1796 matches found
Sling TV turned privacy into a game you weren’t meant to win
Streaming service Sling TV has settled with the California Attorney General over allegations that it blocked users from exercising their privacy rights. The company will pay $530,000 after being accused of making it difficult for customers to opt out of its data collection practices. The Californ...
Secure Control of Connected and Autonomous Electrified Vehicles under Adversarial Cyber-Attacks
Connected and Autonomous Electrified Vehicles CAEV is the solution to the future smart mobility having benefits of efficient traffic flow and cleaner environmental impact. Although CAEV has advantages they are still susceptible to adversarial cyber attacks due to their autonomous electric operati...
EUVD-2025-35922
The Social Feed Gallery plugin for WordPress is vulnerable to Information Exposure in versions less than, or equal to, 4.9.2. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for unauthenticated attackers to exfiltrate Instagr...
The vulnerability of the Connected Devices Platform Service (CDPSvc) in Windows operating systems allows a hacker to increase their privileges.
The vulnerability of the Connected Devices Platform Service CDPSvc in Windows operating systems relates to the possibility of exploiting memory after it is freed. Exploiting this vulnerability could allow an attacker to increase their privileges...
The vulnerability of the Connected Devices Platform Service (CDPSvc) in Windows operating systems allows a perpetrator to execute arbitrary code.
The vulnerability of the Connected Devices Platform Service CDPSvc in Windows operating systems relates to the possibility of using memory after it has been freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
EUVD-2025-35613
Software which sets SOREUSEPORTLB on a socket and then connects it to a host will not directly observe any problems. However, due to its membership in a load-balancing group, that socket will receive packets originating from any host. This breaks the contract of the connect2 and implied connect v...
The vulnerability of the Azure Connected Machine Agent, a software tool for managing servers and virtual machines, is related to access control deficiencies, which allows attackers to escalate their privileges.
The vulnerability of the Azure Connected Machine Agent, a software tool for managing servers and virtual machines, is related to access control deficiencies. Exploiting this vulnerability can allow attackers to enhance their privileges...
FreeBSD-SA-25:09.netinet
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-25:09.netinet Security Advisory The FreeBSD Project Topic: SOREUSEPORTLB breaks connect2 for UDP sockets Category: core Module: netinet Announced: 2025-10-22...
PT-2025-43393
Name of the Vulnerable Software and Affected Versions versions prior to kernel release containing the fix affected versions not specified Description A flaw exists where the kernel does not properly validate the connection state of sockets when adding them to load-balancing groups created using t...
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987569)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987569 advisory. In the Linux kernel, the following vulnerability has been resolved: vsock: remove vsock from connected table when connect is interrupted by a signal vsockconnect...
The vulnerability of the Connected Devices Platform Service for Windows operating systems allows a perpetrator to escalate their privileges.
The vulnerability of the Connected Devices Platform Service for Windows operating systems relates to operations that occur outside of the buffer in memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...
The vulnerability of the Connected Devices Platform Service for Windows operating systems allows a perpetrator to escalate their privileges.
The vulnerability of the Connected Devices Platform Service for Windows operating systems is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to increase their privileges...
CVE-2025-58724
Improper access control in Azure Connected Machine Agent allows an authorized attacker to elevate privileges locally...
CVE-2025-58719
Use after free in Connected Devices Platform Service Cdpsvc allows an authorized attacker to elevate privileges locally...
CVE-2025-47989
Improper access control in Azure Connected Machine Agent allows an authorized attacker to elevate privileges locally...
CVE-2025-58727
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Connected Devices Platform Service allows an authorized attacker to elevate privileges locally...
CVE-2025-59191
Heap-based buffer overflow in Connected Devices Platform Service Cdpsvc allows an authorized attacker to elevate privileges locally...
CVE-2025-55326
Use after free in Connected Devices Platform Service Cdpsvc allows an unauthorized attacker to execute code over a network...