Cisco NX-OS Software Remote Package Manager Command Injection (CVE-2019-1732)

A vulnerability in the Remote Package Manager RPM subsystem of Cisco NX-OS Software could allow an authenticated, local attacker with administrator credentials to leverage a time-of-check, time-of-use TOCTOU race condition to corrupt local variables, which could lead to arbitrary command injectio...

SUSE: Security Advisory (SUSE-SU-2023:2880-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE-SU-2023:2891-1 Security update for curl

This update for curl fixes the following issues: - CVE-2023-32001: Fixed TOCTOU race condition bsc1213237...

SUSE-SU-2023:2880-1 Security update for curl

This update for curl fixes the following issues: - CVE-2023-32001: Fixed TOCTOU race condition bsc1213237...

CVE-2023-33156: Time-of-check Time-of-use (TOCTOU) Race Condition

Microsoft Defender Elevation of Privilege Vulnerability...

CVE-2023-33154: Time-of-check Time-of-use (TOCTOU) Race Condition

Windows Partition Management Driver Elevation of Privilege Vulnerability...

CVE-2023-35311: Time-of-check Time-of-use (TOCTOU) Race Condition

Microsoft Outlook Security Feature Bypass Vulnerability...

CVE-2023-26299

A potential Time-of-Check to Time-of-Use TOCTOU vulnerability has been identified in certain HP PC products using AMI UEFI Firmware system BIOS, which might allow arbitrary code execution. AMI has released updates to mitigate the potential vulnerability...

Design/Logic Flaw

A potential Time-of-Check to Time-of-Use TOCTOU vulnerability has been identified in certain HP PC products using AMI UEFI Firmware system BIOS, which might allow arbitrary code execution. AMI has released updates to mitigate the potential vulnerability...

CVE-2023-26299

CVE-2023-26299 describes a potential TOCTOU vulnerability in HP PCs that use AMI UEFI firmware (system BIOS), which could allow arbitrary code execution. The issue stems from how TOCTOU could be exploited on affected systems, with HP/AMI providing mitigations via firmware updates. Connected docum...

CVE-2023-26299

A potential Time-of-Check to Time-of-Use TOCTOU vulnerability has been identified in certain HP PC products using AMI UEFI Firmware system BIOS, which might allow arbitrary code execution. AMI has released updates to mitigate the potential vulnerability...

CVE-2023-26299: Time-of-check Time-of-use (TOCTOU) Race Condition

A potential Time-of-Check to Time-of-Use TOCTOU vulnerability has been identified in certain HP PC products using AMI UEFI Firmware system BIOS, which might allow arbitrary code execution. AMI has released updates to mitigate the potential vulnerability...

UBUNTU-CVE-2023-1295

A time-of-check to time-of-use issue exists in iouring subsystem's IORINGOPCLOSE operation in the Linux kernel's versions 5.6 - 5.11 inclusive, which allows a local user to elevate their privileges to root. Introduced in b5dba59e0cf7e2cc4d3b3b1ac5fe81ddf21959eb, patched in...

CVE-2023-1295: Time-of-check Time-of-use (TOCTOU) Race Condition

A time-of-check to time-of-use issue exists in iouring subsystem's IORINGOPCLOSE operation in the Linux kernel's versions 5.6 - 5.11 inclusive, which allows a local user to elevate their privileges to root. Introduced in b5dba59e0cf7e2cc4d3b3b1ac5fe81ddf21959eb, patched in...

CVE-2022-4143: Time-of-check Time-of-use (TOCTOU) Race Condition

An issue has been discovered in GitLab affecting all versions starting from 15.7 before 15.8.5, from 15.9 before 15.9.4, and from 15.10 before 15.10.1 that allows for crafted, unapproved MRs to be introduced and merged without authorization...

CVE-2023-32555: Time-of-check Time-of-use (TOCTOU) Race Condition

A Time-of-Check Time-Of-Use vulnerability in the Trend Micro Apex One and Apex One as a Service agent could allow a local attacker to escalate privileges on affected installations. Please note: a local attacker must first obtain the ability to execute low-privileged code on the target system in...

CVE-2023-32554: Time-of-check Time-of-use (TOCTOU) Race Condition

A Time-of-Check Time-Of-Use vulnerability in the Trend Micro Apex One and Apex One as a Service agent could allow a local attacker to escalate privileges on affected installations. Please note: a local attacker must first obtain the ability to execute low-privileged code on the target system in...

AMI UEFI Firmware June 2023 Security Update (TOCTOU)

A potential Time-of-Check to Time-of-Use TOCTOU vulnerability has been identified in certain HP PC products using AMI UEFI Firmware system BIOS, which might allow arbitrary code execution. AMI has released updates to mitigate the potential vulnerability. AMI has released updates to mitigate the...

CVE-2022-4149: Time-of-check Time-of-use (TOCTOU) Race Condition

The Netskope client service prior to R96 on Windows runs as NT AUTHORITY\SYSTEM which writes log files to a writable directory C:\Users\Public\netSkope for a standard user. The files are created and written with a SYSTEM account except one file logplaceholder which inherits permission giving all...

CVE-2022-31641: Time-of-check Time-of-use (TOCTOU) Race Condition

Potential vulnerabilities have been identified in the system BIOS of certain HP PC products, which might allow arbitrary code execution, escalation of privilege, denial of service, and information disclosure...