1881 matches found
The vulnerability of the Connected Devices Platform Service component of the Microsoft Windows operating system, which allows a perpetrator to trigger a service failure.
The vulnerability of the Connected Devices Platform Service component of the Microsoft Windows operating system is related to an uncontrolled consumption of resources. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...
CVE-2024-45102
A privilege escalation vulnerability was discovered that could allow a valid, authenticated LXCA user to escalate their permissions for a connected XCC instance when using LXCA as a Single Sign On SSO provider for XCC instances...
CVE-2025-21207
Windows Connected Devices Platform Service Cdpsvc Denial of Service Vulnerability...
CVE-2025-21207
Windows Connected Devices Platform Service Cdpsvc Denial of Service Vulnerability...
CVE-2025-21207 Windows Connected Devices Platform Service (Cdpsvc) Denial of Service Vulnerability
...
CVE-2025-21207
Technical details about CVE-2025-21207 (Windows Cdpsvc DoS) are not publicly disclosed in the provided documents. Monitor updates from Microsoft and CVE pages for affected versions, impact details, and fixes.
Windows Connected Devices Platform Service (Cdpsvc) Denial of Service Vulnerability
...
PT-2025-1213
Name of the Vulnerable Software and Affected Versions Windows Connected Devices Platform Service Cdpsvc affected versions not specified Description The issue is related to an uncontrolled consumption of resources in the Windows Connected Devices Platform Service Cdpsvc component of the Microsoft...
CVE-2025-21207: Uncontrolled Resource Consumption
Windows Connected Devices Platform Service Cdpsvc Denial of Service Vulnerability...
Microsoft Windows 资源管理错误漏洞
Microsoft Windows is a suite of operating systems used by Microsoft Corporation USA for personal devices. A resource management error vulnerability exists in Microsoft Windows Connected Devices Platform Service. An attacker could exploit this vulnerability to cause a denial of service on the...
Germany Disrupts BADBOX Malware on 30,000 Devices Using Sinkhole Action
Germany's Federal Office of Information Security BSI has announced that it has disrupted a malware operation called BADBOX that came preloaded on at least 30,000 internet-connected devices sold across the country. In a statement published earlier this week, authorities said they severed the...
Qlik Sense 安全漏洞
Qlik Sense is an application from Qlik, Inc. that allows users to create visualizations, charts, interactive dashboards, and analytical applications for local and offline use. A security vulnerability exists in Qlik Sense Enterprise for Windows prior to November 2024 IR, which stems from the fact...
CVE-2024-42453
A vulnerability Veeam Backup & Replication allows low-privileged users to control and modify configurations on connected virtual infrastructure hosts. This includes the ability to power off virtual machines, delete files in storage, and make configuration changes, potentially leading to Denial of...
Explained: the Microsoft connected experiences controversy
Recently we've seen some heated discussion about Microsoft’s connected experiences feature. As in many discussions lately there seems to be no room for middle ground, but we're going to try and provide it anyway. First of all, it’s important to understand what the “connected experiences” are...
kernel: vsock: remove vsock from connected table when connect is interrupted by a signal
A vulnerability was found in the Linux kernel's vsock subsystem's vsockstreamconnect function where improper handling of the socket state can lead to the connected table's list being corrupted. This occurs when a signal interrupt occurs and resets the socket's state without removing it from the...
CVE-2024-52033
CVE-2024-52033 affects Rakuten Turbo 5G firmware version V1.3.18 and earlier, exposing sensitive information about devices connected via Wi‑Fi to an unauthenticated remote attacker. Affected component is the firmware itself; impact is information disclosure of other connected devices. Public sour...
CVE-2024-52033
Exposure of sensitive system information to an unauthorized control sphere issue exists in Rakuten Turbo 5G firmware version V1.3.18 and earlier. If this vulnerability is exploited, a remote unauthenticated attacker may obtain information of the other devices connected through the Wi-Fi...
An air fryer, a ring, and a vacuum get brought into a home. What they take out is your data (Lock and Code S05E24)
This week on the Lock and Code podcast… The month, a consumer rights group out of the UK posed a question to the public that they’d likely never considered: Were their air fryers spying on them? By analyzing the associated Android apps for three separate air fryer models from three different...