USN-5165-1 linux-oem-5.14 vulnerabilities

It was discovered that the NFC subsystem in the Linux kernel contained a use-after-free vulnerability in its NFC Controller Interface NCI implementation. A local attacker could possibly use this to cause a denial of service system crash or execute arbitrary code. CVE-2021-3760 It was discovered...

CVE-2021-4024

A flaw was found in podman. The podman machine function used to create and manage Podman virtual machine containing a Podman process spawns a gvproxy process on the host system. The gvproxy API is accessible on port 7777 on all IP addresses on the host. If that port is open on the host's firewall...

Exploit for Path Traversal in Microsoft

CVE-2021-40444 PoC Malicious docx generator to exploit CVE-20...

Podman access control error vulnerability

Podman is an engine for developing, managing, and running OCI containers on Linux systems. An access control error vulnerability exists in podman where the podman machine function used to create and manage a Podman virtual machine containing Podman processes spawns a gvproxy process on the host...

XStream: remote code execution due to insecure XML deserialization when relying on blocklists

A flaw was found in xstream. An unsafe deserialization of user-supplied XML, in conjunction with relying on the default deny list, allows a remote attacker to perform a variety of attacks including a remote code execution of arbitrary code in the context of the JVM running the XStream application...

Exploit for Path Traversal in Microsoft

CVE-2021-40444 PoC Malicious docx generator to exploit CVE-20...

Microsoft Virtual Machine Bus Code Execution

The vulnerability of the Microsoft Virtual Machine Bus VMBus component of the Windows operating system is related to improper code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Red Hat libvirt resource management error vulnerabilities

Red Hat libvirt is a Linux API for implementing Linux virtualization features from Red Hat, Inc. that supports a variety of Hypervisors, including Xen and KVM, as well as QEMU and a number of virtual products for other operating systems. A resource management error vulnerability exists in Red Hat...

kernel: SVM nested virtualization issue in KVM (AVIC support)

A flaw was found in the KVM's AMD code for supporting SVM nested virtualization. The flaw occurs when processing the VMCB virtual machine control block provided by the L1 guest to spawn/handle a nested guest L2. Due to improper validation of the "intctl" field, this issue could allow a malicious ...

PT-2021-4764

Name of the Vulnerable Software and Affected Versions Modern DRAM devices PC-DDR4, LPDDR4X are affected by this issue. Description The vulnerability is related to the internal Target Row Refresh TRR mitigation against Rowhammer attacks in modern DRAM devices. Novel non-uniform Rowhammer access...

PT-2021-7849 · Podman +7 · Podman +7

Name of the Vulnerable Software and Affected Versions: podman affected versions not specified Description: A flaw was found in podman. The podman machine function spawns a gvproxy process on the host system. The gvproxy API is accessible on port 7777 on all IP addresses on the host. If that port ...

Microsoft & Adobe Patch Tuesday (November 2021) – Microsoft 55 Vulnerabilities with 6 Critical, 6 Zero-Days. Adobe 4 Vulnerabilities

Microsoft Patch Tuesday – November 2021 Microsoft patched 55 vulnerabilities in their November 2021 Patch Tuesday release, of which six are rated as critical severity and six were previously reported as zero-days. Critical Microsoft Vulnerabilities Patched CVE-2021-42298 - Microsoft Defender Remo...

CVE-2021-26443

Microsoft Virtual Machine Bus VMBus Remote Code Execution Vulnerability...

Remote code execution

Microsoft Virtual Machine Bus VMBus Remote Code Execution Vulnerability...

CVE-2021-26443

Microsoft Virtual Machine Bus VMBus Remote Code Execution Vulnerability...

CVE-2021-26443: Undefined Security Weakness

Microsoft Virtual Machine Bus VMBus Remote Code Execution Vulnerability...

Microsoft Virtual Machine Bus (VMBus) Remote Code Execution Vulnerability

...

PT-2021-4815 · Microsoft · Virtual Machine Bus +1

Name of the Vulnerable Software and Affected Versions: Microsoft Virtual Machine Bus VMBus affected versions not specified Description: The issue is related to incorrect code generation management in the Microsoft Virtual Machine Bus VMBus component of the Windows operating system. This allows a...

Microsoft Windows Virtual Machine Code Injection Vulnerability

Microsoft Windows Virtual Machine is a virtualization technology from Microsoft USA. It allows you to run many virtual environments in a Windows environment. A code injection vulnerability exists in Microsoft Windows Virtual Machine Bus. The following products and editions are affected:Windows 10...

KLA12345 Multiple vulnerabilities in Microsoft Windows

Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to gain privileges, obtain sensitive information, execute arbitrary code, bypass security restrictions, cause denial of service. Below is a complete list of vulnerabilities: 1. An elevation...