7869 matches found
CVE-2025-49689
Technical details for CVE-2025-49689 (affected product/component/impact) are not publicly available in the provided documents. Monitor for updates from official sources; no concrete vendor/version/exploit information is available here.
CVE-2025-49689 Microsoft Virtual Hard Disk Elevation of Privilege Vulnerability
...
CVE-2025-47971 Microsoft Virtual Hard Disk Elevation of Privilege Vulnerability
...
CVE-2025-47971
CVE-2025-47971 describes a buffer over-read in the Virtual Hard Disk (VHDX) component that can allow a local attacker to elevate privileges. The publicly documented impact is local privilege elevation via a buffer over-read in VHDX; vendors have not provided version-specific affected products in ...
CVE-2025-47971 Microsoft Virtual Hard Disk Elevation of Privilege Vulnerability
...
Microsoft Virtual Hard Disk Elevation of Privilege Vulnerability
Buffer over-read in Virtual Hard Disk VHDX allows an unauthorized attacker to elevate privileges locally...
Microsoft Virtual Hard Disk Elevation of Privilege Vulnerability
Buffer over-read in Virtual Hard Disk VHDX allows an unauthorized attacker to elevate privileges locally...
Microsoft Virtual Hard Disk Elevation of Privilege Vulnerability
Integer overflow or wraparound in Virtual Hard Disk VHDX allows an unauthorized attacker to elevate privileges locally...
Microsoft Virtual Hard Disk Remote Code Execution Vulnerability
Integer overflow or wraparound in Virtual Hard Disk VHDX allows an unauthorized attacker to execute code locally...
PT-2025-28511
Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: A buffer over-read issue in Virtual Hard Disk VHDX allows an unauthorized attacker to elevate privileges locally. This issue affects Virtual Hard Disk VHDX, enabling an attacker to gain...
Microsoft Virtual Hard Disk 安全漏洞
Microsoft Virtual Hard Disk is a virtual hard disk file format from Microsoft USA. A security vulnerability exists in Microsoft Virtual Hard Disk VHDX. An attacker could exploit the vulnerability to elevate privileges. The following products and editions are affected:Windows 10 Version 1607 for...
ClamAV 0.99.4 < 1.0.9, 1.2.0 < 1.4.3 Multiple Vulnerabilities
According to its version, the ClamAV clamd antivirus daemon running on the remote host is 0.99.4 prior to 1.0.9, 1.2.0 prior to 1.4.3. It is, therefore, affected by multiple vulnerabilities: - A vulnerability in Universal Disk Format UDF processing of ClamAV could allow an unauthenticated, remote...
PT-2025-28509
Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: A buffer over-read issue in Virtual Hard Disk VHDX allows an unauthorized attacker to elevate privileges locally. This issue affects Virtual Hard Disk VHDX, enabling an attacker to gain...
Microsoft Virtual Hard Disk 安全漏洞
Microsoft Virtual Hard Disk is a virtual hard disk file format from Microsoft USA. A security vulnerability exists in Microsoft Virtual Hard Disk. An attacker could exploit the vulnerability to elevate privileges. The following products and versions are affected: Windows Server 2022 Server Core...
PT-2025-28581
Name of the Vulnerable Software and Affected Versions: Virtual Hard Disk VHDX affected versions not specified Description: The issue is related to an integer overflow or wraparound in Virtual Hard Disk VHDX, which allows an unauthorized attacker to execute code locally. Recommendations: At the...
org.apache.cxf: Apache CXF: Denial of Service vulnerability with temporary files
A flaw was found in Apache CXF. In some edge cases with large data stream caching, the CachedOutputStream instances may not be closed and, if backed by temporary files, may fill up the file system and trigger a denial of service...
DEBIAN-CVE-2025-38141
In the Linux kernel, the following vulnerability has been resolved: dm: fix dmblkreportzones If dmgetlivetable returned NULL, dmputlivetable was never called. Also, it is possible that md-zonerevalidatemap will change while calling this function. Only read it once, so that we are always using the...
AZL-64595 CVE-2025-38140 affecting package kernel 6.6.150.1-1
In the Linux kernel, the following vulnerability has been resolved: dm: limit swapping tables for devices with zone write plugs dmrevalidatezones only allowed new or previously unzoned devices to call blkrevalidatediskzones. If the device was already zoned, disk-nrzones would always equal...
DEBIAN-CVE-2025-38140
In the Linux kernel, the following vulnerability has been resolved: dm: limit swapping tables for devices with zone write plugs dmrevalidatezones only allowed new or previously unzoned devices to call blkrevalidatediskzones. If the device was already zoned, disk-nrzones would always equal...
AZL-70642 CVE-2025-38140 affecting package kernel 5.15.200.1-1
In the Linux kernel, the following vulnerability has been resolved: dm: limit swapping tables for devices with zone write plugs dmrevalidatezones only allowed new or previously unzoned devices to call blkrevalidatediskzones. If the device was already zoned, disk-nrzones would always equal...