SUSE CVE-2023-0662

In PHP 8.0.X before 8.0.28, 8.1.X before 8.1.16 and 8.2.X before 8.2.3, excessive number of parts in HTTP form upload can cause high resource consumption and excessive number of log entries. This can cause denial of service on the affected server by exhausting CPU resources or disk space...

CVE-2025-21420

Windows Disk Cleanup Tool Elevation of Privilege Vulnerability...

CVE-2025-0426

A security issue was discovered in Kubernetes where a large number of container checkpoint requests made to the unauthenticated kubelet read-only HTTP endpoint may cause a Node Denial of Service by filling the Node's disk...

CVE-2025-0426 vulnerabilities

Vulnerabilities for packages: kubernetes-dns-node-cache, local-static-provisioner, ip-masq-agent, vcluster, kubernetes-csi-driver-hostpath, rancher-webhook, rancher-fleet, argocd-image-updater, kubernetes, spark-operator, yunikorn-k8shim, argo-rollouts, kapp, emissary, nodetaint,...

AZL-56714 CVE-2025-0426 affecting package kubernetes for versions less than 1.30.10-1

A security issue was discovered in Kubernetes where a large number of container checkpoint requests made to the unauthenticated kubelet read-only HTTP endpoint may cause a Node Denial of Service by filling the Node's disk...

CVE-2025-0426 vulnerabilities

Vulnerabilities for packages: spark-operator-fips, argo-rollouts, azuredisk-csi, local-static-provisioner, azuredisk-csi-fips, cluster-autoscaler, rancher-fleet, kubernetes-fips, aws-efs-csi-driver, spark-operator, cluster-autoscaler-fips, aws-ebs-csi-driver, rancher-agent, yunikorn-k8shim,...

DEBIAN-CVE-2025-0426

A security issue was discovered in Kubernetes where a large number of container checkpoint requests made to the unauthenticated kubelet read-only HTTP endpoint may cause a Node Denial of Service by filling the Node's disk...

UBUNTU-CVE-2025-0426

A security issue was discovered in Kubernetes where a large number of container checkpoint requests made to the unauthenticated kubelet read-only HTTP endpoint may cause a Node Denial of Service by filling the Node's disk...

CVE-2025-0426

A security issue was discovered in Kubernetes where a large number of container checkpoint requests made to the unauthenticated kubelet read-only HTTP endpoint may cause a Node Denial of Service by filling the Node's disk...

CVE-2025-0426

A security issue was discovered in Kubernetes where a large number of container checkpoint requests made to the unauthenticated kubelet read-only HTTP endpoint may cause a Node Denial of Service by filling the Node's disk...

CVE-2025-0426

A security issue was discovered in Kubernetes where a large number of container checkpoint requests made to the unauthenticated kubelet read-only HTTP endpoint may cause a Node Denial of Service by filling the Node's disk...

CVE-2025-0426

CVE-2025-0426 (Kubernetes) : The vulnerability concerns the kubelet read-only HTTP endpoint. A flood of container checkpoint requests to the unauthenticated endpoint can exhaust node disk space, leading to a Node DoS. The provided connected IBM/KB content lists this CVE and reproduces the Kuberne...

Kubernetes 安全漏洞

Kubernetes K8s is an open source system from Kubernetes Open Source for automating the deployment, scaling, and management of containerized applications. A security vulnerability exists in Kubernetes that stems from the fact that a large number of container checkpoint requests to an unauthenticat...

Vulnerabilities fixed in Microsoft Windows

Microsoft has fixed vulnerabilities in Windows. A malicious party can exploit the vulnerabilities to carry out attacks that can lead to the following categories of damage: - Denial-of-Service DoS. - Obtaining elevated privileges - Circumvention of security measure - Spoofing - Execution of...

CVE-2025-21420

Windows Disk Cleanup Tool Elevation of Privilege Vulnerability...

CVE-2025-21420

Windows Disk Cleanup Tool Elevation of Privilege Vulnerability...

CVE-2025-21420

CVE-2025-21420 is evidenced by PoCs showing a Disk Cleanup Tool (cleanmgr.exe) elevation via a DLL sideload approach. The GitHub PoCs demonstrate loading dokan1.dll/dokannp1.dll to trigger arbitrary code paths, with the exploit chain listing SetProcessMitigationPolicy (ProcessRedirectionTrustPoli...

CVE-2025-21420 Windows Disk Cleanup Tool Elevation of Privilege Vulnerability

...

Windows Disk Cleanup Tool Elevation of Privilege Vulnerability

...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: brd: Automatic disk creation is deferred until module initialization succeeds. My colleague Wupeng identified the following issues during fault injection: BUG: Unable to handle page faults for address: fffffbfff809d073 PGD:...