17849 matches found
CVE-2024-43085
In handleMessage of UsbDeviceManager.java, there is a possible method to access device contents over USB without unlocking the device due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed f...
CVE-2024-43085
In handleMessage of UsbDeviceManager.java, there is a possible method to access device contents over USB without unlocking the device due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed f...
CVE-2024-43085
In handleMessage of UsbDeviceManager.java, there is a possible method to access device contents over USB without unlocking the device due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed f...
USN-7089-4: Linux kernel vulnerabilities
Chenyuan Yang discovered that the USB Gadget subsystem in the Linux kernel did not properly check for the device to be enabled before writing. A local attacker could possibly use this to cause a denial of service. CVE-2024-25741 Several security issues were discovered in the Linux kernel. An...
Ubuntu 24.04 LTS : Linux kernel vulnerabilities (USN-7089-4)
The remote Ubuntu 24.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7089-4 advisory. Chenyuan Yang discovered that the USB Gadget subsystem in the Linux kernel did not properly check for the device to be enabled before writing. A local...
The vulnerability of the vmk80xx component of the Linux operating system’s kernel allows a hacker to trigger a service failure.
The vulnerability of the vmk80xx component of the Linux operating system’s kernel is related to resource management errors in the vmk80xxfindusbendpoints function. Exploiting this vulnerability can allow an attacker to cause a service failure...
Tenda G3 命令注入漏洞
Tenda G3 is a Qos Vpn router from Tenda China. Tenda G3 suffers from a command injection vulnerability, which stems from the formSetUSBPartitionUmount function failing to properly filter constructor command special characters, commands, etc. The vulnerability can be exploited to execute arbitrary...
CVE-2024-43643
Windows USB Video Class System Driver Elevation of Privilege Vulnerability...
CVE-2024-43643
Windows USB Video Class System Driver Elevation of Privilege Vulnerability...
CVE-2024-43638
Windows USB Video Class System Driver Elevation of Privilege Vulnerability...
CVE-2024-43637
Windows USB Video Class System Driver Elevation of Privilege Vulnerability...
CVE-2024-43634
Windows USB Video Class System Driver Elevation of Privilege Vulnerability...
CVE-2024-43637
Windows USB Video Class System Driver Elevation of Privilege Vulnerability...
CVE-2024-43449
Windows USB Video Class System Driver Elevation of Privilege Vulnerability...
CVE-2024-43449
Windows USB Video Class System Driver Elevation of Privilege Vulnerability...
CVE-2024-43449
CVE-2024-43449 is a Windows USB Video Class System Driver elevation-of-privilege vulnerability. The CVE entry lists a CVSSv3.1 base score of 6.8 (Medium) with attack vector as Physical, no user interaction required, and an impact profile of High on confidentiality, integrity, and availability. Mi...
CVE-2024-43449 Windows USB Video Class System Driver Elevation of Privilege Vulnerability
...
CVE-2024-43449 Windows USB Video Class System Driver Elevation of Privilege Vulnerability
...