SHE-LoRA: Selective Homomorphic Encryption for Federated Tuning with Heterogeneous LoRA

Federated fine-tuning of large language models LLMs is critical for improving their performance in handling domain-specific tasks. However, prior work has shown that clients' private data can actually be recovered via gradient inversion attacks. Existing privacy preservation techniques against su...

Apple macOS 安全漏洞

Apple macOS Sequoia is an operating system announced by Apple at the WWDC24 developer conference on June 10, 2024, with the official version launched in the fall of the same year, primarily for Mac devices, emphasizing cross-device collaboration and integration of AI functionality to significantl...

The vulnerability of the Cross Device Service on the Windows operating system allows attackers to increase their privileges.

The vulnerability of the Cross Device Service on the Windows operating system is related to access control deficiencies. Exploiting this vulnerability can allow attackers to enhance their privileges...

CVE-2025-24994

Improper access control in Windows Cross Device Service allows an authorized attacker to elevate privileges locally...

CVE-2025-24076

Improper access control in Windows Cross Device Service allows an authorized attacker to elevate privileges locally...

The vulnerability of Microsoft Cross-Device operating system services allows attackers to elevate their privileges to a system-level level.

The vulnerability of Microsoft Cross-Device operating system services is related to access control errors. Exploiting this vulnerability can allow attackers to elevate their privileges to a system-level level...

CVE-2025-24994

Improper access control in Windows Cross Device Service allows an authorized attacker to elevate privileges locally...

CVE-2025-24994

Improper access control in Windows Cross Device Service allows an authorized attacker to elevate privileges locally...

CVE-2025-24076

Improper access control in Windows Cross Device Service allows an authorized attacker to elevate privileges locally...

CVE-2025-24076

Improper access control in Windows Cross Device Service allows an authorized attacker to elevate privileges locally...

CVE-2025-24994 Microsoft Windows Cross Device Service Elevation of Privilege Vulnerability

...

CVE-2025-24994

Technical details about CVE-2025-24994 (Windows Cross Device Service elevation of privilege) are not publicly provided in the connected documents. Monitor for updates from Microsoft and incident responders.

CVE-2025-24994 Microsoft Windows Cross Device Service Elevation of Privilege Vulnerability

...

CVE-2025-24076 Microsoft Windows Cross Device Service Elevation of Privilege Vulnerability

...

CVE-2025-24076 Microsoft Windows Cross Device Service Elevation of Privilege Vulnerability

...

Microsoft Windows Cross Device Service Elevation of Privilege Vulnerability

Improper access control in Windows Cross Device Service allows an authorized attacker to elevate privileges locally...

Microsoft Windows Cross Device Service Elevation of Privilege Vulnerability

Improper access control in Windows Cross Device Service allows an authorized attacker to elevate privileges locally...

PT-2025-10837 · Microsoft · Windows Cross Device Service +1

Name of the Vulnerable Software and Affected Versions: Windows Cross Device Service versions prior to the fixed version Description: The issue is related to improper access control in the Windows Cross Device Service, allowing an authorized attacker to elevate privileges locally. This can enable ...

UBUNTU-CVE-2024-51491

notion-go is a collection of libraries for supporting sign and verify OCI artifacts. Based on Notary Project specifications. The issue was identified during Quarkslab's security audit on the Certificate Revocation List CRL based revocation check feature. After retrieving the CRL, notation-go...

Cairo: Multiple Vulnerabilities

Background Cairo is a 2D vector graphics library with cross-device output support. Description Multiple vulnerabilities have been discovered in Cairo. Please review the CVE identifiers referenced below for details. Impact Please review the referenced CVE identifiers for details. Workaround There ...