The vulnerability of the AMDPowerProfiler.sys driver, a tool for analyzing software profiling, is related to improper access control. This allows attackers to increase their privileges.

The vulnerability of the AMDPowerProfiler.sys driver, a tool for analyzing software profiling, is related to deficiencies in access control. Exploiting this vulnerability allows an attacker to enhance their privileges by injecting code into the process through Ring 0...

Databricks JDBC Driver 安全漏洞

Databricks JDBC Driver is a driver from Databricks, Inc. A security vulnerability exists in Databricks JDBC Driver versions prior to 2.6.40 that stems from improper handling of the krbJAASFile parameter. An attacker can exploit the vulnerability to remotely execute code...

The vulnerability of the UMTS RLC microprogramming software driver for Unisoc chips, related to buffer overflow attacks, allows attackers to cause service failures.

The vulnerability of the UMTS RLC microprogramming software driver for Unisoc chips is related to writing beyond buffer boundaries. Exploiting this vulnerability could allow a malicious actor to cause service failure...

The vulnerability of the Windows Common Log File System (CLFS) driver in Microsoft Windows operating systems allows a hacker to exploit their privileges.

The vulnerability of the Windows Common Log File System CLFS driver in Microsoft Windows is related to operations that go beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...

Windows Common Log File System Driver Elevation of Privilege Vulnerability

...

Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

...

Microsoft Windows Common Log File System Driver 安全漏洞

The Microsoft Windows Common Log File System Driver is a Microsoft Corporation Common Log File System CLFS API that provides a high-performance, common log file subsystem that can be used by dedicated client applications and shared by multiple clients to optimize logging and access. access. A...

Microsoft Windows Common Log File System Driver 安全漏洞

The Microsoft Windows Common Log File System Driver is a Microsoft Corporation Common Log File System CLFS API that provides a high-performance, common log file subsystem that can be used by dedicated client applications and shared by multiple clients to optimize logging and access. access. A...

KB5048652: Windows 10 version 21H2 / Windows 10 Version 22H2 Security Update (December 2024)

The remote Windows host is missing security update 5048652. It is, therefore, affected by multiple vulnerabilities - Windows Kernel-Mode Driver Elevation of Privilege Vulnerability CVE-2024-49074 - Input Method Editor IME Remote Code Execution Vulnerability CVE-2024-49079 - Windows Common Log Fil...

The vulnerabilities of DRM/MSM/A6XX components in Linux kernel, which allow a hacker to trigger a service failure

The vulnerability of DRM/MSM/A6XX components in the Linux operating system is related to reading data outside of the allowed range. Exploiting this vulnerability can allow a hacker to cause service failures...

CVE-2018-9399

In /proc/driver/wmtdbg driver, there are several possible out of bounds writes. These could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

Qualcomm Chipsets 安全漏洞

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. A security vulnerability exists in Qualcomm Chipsets, which stems from the NPU firmware being able to send invalid Inter-Process Communication IPC messages to the NPU driver without the driver validating the IPC messages...

PT-2024-25081 · Qualcomm · Qualcomm Snapdragon Auto To Xr2 5G Platform

Name of the Vulnerable Software and Affected Versions: Qualcomm Snapdragon Auto to XR2 5G Platform affected versions not specified Description: The issue involves memory corruption when analyzing sensor packets in the camera driver. A user-space variable is used while allocating memory in the...

The vulnerability of the gsm_cleanup_mux() function in the TTY driver (drivers/tty/n_gsm.c) of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the gsmcleanupmux function in the TTY driver drivers/tty/ngsm.c of the Linux operating system is related to the state of the race condition. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the hix5hd2_rx() function in the Linux operating system allows a perpetrator to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the hix5hd2rx function in the Linux kernel’s drivers/net/ethernet/hisilicon/hix5hd2gmac.c file is related to the repeated use of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of...

The vulnerability of the vdec_close() function in the Qualcomm Venus V4L2 driver for Linux operating systems allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the vdecclose function in the drivers/media/platform/qcom/venus/vdec.c file of the Qualcomm Venus V4L2 driver for the Linux operating system is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the...

The vulnerability of the NVIDIA Virtual GPU Manager driver, which allows a hacker to gain unauthorized access to protected information and increase their privileges.

The vulnerability of the NVIDIA Virtual GPU Manager driver relates to the improper assignment of permissions for the critical resource. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information and increase their privileges...

The vulnerability of the driver installer for Intel Ethernet Adapter Complete Driver Pack allows a hacker to gain elevated privileges.

The vulnerability of the driver installer for Intel Ethernet Adapter Complete Driver Pack is related to an uncontrolled element in the search process. Exploiting this vulnerability can allow attackers to increase their privileges...

Intel SGX driver 安全漏洞

Intel SGX driver is an SGX Intel Software Security Extensions driver from Intel Corporation USA. A security vulnerability exists in Intel SGX driver that originates from an improper condition check in the memory controller configuration. An attacker can exploit the vulnerability to elevate...

CVE-2024-51562

Summary (CVE-2024-51562): The bhyve hypervisor/FreeBSD NVMe path is affected by a buffer over-read in the NVMe driver function nvme_opc_get_log_page, triggered by a guest-controlled value. This can enable a DoS against the bhyve host and potential memory access of bhyve-process memory by a malici...