Lucene search
+L

89 matches found

SUSE CVE
SUSE CVE
added 2025/02/27 3:05 a.m.4 views

SUSE CVE-2022-49508

In the Linux kernel, the following vulnerability has been resolved: HID: elan: Fix potential double free in elaninputconfigured 'input' is a managed resource allocated with devminputallocatedevice, so there is no need to call inputfreedevice explicitly or there will be a double free. According to...

5.5CVSS7.9AI score0.00297EPSS
SaveExploits0References9
OSV
OSV
added 2025/02/26 7:01 a.m.9 views

DEBIAN-CVE-2022-49508

In the Linux kernel, the following vulnerability has been resolved: HID: elan: Fix potential double free in elaninputconfigured 'input' is a managed resource allocated with devminputallocatedevice, so there is no need to call inputfreedevice explicitly or there will be a double free. According to...

7.8CVSS5.5AI score0.00297EPSS
SaveExploits0References1
OSV
OSV
added 2025/02/26 7:01 a.m.6 views

UBUNTU-CVE-2022-49508

In the Linux kernel, the following vulnerability has been resolved: HID: elan: Fix potential double free in elaninputconfigured 'input' is a managed resource allocated with devminputallocatedevice, so there is no need to call inputfreedevice explicitly or there will be a double free. According to...

7.8CVSS6.2AI score0.00297EPSS
SaveExploits0References10
OSV
OSV
added 2025/02/26 2:13 a.m.13 views

CVE-2022-49508 HID: elan: Fix potential double free in elan_input_configured

In the Linux kernel, the following vulnerability has been resolved: HID: elan: Fix potential double free in elaninputconfigured 'input' is a managed resource allocated with devminputallocatedevice, so there is no need to call inputfreedevice explicitly or there will be a double free. According to...

7.8CVSS5.3AI score
SaveExploits0References10
Vulnrichment
Vulnrichment
added 2025/02/26 2:13 a.m.3 views

CVE-2022-49508 HID: elan: Fix potential double free in elan_input_configured

In the Linux kernel, the following vulnerability has been resolved: HID: elan: Fix potential double free in elaninputconfigured 'input' is a managed resource allocated with devminputallocatedevice, so there is no need to call inputfreedevice explicitly or there will be a double free. According to...

6.5AI score0.00297EPSS
SaveExploits0References7
CNNVD
CNNVD
added 2025/02/26 12:00 a.m.5 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the elaninputconfigured function that could lead to a double release...

7.8CVSS5.4AI score0.00297EPSS
SaveExploits0References8
Lenovo
Lenovo
added 2024/03/12 4:32 p.m.13 views

Fingerprint Reader Vulnerabilities - Lenovo Support US

No description provided...

7.3AI score
SaveExploits0
NVD
NVD
added 2024/01/12 2:15 a.m.31 views

CVE-2024-0454

ELAN Match-on-Chip FPR solution has design fault about potential risk of valid SID leakage and enumeration with spoof sensor. This fault leads to that Windows Hello recognition would be bypass with cloning SID to cause broken account identity. Version which is lower than...

6.1CVSS6.1AI score0.00253EPSS
SaveExploits0References2
CVE
CVE
added 2024/01/12 1:48 a.m.58 views

CVE-2024-0454

The CVE-2024-0454 issue affects Dell EMC ELAN Match-on-Chip FPR solutions, where a design fault can cause valid SID leakage and enumeration with a spoof sensor, enabling bypass of Windows Hello by cloning the SID to break account identity on the Dell Inspiron platform. Documented affected version...

6.1CVSS6.2AI score0.00253EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2024/01/12 1:48 a.m.10 views

CVE-2024-0454 Security Vulnerability on Match-on-Chip FPR Architecture

ELAN Match-on-Chip FPR solution has design fault about potential risk of valid SID leakage and enumeration with spoof sensor. This fault leads to that Windows Hello recognition would be bypass with cloning SID to cause broken account identity. Version which is lower than...

