Lucene search
+L

37995 matches found

NVD
NVD
added 2025/12/11 8:15 p.m.17 views

CVE-2025-36916

In PrepareWorkloadBuffers of gxpmainactor.cc, there is a possible double fetch due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

7CVSS0.00057EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/12/11 7:35 p.m.3 views

CVE-2025-36934

In bigoworkerthread of private/google-modules/video/gchips/bigo.c, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

6.4AI score0.001EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/12/11 7:35 p.m.34 views

CVE-2025-36934

In bigoworkerthread of private/google-modules/video/gchips/bigo.c, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

0.001EPSS
SaveExploits0References1
CVE
CVE
added 2025/12/11 7:35 p.m.39 views

CVE-2025-36934

CVE-2025-36934 is discussed in connected Google Project Zero posts as a 0-click/exploit chain involving the Dolby Unified Decoder (UDC) on Pixel devices. The vulnerability arises inside EMDF parsing in the UDC, where an attacker-controlled EMDF container can trigger a buffer overrun on the evo he...

7.4CVSS6.4AI score0.001EPSS
SaveExploits0References2Affected Software1
CVE
CVE
added 2025/12/11 7:35 p.m.27 views

CVE-2025-36916

CVE-2025-36916 affects code path in PrepareWorkloadBuffers of gxp_main_actor.cc, where a race condition can cause a double fetch. This permits local escalation of privilege with no extra execution privileges and no user interaction needed; exploitation is local. Connected documents corroborate th...

7CVSS6.4AI score0.00057EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2025/12/11 7:35 p.m.3 views

CVE-2025-36916

In PrepareWorkloadBuffers of gxpmainactor.cc, there is a possible double fetch due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

6.4AI score0.00057EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/12/11 7:35 p.m.33 views

CVE-2025-36916

In PrepareWorkloadBuffers of gxpmainactor.cc, there is a possible double fetch due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

0.00057EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/12/11 7:35 p.m.11 views

EUVD-2025-202867

In PrepareWorkloadBuffers of gxpmainactor.cc, there is a possible double fetch due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

7CVSS6.3AI score0.00057EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/12/11 12:00 a.m.11 views

MaxKB 竞争条件问题漏洞

MaxKB is a 1Panel-dev open source open source knowledge base question and answer system based on a large language model and RAG. A competitive condition issue vulnerability exists in MaxKB 2.3.1 and earlier versions, which stems from a tool module that allows an attacker to escape the sandbox...

10CVSS6.7AI score0.00303EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2025/12/11 12:00 a.m.11 views

PT-2025-50699

In PrepareWorkloadBuffers of gxp main actor.cc, there is a possible double fetch due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

7CVSS6.8AI score0.00057EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2025/12/11 12:00 a.m.7 views

EulerOS 2.0 SP11 : golang (EulerOS-SA-2025-2462)

According to the versions of the golang packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Proxy-Authorization and Proxy-Authenticate headers persisted on cross-origin redirects potentially leaking sensitive information.CVE-2025-4673 If...

7CVSS6.5AI score0.00604EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2025/12/11 12:00 a.m.13 views

Google Pixel 安全漏洞

Google Pixel is a smartphone from the American company Google Google. Google Pixel has a security vulnerability that can be exploited by an attacker to cause local elevation of privilege...

7.4CVSS6AI score0.001EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2025/12/11 12:00 a.m.9 views

Unity Linux 20.1050e Security Update: kernel (UTSA-2025-991157)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-991157 advisory. In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btsdio: fix use after free bug in btsdioremove due to race condition In btsdioprobe, t...

7.8CVSS6.1AI score0.0018EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2025/12/11 12:00 a.m.4 views

EulerOS 2.0 SP11 : golang (EulerOS-SA-2025-2481)

According to the versions of the golang packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Proxy-Authorization and Proxy-Authenticate headers persisted on cross-origin redirects potentially leaking sensitive information.CVE-2025-4673 If...

7CVSS6.5AI score0.00604EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
added 2025/12/11 12:00 a.m.11 views

PT-2025-50714

Name of the Vulnerable Software and Affected Versions Google Bigo affected versions not specified Description The issue is a use after free condition occurring in the bigo worker thread of private/google-modules/video/gchips/bigo.c due to a race condition. This could lead to local escalation of...

7.4CVSS6.5AI score0.001EPSS
SaveExploits0References12
Tenable Nessus
Tenable Nessus
added 2025/12/11 12:00 a.m.5 views

Unity Linux 20.1050e Security Update: kernel (UTSA-2025-991165)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-991165 advisory. In the Linux kernel, the following vulnerability has been resolved: binder: fix UAF of ref-proc caused by race condition A transaction of type BINDERTYPEWEAKHANDLE c...

7.8CVSS5.2AI score0.00147EPSS
SaveExploits0References4
NVD
NVD
added 2025/12/10 11:15 p.m.10 views

CVE-2025-67505

Okta Java Management SDK facilitates interactions with the Okta management API. In versions 11.0.0 through 20.0.0, race conditions may arise from concurrent requests using the ApiClient class. This could cause a status code or response header from one request’s response to influence another...

8.4CVSS0.00203EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2025/12/10 10:19 p.m.5 views

CVE-2025-67505 Race condition in the Okta Java SDK

Okta Java Management SDK facilitates interactions with the Okta management API. In versions 11.0.0 through 20.0.0, race conditions may arise from concurrent requests using the ApiClient class. This could cause a status code or response header from one request’s response to influence another...

8.4CVSS6.5AI score0.00203EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2025/12/10 10:19 p.m.34 views

CVE-2025-67505 Race condition in the Okta Java SDK

Okta Java Management SDK facilitates interactions with the Okta management API. In versions 11.0.0 through 20.0.0, race conditions may arise from concurrent requests using the ApiClient class. This could cause a status code or response header from one request’s response to influence another...

8.4CVSS0.00203EPSS
SaveExploits0References2
OSV
OSV
added 2025/12/10 10:19 p.m.12 views

CVE-2025-67505 Race condition in the Okta Java SDK

Okta Java Management SDK facilitates interactions with the Okta management API. In versions 11.0.0 through 20.0.0, race conditions may arise from concurrent requests using the ApiClient class. This could cause a status code or response header from one request’s response to influence another...

8.4CVSS6.8AI score
SaveExploits0References4
Rows per page
Query Builder