GSD-2022-1001072 drm/bridge: Add missing pm_runtime_put_sync

drm/bridge: Add missing pmruntimeputsync This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.17.3 by commit...

PT-2022-30010

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.34 Description The issue is related to a missing pm runtime put sync in the drm/bridge component. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel version...

PT-2022-29499

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.11 through v5.17.1 Description The issue is related to an overflow problem when reading EDID in the drm/bridge: anx7625 component. The actual impact and potential for attack have not been confirmed yet. Recommendations...

PT-2022-29816

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.11 through v5.16.18 Description The issue is related to an overflow problem when reading EDID in the drm/bridge component, specifically affecting the anx7625 module. The actual impact and potential for attack have not...

PT-2022-29345

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.3 Description The issue is related to a missing pm runtime put sync in the drm/bridge component. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions...

PT-2022-29682

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.16.20 Description The issue is related to a missing pm runtime put sync in the drm/bridge component. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel version...

PT-2022-30130

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.11 through v5.15.32 Description The issue is related to an overflow problem when reading EDID in the drm/bridge component, specifically affecting the anx7625 module. The actual impact and potential for attack have not...

The vulnerability of the Adobe Bridge file manager relates to the use of memory after it is freed, allowing an attacker to escalate their privileges.

The vulnerability of the Adobe Bridge file manager is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to enhance their privileges through a specially crafted file...

CVE-2022-24488

Windows Desktop Bridge Elevation of Privilege Vulnerability...

CVE-2022-24488

Windows Desktop Bridge Elevation of Privilege Vulnerability...

Privilege escalation

Windows Desktop Bridge Elevation of Privilege Vulnerability...

CVE-2022-24488 Windows Desktop Bridge Elevation of Privilege Vulnerability

...

CVE-2022-24488 Windows Desktop Bridge Elevation of Privilege Vulnerability

...

CVE-2022-24488

CVE-2022-24488 is a Windows Desktop Bridge elevation of privilege vulnerability. Connected sources (NCSC advisory) assign CVSSv3.1 7.8, impact: Obtaining Increased Entitlements, within Windows App Store/Windows Desktop Bridge context; no public exploit details or remediation steps are provided in...

CVE-2022-24488: Undefined Security Weakness

Windows Desktop Bridge Elevation of Privilege Vulnerability...

The vulnerability of the Adobe Bridge file manager, related to reading beyond the buffer in memory, allows an attacker to exploit the protected information.

The vulnerability of the Adobe Bridge file manager is related to reading beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to disclose protected memory information in the context of the current user, using a specially crafted file...

Windows Desktop Bridge Elevation of Privilege Vulnerability

...

PT-2022-2895 · Microsoft · Windows Desktop Bridge +1

Name of the Vulnerable Software and Affected Versions: Windows Desktop Bridge affected versions not specified Description: The issue is related to insufficient access restrictions in the Windows Desktop Bridge application converter, which can be exploited to elevate privileges. This allows an...

CVE-2021-38125

Unauthenticated remote code execution in Micro Focus Operations Bridge containerized, affecting versions 2021.05, 2021.08, and newer versions of Micro Focus Operations Bridge containerized if the deployment was upgraded from 2021.05 or 2021.08. The vulnerability could be exploited to...

CVE-2021-38125

Unauthenticated remote code execution in Micro Focus Operations Bridge containerized, affecting versions 2021.05, 2021.08, and newer versions of Micro Focus Operations Bridge containerized if the deployment was upgraded from 2021.05 or 2021.08. The vulnerability could be exploited to...