Lenovo Smart Standby Driver Vulnerability - Lenovo Support US

No description provided...

kernel: RDMA/irdma: Fix a user-after-free in add_pble_prm

A vulnerability was found in the Linux kernel's RDMA/irdma driver. Improper memory management in the addpbleprm function fails to manage memory correctly, resulting in a user-after-free condition that can lead to exploitation. This flaw allows an attacker to manipulate memory access potentially,...

SUSE-SU-2022:1575-1 Security update for the Linux Kernel (Live Patch 10 for SLE 15 SP3)

This update for the Linux Kernel 5.3.18-5937 fixes several issues. The following security issues were fixed: - - CVE-2022-1158: Fixed KVM x86/mmu compare-and-exchange of gPTE via the user address bsc1198133 - CVE-2022-0330: A random memory access flaw was found in the Linux kernel's GPU i915 kern...

The driver’s vulnerability allows for the functionality of Storage Spaces controllers on Windows operating systems, enabling attackers to increase their privileges.

The vulnerability of the driver for enabling Storage Spaces Controller on Windows operating systems is related to a numerical overflow condition. Exploiting this vulnerability can allow an attacker to increase their privileges...

GSD-2022-1001460 video: fbdev: cirrusfb: check pixclock to avoid divide by zero

video: fbdev: cirrusfb: check pixclock to avoid divide by zero This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.16.19 by commit...

CVE-2021-40425

An out-of-bounds read vulnerability exists in the IOCTL GetProcessCommand and B03 of Webroot Secure Anywhere 21.4. A specially-crafted executable can lead to denial of service. An attacker can issue an ioctl to trigger this vulnerability. An out-of-bounds read vulnerability exists in the IOCTL...

CVE-2021-40424

An out-of-bounds read vulnerability exists in the IOCTL GetProcessCommand and B03 of Webroot Secure Anywhere 21.4. A specially-crafted executable can lead to denial of service. An attacker can issue an ioctl to trigger this vulnerability. An out-of-bounds read vulnerability exists in the IOCTL...

VulnCheck KEV: CVE-2020-15368

AsrDrv103.sys in the ASRock RGB Driver does not properly restrict access from user space, as demonstrated by triggering a triple fault via a request to zero CR3...

The vulnerability of the KWatch3.sys driver (Kingsoft Antivirus KWatch Driver), a part of the Kingsoft Internet Security 9 Plus antivirus protection software, allows a hacker to execute arbitrary code.

The vulnerability of the KWatch3.sys driver Kingsoft Antivirus KWatch Driver, a component of the Kingsoft Internet Security 9 Plus antivirus protection software, is related to buffer overflow in the stack. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

Samsung SMR资源管理错误漏洞

Samsung SMR is a system patch package from South Korea's Samsung Samsung. The Samsung SMR DSP driver is vulnerable to resource management errors, which can be exploited by attackers to perform malicious operations...

Ext2Fsd代码问题漏洞

Ext2Fsd is an Ext2 file system driver for Windows by Matt Wu, a personal developer. A security vulnerability exists in Ext2Fsd v0.68, which can be exploited via the Ext2Srv service to execute a carefully crafted file in the service path...

The vulnerability of the Windows Common Log File System (CLFS) driver in the Microsoft operating system allows a hacker to disclose protected information.

The vulnerability of the Windows Common Log File System CLFS driver in the Microsoft Windows operating system is related to insufficient input data validation. Exploiting this vulnerability can allow an attacker to disclose sensitive information that should be protected...

The driver’s vulnerability allows for the functionality of Storage Spaces controllers on Windows operating systems, enabling a hacker to exploit this to disclose protected information.

The vulnerability of the driver for enabling Storage Spaces on Windows operating systems is related to the disclosure of information in a erroneous data field. Exploiting this vulnerability can allow an attacker to disclose protected information...

The vulnerability of the Windows Common Log File System Driver in the Microsoft Windows operating system allows a hacker to gain increased privileges.

The vulnerability of the Windows Common Log File System Driver in the Microsoft Windows operating system is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to enhance their privileges...

The vulnerability of the Windows Common Log File System Driver in the Microsoft Windows operating system allows a hacker to gain increased privileges.

The vulnerability of the Windows Common Log File System Driver in the Microsoft Windows operating system is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to enhance their privileges...

The driver’s vulnerability allows for the functionality of Storage Spaces controllers on Windows operating systems, enabling a hacker to exploit this to disclose protected information.

The vulnerability of the driver for enabling Storage Spaces on Windows operating systems is related to the disclosure of information in a erroneous data field. Exploiting this vulnerability can allow an attacker to disclose protected information...

kernel: failing usercopy allows for use-after-free exploitation

A use-after-free flaw was found in the Linux kernel’s vmwexecbufcopyfenceuser function in drivers/gpu/drm/vmwgfx/vmwgfxexecbuf.c in vmwgfx. This flaw allows a local attacker with user privileges to cause a privilege escalation problem...

The vulnerability of the Windows Common Log File System (CLFS) driver in Windows operating systems allows a hacker to gain elevated privileges.

The vulnerability of the Windows Common Log File System CLFS driver in Windows operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability in the driver/drivers/usb/gadget/composite.c file of the Linux operating system allows a hacker to execute arbitrary code.

The vulnerability in the driver/drivers/usb/gadget/composite.c file of the Linux operating system is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

PT-2022-6110 · Freebsd · Freebsd

Name of the Vulnerable Software and Affected Versions: FreeBSD affected versions not specified Description: The issue is caused by a buffer overflow in the mpr, mps, and mpt drivers, which can lead to heap data overwrite and potentially result in privilege escalation. Users with access to the mpr...