17855 matches found
CVE-2024-43449
Windows USB Video Class System Driver Elevation of Privilege Vulnerability...
CVE-2024-43449 Windows USB Video Class System Driver Elevation of Privilege Vulnerability
...
CVE-2024-43449
CVE-2024-43449 is a Windows USB Video Class System Driver elevation-of-privilege vulnerability. The CVE entry lists a CVSSv3.1 base score of 6.8 (Medium) with attack vector as Physical, no user interaction required, and an impact profile of High on confidentiality, integrity, and availability. Mi...
CVE-2024-43449 Windows USB Video Class System Driver Elevation of Privilege Vulnerability
...
CVE-2024-43638 Windows USB Video Class System Driver Elevation of Privilege Vulnerability
...
CVE-2024-43643 Windows USB Video Class System Driver Elevation of Privilege Vulnerability
...
CVE-2024-43638
CVE-2024-43638 is a Windows USB Video Class System Driver Elevation of Privilege vulnerability. The connected sources corroborate a Windows USB Video Driver component as the affected area and indicate that mitigations are released via Microsoft security updates (e.g., November 2024 updates/KBs). ...
CVE-2024-43643 Windows USB Video Class System Driver Elevation of Privilege Vulnerability
...
CVE-2024-43643
CVE-2024-43643 is a Windows USB Video Class System Driver elevation-of-privilege vulnerability. The vulnerability pertains to the Windows USB Video Driver component and is categorized with CVSSv3.1 vektor: physical attack, low complexity, no privileges required, no user interaction, and impacts t...
CVE-2024-43637
CVE-2024-43637 is a Windows USB Video Class System Driver elevation-of-privilege vulnerability. The connected documents confirm a Windows USB Video Driver entry and indicate that Microsoft patched this family of flaws in November 2024 updates (e.g., KB5046616/OS Build 20348.2849 and related KBs)....
CVE-2024-43637 Windows USB Video Class System Driver Elevation of Privilege Vulnerability
...
CVE-2024-43634 Windows USB Video Class System Driver Elevation of Privilege Vulnerability
...
CVE-2024-43634 Windows USB Video Class System Driver Elevation of Privilege Vulnerability
...
CVE-2024-43634
CVE-2024-43634 (Windows USB Video Class System Driver Elevation of Privilege) affects Windows USB Video Driver. Connected sources corroborate a privilege-escalation vulnerability with CVSS v3.1 base score 6.8 (Vector: Privileges none, User interaction none, Attack vector physical, Scope unchanged...
USN-7100-2: Linux kernel vulnerabilities
Supraja Sridhara, Benedict Schlüter, Mark Kuhne, Andrin Bertschi, and Shweta Shinde discovered that the Confidential Computing framework in the Linux kernel for x86 platforms did not properly handle 32-bit emulation on TDX and SEV. An attacker with access to the VMM could use this to cause a deni...
kernel: pvrusb2: fix use after free on context disconnection
In the Linux kernel, the following vulnerability has been resolved: media: pvrusb2: fix use after free on context disconnection Upon module load, a kthread is created targeting the pvr2contextthreadfunc function, which may call pvr2contextdestroy and thus call kfree on the context object. However...
kernel: usb: xhci: prevent potential failure in handle_tx_event() for Transfer events without TRB
In the Linux kernel, the following vulnerability has been resolved: usb: xhci: prevent potential failure in handletxevent for Transfer events without TRB Some transfer events don't always point to a TRB, and consequently don't have a endpoint ring. In these cases, function handletxevent should no...
kernel: exfat: use kvmalloc_array/kvfree instead of kmalloc_array/kfree
A memory allocation failure was found in the exFAT filesystem driver. When system memory is fragmented, kmallocarray can fail to allocate contiguous memory for the bitmap, preventing USB drives from being mounted...
kernel: usb: xhci: Add error handling in xhci_map_urb_for_dma
In the Linux kernel, the following vulnerability has been resolved: usb: xhci: Add error handling in xhcimapurbfordma The Linux kernel CVE team has assigned CVE-2024-26964 to this issue. Upstream advisory: https://lore.kernel.org/linux-cve-announce/2024050130-CVE-2024-26964-54c8@gregkh/T...