CVE-2024-43449 Windows USB Video Class System Driver Elevation of Privilege Vulnerability

...

CVE-2024-43449 Windows USB Video Class System Driver Elevation of Privilege Vulnerability

...

CVE-2024-43643

CVE-2024-43643 is a Windows USB Video Class System Driver elevation-of-privilege vulnerability. The vulnerability pertains to the Windows USB Video Driver component and is categorized with CVSSv3.1 vektor: physical attack, low complexity, no privileges required, no user interaction, and impacts t...

CVE-2024-43643 Windows USB Video Class System Driver Elevation of Privilege Vulnerability

...

CVE-2024-43643 Windows USB Video Class System Driver Elevation of Privilege Vulnerability

...

CVE-2024-43638

CVE-2024-43638 is a Windows USB Video Class System Driver Elevation of Privilege vulnerability. The connected sources corroborate a Windows USB Video Driver component as the affected area and indicate that mitigations are released via Microsoft security updates (e.g., November 2024 updates/KBs). ...

CVE-2024-43638 Windows USB Video Class System Driver Elevation of Privilege Vulnerability

...

CVE-2024-43637

CVE-2024-43637 is a Windows USB Video Class System Driver elevation-of-privilege vulnerability. The connected documents confirm a Windows USB Video Driver entry and indicate that Microsoft patched this family of flaws in November 2024 updates (e.g., KB5046616/OS Build 20348.2849 and related KBs)....

CVE-2024-43637 Windows USB Video Class System Driver Elevation of Privilege Vulnerability

...

CVE-2024-43634 Windows USB Video Class System Driver Elevation of Privilege Vulnerability

...

CVE-2024-43634 Windows USB Video Class System Driver Elevation of Privilege Vulnerability

...

CVE-2024-43634

CVE-2024-43634 (Windows USB Video Class System Driver Elevation of Privilege) affects Windows USB Video Driver. Connected sources corroborate a privilege-escalation vulnerability with CVSS v3.1 base score 6.8 (Vector: Privileges none, User interaction none, Attack vector physical, Scope unchanged...

kernel: mmc: rtsx_usb_sdmmc: fix return value check of mmc_add_host()

In the Linux kernel, the following vulnerability has been resolved: mmc: rtsxusbsdmmc: fix return value check of mmcaddhost mmcaddhost may return error, if we ignore its return value, the memory that allocated in mmcallochost will be leaked and it will lead a kernel crash because of deleting not...

kernel: stm class: Fix a double free in stm_register_device()

A vulnerability was found in the Linux kernel's stm class, where an improper memory management sequence in stmregisterdevice could lead to a double-free error. This issue occurs when the putdevice&stm-dev call triggers stmdevicerelease to free "stm", making the subsequent vfreestm call redundant...

Windows USB Video Class System Driver Elevation of Privilege Vulnerability

...

Windows USB Video Class System Driver Elevation of Privilege Vulnerability

...

Windows USB Video Class System Driver Elevation of Privilege Vulnerability

...

Windows USB Video Class System Driver Elevation of Privilege Vulnerability

...

Windows USB Video Class System Driver Elevation of Privilege Vulnerability

...

SQL Injection

@langchain/community is vulnerable to SQL injection. The vulnerability is due to improper handling of user input in the GraphCypherQAChain class, which allows attackers to inject malicious prompts that can lead to SQL injection...