6CVSS6.9AI score0.00253EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/01/12 1:48 a.m.60 views

CVE-2024-0454 Security Vulnerability on Match-on-Chip FPR Architecture

ELAN Match-on-Chip FPR solution has design fault about potential risk of valid SID leakage and enumeration with spoof sensor. This fault leads to that Windows Hello recognition would be bypass with cloning SID to cause broken account identity. Version which is lower than...

6CVSS6.5AI score0.00253EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/01/12 12:00 a.m.5 views

Dell EMC ELAN Match-on-Chip FPR solution Security Vulnerability

The Dell EMC ELAN Match-on-Chip FPR solution is an on-chip match-on-chip FPR solution from Dell USA. A security vulnerability exists in previous versions of the Dell EMC ELAN Match-on-Chip FPR solution 3.0.12011.08009 Legacy/3.3.12011.08103 ESS, which stems from a SID leakage vulnerability that c...

6.1CVSS6.7AI score0.00253EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2024/01/12 12:00 a.m.15 views

PT-2024-15573 · Microsoft +1 · Windows Shell +1

Name of the Vulnerable Software and Affected Versions: ELAN Match-on-Chip FPR solution versions prior to 3.0.12011.08009 Legacy ELAN Match-on-Chip FPR solution versions prior to 3.3.12011.08103 ESS Description: The ELAN Match-on-Chip FPR solution has a design fault that poses a potential risk of...

6.1CVSS6.2AI score0.00253EPSS
SaveExploits0References5
The Hacker News
The Hacker News
added 2023/11/22 3:23 p.m.99 views

New Flaws in Fingerprint Sensors Let Attackers Bypass Windows Hello Login

A new research has uncovered multiple vulnerabilities that could be exploited to bypass Windows Hello authentication on Dell Inspiron 15, Lenovo ThinkPad T14, and Microsoft Surface Pro X laptops. The flaws were discovered by researchers at hardware and software product security and offensive...

6.1CVSS7AI score0.00807EPSS
SaveExploits0
Lenovo
Lenovo
added 2022/11/08 3:04 a.m.14 views

Elan UltraNav and MiniPort Driver Denial of Service Vulnerability - Lenovo Support US

No description provided...

7.3AI score
SaveExploits0
OSV
OSV
added 2022/11/07 4:15 p.m.7 views

CVE-2021-42205

ELAN Miniport touchpad Windows driver before 24.21.51.2, as used in PC hardware from multiple manufacturers, allows local users to cause a system crash by sending a certain IOCTL request, because that request is handled twice...

4.7CVSS5.8AI score0.0026EPSS
SaveExploits0References1
NVD
NVD
added 2022/11/07 4:15 p.m.22 views

CVE-2021-42205

ELAN Miniport touchpad Windows driver before 24.21.51.2, as used in PC hardware from multiple manufacturers, allows local users to cause a system crash by sending a certain IOCTL request, because that request is handled twice...

4.7CVSS0.0026EPSS
SaveExploits0References1
Prion
Prion
added 2022/11/07 4:15 p.m.19 views

Cross site request forgery (csrf)

ELAN Miniport touchpad Windows driver before 24.21.51.2, as used in PC hardware from multiple manufacturers, allows local users to cause a system crash by sending a certain IOCTL request, because that request is handled twice...

1CVSS4.7AI score0.0026EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2022/11/07 12:00 a.m.10 views

Dell ELAN Miniport Touchpad Driver 安全漏洞

Dell ELAN Miniport Touchpad Driver is a miniport touchpad driver from Dell USA. A security vulnerability exists in Dell ELAN Miniport Touchpad Driver versions prior to 24.21.51.2. An attacker could exploit this vulnerability to cause a system crash by sending a certain IOCTL request...

4.7CVSS5.2AI score0.0026EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2022/11/07 12:00 a.m.8 views

CVE-2021-42205

ELAN Miniport touchpad Windows driver before 24.21.51.2, as used in PC hardware from multiple manufacturers, allows local users to cause a system crash by sending a certain IOCTL request, because that request is handled twice...

4.7AI score0.0026EPSS
SaveExploits0References1
Rows per page
Query Builder