Microsoft Windows Mobile Broadband Driver 缓冲区错误漏洞

The Microsoft Windows Mobile Broadband Driver is a driver from Microsoft Corporation USA that allows the Windows operating system to communicate with mobile broadband devices. A buffer error vulnerability exists in Microsoft Windows Mobile Broadband Driver. An attacker could exploit this...

Microsoft Windows Routing and Remote Access Service 安全漏洞

Microsoft Windows Routing and Remote Access Service is a network service from Microsoft Corporation USA that is used to perform functions such as network routing, virtual private networks VPNs, and dial-up connections. A security vulnerability exists in Microsoft Windows Routing and Remote Access...

Microsoft Windows Kernel 代码问题漏洞

Microsoft Windows Kernel is the kernel of the Windows operating system from Microsoft Corporation USA. A code issue vulnerability exists in Microsoft Windows Kernel. An attacker could exploit this vulnerability to cause a denial of service on the system. The following products and versions are...

Microsoft Windows Mobile Broadband Driver 代码问题漏洞

Microsoft Windows Mobile Broadband Driver is a Microsoft driver that allows Windows operating systems to communicate with mobile broadband devices. A code issue vulnerability exists in Microsoft Windows Mobile Broadband Driver. An attacker exploiting this vulnerability could remotely execute code...

Microsoft Speech Application Programming Interface 资源管理错误漏洞

Microsoft Speech Application Programming Interface is a speech application programming interface from Microsoft Corporation USA. A resource management error vulnerability exists in Microsoft Speech Application Programming Interface. An attacker could exploit this vulnerability to remotely execute...

Microsoft Internet Small Computer Systems Interface 资源管理错误漏洞

Microsoft Internet Small Computer Systems Interface is an IP network-based storage technology from Microsoft that allows computer systems to access remote SCSI storage devices over existing network infrastructures such as Ethernet. A resource management error vulnerability exists in Microsoft...

Microsoft Windows Kerberos 安全漏洞

Microsoft Windows Kerberos is a software for authentication in network clusters from Microsoft Corporation USA.Kerberos also serves as a network authentication protocol designed to provide strong authentication services to client/server applications through a key system. A security vulnerability...

Microsoft Code Integrity Guard 安全漏洞

Microsoft Code Integrity Guard is a security feature in Windows systems from Microsoft Corporation USA designed to prevent the execution of untrustworthy code. A security vulnerability exists in Microsoft Code Integrity Guard. An attacker exploiting this vulnerability could bypass certain feature...

Microsoft Windows Routing and Remote Access Service 安全漏洞

Microsoft Windows Routing and Remote Access Service is a network service from Microsoft Corporation USA that is used to perform functions such as network routing, virtual private networks VPNs, and dial-up connections. A security vulnerability exists in Microsoft Windows Routing and Remote Access...

Microsoft Management Console 安全漏洞

Microsoft Management Console is a general-purpose management console framework from Microsoft Corporation USA that hosts and manages a variety of system management tools called console plug-ins or management units. A security vulnerability exists in Microsoft Management Console. An attacker...

Microsoft Simple Certificate Enrollment Protocol 资源管理错误漏洞

Microsoft Simple Certificate Enrollment Protocol is a Microsoft Corporation USA protocol for automating certificate enrollment that allows devices to request and receive certificates through a simple process. A resource management error vulnerability exists in Microsoft Simple Certificate...

Microsoft Windows Standards-Based Storage Management Service 安全漏洞

Microsoft Windows Standards-Based Storage Management Service is a standards-based storage management service from Microsoft Corporation USA that provides the ability to discover, configure, and monitor storage resources. A security vulnerability exists in Microsoft Windows Standards-Based Storage...

Microsoft多款产品 安全漏洞

Microsoft Windows and others are products of Microsoft Corporation USA.Microsoft Windows is a set of operating systems for use on personal devices.Microsoft Windows Server 2016 is a desktop operating system.Microsoft Windows Server 2019 is a desktop operating system. A security vulnerability exis...

CVE-2024-46796

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix double put of @cfile in smb2setpathsize If smb2compoundop is called with a valid @cfile and returned -EINVAL, we need to call cifsgetwritablepath before retrying it as the reference of @cfile was already dropped ...

DEBIAN-CVE-2024-46796

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix double put of @cfile in smb2setpathsize If smb2compoundop is called with a valid @cfile and returned -EINVAL, we need to call cifsgetwritablepath before retrying it as the reference of @cfile was already dropped ...

CVE-2024-46796 smb: client: fix double put of @cfile in smb2_set_path_size()

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix double put of @cfile in smb2setpathsize If smb2compoundop is called with a valid @cfile and returned -EINVAL, we need to call cifsgetwritablepath before retrying it as the reference of @cfile was already dropped ...

CVE-2024-46796

CVE-2024-46796 affects the Linux kernel CIFS SMB2 path handling (smb2_set_path_size). The issue was a double put of @cfile when smb2_compound_op() returns -EINVAL, leading to use-after-free risks in the SMB/CIFS path, as the reference to @cfile could be dropped earlier. The fix ensures cifs_get_w...

CVE-2024-46796 smb: client: fix double put of @cfile in smb2_set_path_size()

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix double put of @cfile in smb2setpathsize If smb2compoundop is called with a valid @cfile and returned -EINVAL, we need to call cifsgetwritablepath before retrying it as the reference of @cfile was already dropped ...

CVE-2024-46796 smb: client: fix double put of @cfile in smb2_set_path_size()

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix double put of @cfile in smb2setpathsize If smb2compoundop is called with a valid @cfile and returned -EINVAL, we need to call cifsgetwritablepath before retrying it as the reference of @cfile was already dropped ...

Microsoft Windows TOCTOU Local Privilege Escalation

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Windows Kernel Time of Check Time of Use LPE in AuthzBasepCopyoutInternalSecurityAttributes', 'Description' = %q CVE-2024-30088 is a Windows Kern...