Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-000843)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000843 advisory. The IPv4 implementation in the Linux kernel before 4.5.2 mishandles destruction of device objects, which allows guest OS users to cause a denial of service host OS...

PT-2024-26899 · Nautobot · Nautobot

Name of the Vulnerable Software and Affected Versions: Nautobot versions 1.3.0 through 1.6.22 Nautobot versions 2.0.0 through 2.2.4 Description: A user with extras.view dynamicgroup permission can use the Dynamic Group detail UI view /extras/dynamic-groups// and/or the members REST API view...

The vulnerability of the win32kfull driver in the Microsoft Windows operating system allows a hacker to gain elevated privileges and execute arbitrary code.

The vulnerability of the win32kful driver in the Microsoft Windows operating system is related to the use of memory after it is freed during the processing of PDEV objects. Exploiting this vulnerability can allow an attacker to increase their privileges and execute arbitrary code...

Lenovo Power Management 安全漏洞

Lenovo Power Management is an application from the Chinese company Lenovo. A windows driver. A security vulnerability exists in Lenovo Power Management Driver prior to version 1.67.17.54, which originates from allowing unauthorized access to the driver's device objects...

Windows Kernel Logic Bug Class: Access Mode Mismatch in IO Manager

Posted by James Forshaw, Project Zero This blog post is an in-depth look at an interesting logic bug class in the Windows Kernel and what I did to try to get it fixed with our partners at Microsoft. The maximum impact of the bug class is local privilege escalation if kernel and driver developers...

USN-2997-1: Linux kernel (OMAP4) vulnerabilities

Jann Horn discovered that eCryptfs improperly attempted to use the mmap handler of a lower filesystem that did not implement one, causing a recursive page fault to occur. A local unprivileged attacker could use to cause a denial of service system crash or possibly execute arbitrary code with...

CVE-2016-3156

The IPv4 implementation in the Linux kernel before 4.5.2 mishandles destruction of device objects, which allows guest OS users to cause a denial of service host OS networking outage by arranging for a large number of IP addresses...