PT-2025-37509

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The Linux kernel contains a flaw in the tracing subsystem related to handling synthetic events. Specifically, the synthetic event field "char file" can read a string value without...

Microsoft Windows Event Tracing Remote Code Execution Vulnerability

Windows Event Tracing ETW is an efficient kernel-level tracing tool that allows you to log kernel- or application-defined events to a log file.Microsoft Windows Event Tracing is vulnerable to remote code execution. An attacker could exploit this vulnerability to execute code on the target host...

CVE-2021-43232

Windows Event Tracing Remote Code Execution Vulnerability...

CVE-2021-43232

Windows Event Tracing Remote Code Execution Vulnerability...

CVE-2021-43232

Windows Event Tracing Remote Code Execution Vulnerability...

Remote code execution

Windows Event Tracing Remote Code Execution Vulnerability...

CVE-2021-43232

CVE-2021-43232 corresponds to a Windows Event Tracing (ETW) remote code execution vulnerability. The CNVD entry explicitly identifies ETW as the affected component and states the vulnerability enables remote code execution on Windows. The CVE record itself notes Windows Event Tracing RCE with a m...

CVE-2021-43232 Windows Event Tracing Remote Code Execution Vulnerability

...

CVE-2021-43232 Windows Event Tracing Remote Code Execution Vulnerability

...

Security Bulletin: Information Disclosure in IBM Spectrum Protect Operations Center (CVE-2021-38901)

Summary If tracing is enabled in Operations Center, user credentials may be displayed in the trace file in plain text. Vulnerability Details CVEID: CVE-2021-38901 DESCRIPTION: IBM Spectrum Protect Operations Center, under special configurations, could allow a local user to obtain highly sensitive...

Windows Event Tracing Remote Code Execution Vulnerability

...

Samsung RRC MeasurementReport Exception Condition Handling Vulnerability

Samsung RRC MeasurementReport is a wireless resource control protocol measurement report for Samsung Samsung mobile devices. The Samsung RRC MeasurementReport suffers from an anomalous condition handling vulnerability that stems from the lack of proper RRC security variable checking in the Exynos...

KLA12387 Multiple vulnerabilities in Microsoft Windows

Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service, gain privileges, obtain sensitive information. Below is a complete list of vulnerabilities: 1. A remote code execution vulnerability in...

Microsoft Windows Event Tracing 代码注入漏洞

Windows Event Tracing ETW is an efficient kernel-level tracing tool that allows you to log kernel- or application-defined events to a log file.Microsoft Windows Event Tracing is vulnerable to remote code execution. An attacker could exploit this vulnerability to execute code on the target host...

Mozilla: GC rooting failure when calling wasm instance methods

The Mozilla Foundation Security Advisory describes this flaw as: Failure to correctly record the location of live pointers across wasm instance calls resulted in a GC occurring within the call not tracing those live pointers. This could have led to a use-after-free causing a potentially exploitab...

Instance config inline secret exposure in Grafana

Impact Some inline secrets are exposed in plaintext over the Grafana Agent HTTP server: Inline secrets for metrics instance configs in the base YAML file are exposed at /-/config Inline secrets for integrations are exposed at /-/config Inline secrets for Consul ACL tokens and ETCD basic auth when...

Mozilla: GC rooting failure when calling wasm instance methods

The Mozilla Foundation Security Advisory describes this flaw as: Failure to correctly record the location of live pointers across wasm instance calls resulted in a GC occurring within the call not tracing those live pointers. This could have led to a use-after-free causing a potentially exploitab...

Samsung SMR 安全漏洞

Samsung RRC MeasurementReport is a wireless resource control protocol measurement report for Samsung Samsung mobile devices. The Samsung RRC MeasurementReport suffers from an anomalous condition handling vulnerability that stems from the lack of proper RRC security variable checking in the Exynos...

xstream: Arbitrary code execution via unsafe deserialization of sun.tracing.*

A flaw was found in xstream, a simple library used to serialize objects to XML and back again. This flaw allows a remote attacker to load and execute arbitrary code from a remote host by manipulating the processed input stream...

ASB-A-143559931

In ResolverActivity, there is a possible user interaction bypass due to a tapjacking/overlay attack. This could lead to local escalation of privilege with User execution privileges needed. User interaction is needed for exploitation...