RHEL 8 : xorg-x11-server (RHSA-2023:6916)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:6916 advisory. X.Org is an open-source implementation of the X Window System. It provides the basic low-level functionality that full-fledged graphical user...

VulnCheck KEV: CVE-2023-36033

Microsoft Windows Desktop Window Manager DWM Core Library contains an unspecified vulnerability that allows for privilege escalation...

X Window System X.Org Server ScreenSaverSetAttributes Wayland Protocol DoS

The vulnerability of the ScreenSaverSetAttributes function in the X Window System X.Org Server, and the Wayland protocol for X.Org XWayland, is related to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to access confidential data, compromise its...

Moderate: xorg-x11-server security and bug fix update

X.Org is an open-source implementation of the X Window System. It provides the basic low-level functionality that full-fledged graphical user interfaces are designed upon. Security Fixes: xorg-x11-server: X.Org Server Overlay Window Use-After-Free Local Privilege Escalation Vulnerability...

Microsoft Windows Desktop Window Manager (DWM) Core Library Privilege Escalation Vulnerability

Microsoft Windows Desktop Window Manager DWM Core Library contains an unspecified vulnerability that allows for privilege escalation...

LibX11 Heap Buffer Overflow DoS

The vulnerability of the XkbReadKeySyms function in the X Window System LibX11 library lies in its ability to read data beyond the allowed limits of the data buffer. Exploiting this vulnerability could allow an attacker to gain access to confidential data...

mariadb: crash via window function in expression in ORDER BY

A flaw was found in the MariaDB Server. It contains a segmentation fault via the component, sql/fieldconv.cc, affecting availability...

mariadb: assertion failure in compare_order_elements

A flaw was found in the MariaDB Server. It contains a segmentation fault via the component, sql/sqlwindow.cc, impacting availability...

CVE-2023-46756

Permission control vulnerability in the window management module. Successful exploitation of this vulnerability may cause malicious pop-up windows...

CVE-2023-46756

Permission control vulnerability in the window management module. Successful exploitation of this vulnerability may cause malicious pop-up windows...

Design/Logic Flaw

Permission control vulnerability in the window management module. Successful exploitation of this vulnerability may cause malicious pop-up windows...

Important: Red Hat Security Advisory: xorg-x11-server security update

An update for xorg-x11-server is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerabilit...

CVE-2023-46756

Permission control vulnerability in the window management module. Successful exploitation of this vulnerability may cause malicious pop-up windows...

CVE-2023-46756

CVE-2023-46756 describes a permission-control flaw in Huawei HarmonyOS/EMUI’s window management module that can lead to malicious pop-up windows. Documented impact: privilege-control weakness with potential UI disruption; no concrete exploit details, affected versions, or remediation information ...

CVE-2023-46756

Permission control vulnerability in the window management module. Successful exploitation of this vulnerability may cause malicious pop-up windows...

PT-2023-30186 · Huawei · Emui +1

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue concerns a permission control vulnerability in the window management module. Successful exploitation of this vulnerability may cause malicious...

CVE-2023-46756: Improper Privilege Management

Permission control vulnerability in the window management module. Successful exploitation of this vulnerability may cause malicious pop-up windows...

kernel: net: tls: avoid hanging tasks on the tx_lock

A denial-of-service flaw was found in the Linux kernel's TLS implementation. An adversarial network receiver can keep the TCP receive window RWIN at zero for extended periods, causing a thread holding the txlock to sleep indefinitely. Other tasks waiting for this lock become hung, leading to syst...

xorg-x11-server: X.Org Server Overlay Window Use-After-Free Local Privilege Escalation Vulnerability

A vulnerability was found in X.Org Server. This flaw occurs if a client explicitly destroys the compositor overlay window aka COW, where Xserver leaves a dangling pointer to that window in the CompScreen structure, which will later trigger a use-after-free issue. The Overlay Window use-after-free...

xorg-x11-server: X.Org Server Overlay Window Use-After-Free Local Privilege Escalation Vulnerability

A vulnerability was found in X.Org Server. This flaw occurs if a client explicitly destroys the compositor overlay window aka COW, where Xserver leaves a dangling pointer to that window in the CompScreen structure, which will later trigger a use-after-free issue. The Overlay Window use-after-free...