CVE-2020-23894

A User Mode Write AV in ntdll!RtlpCoalesceFreeBlocks+0x268 of WildBit Viewer v6.6 allows attackers to cause a denial of service DoS via a crafted tiff file...

CVE-2020-23894

WildBit Viewer v6.6 is affected by CVE-2020-23894 due to a User Mode Write AV in ntdll!RtlpCoalesceFreeBlocks+0x268, enabling denial of service via a specially crafted TIFF file. The Red Hat advisory and CNVD/CNNVD entries corroborate the same root cause and impact (DoS). Public details in the pr...

CVE-2020-23893

CVE-2020-23893 affects WildBit Viewer v6.6. A User Mode Write AV in Editor!TMethodImplementationIntercept+0x3c3682 allows a crafted TIFF file to cause a denial of service. The payload is a local impact (due to local access vector) with availability impact reported as High in some references; conc...

CVE-2020-23893

A User Mode Write AV in Editor!TMethodImplementationIntercept+0x3c3682 of WildBit Viewer v6.6 allows attackers to cause a denial of service DoS via a crafted tiff file...

CVE-2020-23891

A User Mode Write AV in Editor+0x5cd7 of WildBit Viewer v6.6 allows attackers to cause a denial of service DoS via a crafted tiff file...

CVE-2020-23891

Summary: CVE-2020-23891 affects WildBit Viewer 6.6, with a vulnerability in the Editor+0x5cd7 path that allows a user-mode write condition to trigger a denial of service when handling specially crafted TIFF files. The issue is described in multiple sources (e.g., CNVD, Red Hat, NVD). The exact ro...

CVE-2020-23889

A User Mode Write AV starting at Editor!TMethodImplementationIntercept+0x4189c6 of WildBit Viewer v6.6 allows attackers to cause a denial of service DoS via a crafted ico file...

CVE-2020-23889

WildBit Viewer vulnerability CVE-2020-23889 affects version 6.6. A Type: user-mode write access violation arises from Editor!TMethodImplementationIntercept+0x4189c6 when processing a crafted ICO file, leading to a denial of service. The report(s) in multiple feeds (NVD, Red Hat, CNVD, CNVD-derive...

CVE-2020-23888

WildBit Viewer v6.6 is affected by CVE-2020-23888 due to a User Mode Write AV in Editor!TMethodImplementationIntercept+0x53f6c3, which can be triggered by a specially crafted PSD file to cause a denial of service. Multiple connected sources corroborate the issue and frame it as a buffer-related v...

Microsoft Windows Kernel Information Disclosure Vulnerability

Microsoft Windows Kernel contains an unspecified vulnerability that allows for information disclosure. Successful exploitation allows attackers to read the contents of kernel memory from a user-mode process...

Exploit for Use After Free in Microsoft

CallbackHell Exploit for CVE-2021-40449 Win32k - LPE - Ca...

CVE-2021-38154

Certain Canon devices manufactured in 2012 through 2020 such as imageRUNNER ADVANCE iR-ADV C5250, when Catwalk Server is enabled for HTTP access, allow remote attackers to modify an e-mail address setting, and thus cause the device to send sensitive information through e-mail to the attacker. For...

CVE-2021-38154

Certain Canon devices manufactured in 2012 through 2020 such as imageRUNNER ADVANCE iR-ADV C5250, when Catwalk Server is enabled for HTTP access, allow remote attackers to modify an e-mail address setting, and thus cause the device to send sensitive information through e-mail to the attacker. For...

PT-2021-21971

Name of the Vulnerable Software and Affected Versions: Canon devices manufactured in 2012 through 2020, such as imageRUNNER ADVANCE iR-ADV C5250 Description: The issue allows remote attackers to modify an e-mail address setting when Catwalk Server is enabled for HTTP access, causing the device to...

ASB-A-183188047

In fastrpcinternalinvoke of drivers/misc/fastrpc.c, there is a possible way for user-mode processes to send fastrpc kernel requests due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed fo...

SUSE-SU-2021:2438-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP2 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2021-22555: A heap out-of-bounds write was discovered in net/netfilter/xtables.c bnc1188116. - CVE-2021-33909: Extremely large seq buffer allocations in...

CVE-2021-32537

Realtek HAD contains a driver crashed vulnerability which allows local side attackers to send a special string to the kernel driver in a user’s mode. Due to unexpected commands, the kernel driver will cause the system crashed...

Realtek HAD 缓冲区错误漏洞

Realtek HAD is a high-definition audio driver package from China-based Realtek. Realtek HAD is vulnerable to a buffer overflow vulnerability, which could be exploited by an attacker to send a special string to the kernel driver in user mode, and the kernel driver causes a system crash due to an...

Microsoft Windows splwow64 Out-Of-Bounds Read Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the user-mode...

The vulnerability of the User Mode Driver (UMD) of the Linux kernel, which allows a hacker to trigger a service failure

The vulnerability of the User Mode Driver UMD of the Linux operating system is related to memory release errors. Exploiting this vulnerability can allow an attacker to cause a service failure...