affects Avast/Avg...

CVE-2023-5760 Time-of-check to time-of-use (TOCTOU) bug leads to full local privilege escalation.

A time-of-check to time-of-use TOCTOU bug in handling of IOCTL input/output control requests. This TOCTOU bug leads to an out-of-bounds write vulnerability which can be further exploited, allowing an attacker to gain full local privilege escalation on the system.This issue affects Avast/Avg...

CVE-2023-5760 Time-of-check to time-of-use (TOCTOU) bug leads to full local privilege escalation.

A time-of-check to time-of-use TOCTOU bug in handling of IOCTL input/output control requests. This TOCTOU bug leads to an out-of-bounds write vulnerability which can be further exploited, allowing an attacker to gain full local privilege escalation on the system.This issue affects Avast/Avg...

CVE-2023-5760

CVE-2023-5760 affects Avast/Avg Antivirus version 23.8. A TOCTOU bug in handling of IOCTL requests enables an out-of-bounds write, enabling a local privilege escalation. Public exploitation details are not provided in the connected documents. No remediation/fix information is listed for Avast/Avg...

PT-2023-32308 · Avast · Avg/Avast Antivirus

Name of the Vulnerable Software and Affected Versions: Avast/Avg Antivirus version 23.8 Description: A time-of-check to time-of-use TOCTOU bug in handling of IOCTL input/output control requests leads to an out-of-bounds write vulnerability. This can be further exploited, allowing an attacker to...

CVE-2023-5760: Time-of-check Time-of-use (TOCTOU) Race Condition

A time-of-check to time-of-use TOCTOU bug in handling of IOCTL input/output control requests. This TOCTOU bug leads to an out-of-bounds write vulnerability which can be further exploited, allowing an attacker to gain full local privilege escalation on the system.This issue affects Avast/Avg...

CVE-2022-3700

A Time of Check Time of Use TOCTOU vulnerability was reported in the Lenovo Vantage SystemUpdate Plugin version 2.0.0.212 and earlier that could allow a local attacker to delete arbitrary files...

CVE-2022-3700

A Time of Check Time of Use TOCTOU vulnerability was reported in the Lenovo Vantage SystemUpdate Plugin version 2.0.0.212 and earlier that could allow a local attacker to delete arbitrary files...

Code injection

A Time of Check Time of Use TOCTOU vulnerability was reported in the Lenovo Vantage SystemUpdate Plugin version 2.0.0.212 and earlier that could allow a local attacker to delete arbitrary files...

CVE-2022-3700

A Time of Check Time of Use TOCTOU vulnerability was reported in the Lenovo Vantage SystemUpdate Plugin version 2.0.0.212 and earlier that could allow a local attacker to delete arbitrary files...

CVE-2022-3700

CVE-2022-3700 describes a TOCTOU race condition in Lenovo Vantage SystemUpdate Plugin (versions

CVE-2022-3701: Time-of-check Time-of-use (TOCTOU) Race Condition

A privilege elevation vulnerability was reported in the Lenovo Vantage SystemUpdate plugin version 2.0.0.212 and earlier that could allow a local attacker to execute arbitrary code with elevated privileges...

CVE-2022-3702: Time-of-check Time-of-use (TOCTOU) Race Condition

A denial of service vulnerability was reported in Lenovo Vantage HardwareScan Plugin version 1.3.0.5 and earlier that could allow a local attacker to delete contents of an arbitrary directory under certain conditions...

PT-2023-13516 · Lenovo · Lenovo Vantage Systemupdate Plugin

Name of the Vulnerable Software and Affected Versions: Lenovo Vantage SystemUpdate Plugin versions 2.0.0.212 and earlier Description: A Time of Check Time of Use TOCTOU issue was reported that could allow a local attacker to delete arbitrary files. This issue could potentially be exploited by a...

CVE-2022-3700: Time-of-check Time-of-use (TOCTOU) Race Condition

A Time of Check Time of Use TOCTOU vulnerability was reported in the Lenovo Vantage SystemUpdate Plugin version 2.0.0.212 and earlier that could allow a local attacker to delete arbitrary files...

VMware Fusion 13.0.x < 13.5 Multiple Vulnerabilities (VMSA-2023-0022)

The version of VMware Fusion installed on the remote macOS or Mac OS X host is 13.0.x prior to 13.5. It is, therefore, affected by multiple vulnerabilities. - VMware Fusion13.x prior to 13.5 contain an out-of-bounds read vulnerability that exists in the functionality for sharing host Bluetooth...

CVE-2023-38041

A logged in user may elevate its permissions by abusing a Time-of-Check to Time-of-Use TOCTOU race condition. When a particular process flow is initiated, an attacker can exploit this condition to gain unauthorized elevated privileges on the affected system...

Race condition

A logged in user may elevate its permissions by abusing a Time-of-Check to Time-of-Use TOCTOU race condition. When a particular process flow is initiated, an attacker can exploit this condition to gain unauthorized elevated privileges on the affected system...