March 12, 2024—KB5035885 (Monthly Rollup)

None None...

PT-2024-2869 · Cdata +1 · Cdata Arc +1

Name of the Vulnerable Software and Affected Versions: CData Arc versions prior to 23.4.8839 Description: A path traversal vulnerability exists in the Java version of CData Arc when running using the embedded Jetty server. This could allow an unauthenticated remote attacker to gain access to...

resources.arcmachines.com Improper Access Control vulnerability OBB-3855478

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

November 14, 2023—KB5032247 (Monthly Rollup)

None None...

February 13, 2024—KB5034830 (Monthly Rollup)

None None...

February 13, 2024—KB5034819 (Monthly Rollup)

None None...

GHSA-C8V3-JHV9-4PPC Use-after-free when setting the locale

Version 3.0.0 introduced an AtomicStr type, that is used to store the current locale. It stores the locale as a raw pointer to an Arc. The locale can be read with AtomicStr::asstr. AtomicStr::asstr does not increment the usage counter of the Arc. If the locale is changed in one thread, another...

RUSTSEC-2024-0007 Use-after-free when setting the locale

Version 3.0.0 introduced an AtomicStr type, that is used to store the current locale. It stores the locale as a raw pointer to an Arc. The locale can be read with AtomicStr::asstr. AtomicStr::asstr does not increment the usage counter of the Arc. If the locale is changed in one thread, another...

Use-after-free when setting the locale

Version 3.0.0 introduced an AtomicStr type, that is used to store the current locale. It stores the locale as a raw pointer to an Arc. The locale can be read with AtomicStr::asstr. AtomicStr::asstr does not increment the usage counter of the Arc. If the locale is changed in one thread, another...

January 9, 2024—KB5034184 (Monthly Rollup)

None None...

January 9, 2024—KB5034171 (Monthly Rollup)

None None...

December 12, 2023—KB5033429 (Monthly Rollup)

None None...

December 12, 2023—KB5033420 (Monthly Rollup)

None None...

CVE-2023-32638

Incorrect default permissions in some Intel Arc RGB Controller software before version 1.06 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2023-32638

Incorrect default permissions in some Intel Arc RGB Controller software before version 1.06 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2023-29165

Unquoted search path or element in some IntelR ArcTM Control software before version 1.73.5335.2 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2023-29165

Unquoted search path or element in some IntelR ArcTM Control software before version 1.73.5335.2 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2023-28401

Out-of-bounds write in some IntelR ArcTM & IrisR Xe Graphics - WHQL - Windows drivers before version 31.0.101.4255 may allow authenticated user to potentially enable escalation of privilege via local access...

CVE-2023-28404

Out-of-bounds read in the IntelR ArcTM & IrisR Xe Graphics - WHQL - Windows drivers before version 31.0.101.4255 may allow an authenticated user to potentially enable information disclosure via local access...

CVE-2023-28404

Out-of-bounds read in the IntelR ArcTM & IrisR Xe Graphics - WHQL - Windows drivers before version 31.0.101.4255 may allow an authenticated user to potentially enable information disclosure via local access...