CVE-2024-9157 Privilege Escalation Vulnerability in CxUIUSvc service

UNSUPPORTED WHEN ASSIGNED A privilege escalation vulnerability in CxUIUSvc64.exe and CxUIUSvc32.exe of Synaptics audio drivers allows a local authorized attacker to load a DLL in a privileged process. Out of an abundance of caution, this CVE ID is being assigned to better serve our customers and...

CVE-2024-9157

Technical details about CVE-2024-9157 are not present in the provided documents. No affected products, impact, or remediation are specified here. Monitor for updates from the referenced sources.

CVE-2024-9157 Privilege Escalation Vulnerability in CxUIUSvc service

UNSUPPORTED WHEN ASSIGNED A privilege escalation vulnerability in CxUIUSvc64.exe and CxUIUSvc32.exe of Synaptics audio drivers allows a local authorized attacker to load a DLL in a privileged process. Out of an abundance of caution, this CVE ID is being assigned to better serve our customers and...

March 11, 2025—KB5053888 (Monthly Rollup)

None None...

March 11, 2025—KB5053887 (Monthly Rollup)

None None...

March 11, 2025—KB5053606 (OS Builds 19044.5608 and 19045.5608) - EXPIRED

None None...

KB5053593: Cumulative security update for Internet Explorer: March 11, 2025

None None...

March 11, 2025—KB5053596 (OS Build 17763.7009) - EXPIRED

None None...

March 11, 2025—KB5053627 (Security-only update)

None None...

March 11, 2025—KB5053995 (Security-only update)

None None...

March 11, 2025—KB5053620 (Monthly Rollup)

None None...

CVE-2025-24070

Weak authentication in ASP.NET Core & Visual Studio allows an unauthorized attacker to elevate privileges over a network...

KB5054006: Servicing stack update for Windows 10, version 1607 and Server 2016: March 11, 2025

None None...

KB5053995: Windows Server 2008 Security Update (March 2025)

The remote Windows host is missing security update 5053995. It is, therefore, affected by multiple vulnerabilities - Relative path traversal in Remote Desktop Client allows an unauthorized attacker to execute code over a network. CVE-2025-26645 - Sensitive data storage in improperly locked memory...

KB5053618: Windows 10 LTS 1507 Security Update (March 2025)

The remote Windows host is missing security update 5053618. It is, therefore, affected by multiple vulnerabilities - Relative path traversal in Remote Desktop Client allows an unauthorized attacker to execute code over a network. CVE-2025-26645 - Sensitive data storage in improperly locked memory...

GHSA-C678-JFCJ-6JMF PyTorch Tuple Handler is Vulnerable to Memory Corruption through Manipulation of None Argument

A vulnerability was found in PyTorch 2.6.0+cu124. It has been declared as critical. Affected by this vulnerability is the function torch.ops.profiler.callendcallbacksonjitfut of the component Tuple Handler. The manipulation of the argument None leads to memory corruption. The attack can be launch...

DEBIAN-CVE-2025-2148

A vulnerability was found in PyTorch 2.6.0+cu124. It has been declared as critical. Affected by this vulnerability is the function torch.ops.profiler.callendcallbacksonjitfut of the component Tuple Handler. The manipulation of the argument None leads to memory corruption. The attack can be launch...

SUSE CVE-2025-21840

In the Linux kernel, the following vulnerability has been resolved: thermal/netlink: Prevent userspace segmentation fault by adjusting UAPI header The intel-lpmd tool 1, which uses the THERMALGENLATTRCPUCAPABILITY attribute to receive HFI events from kernel space, encounters a segmentation fault...

UBUNTU-CVE-2025-21840

In the Linux kernel, the following vulnerability has been resolved: thermal/netlink: Prevent userspace segmentation fault by adjusting UAPI header The intel-lpmd tool 1, which uses the THERMALGENLATTRCPUCAPABILITY attribute to receive HFI events from kernel space, encounters a segmentation fault...

Updates on CVE for End-of-Life Versions

Updates on CVE for End-of-Life Versions Update on the issuance of CVEs to mark End-of-Life Node.js Versions TL;DR: CVE-2025-23087, CVE-2025-23088, and CVE-2025-23089 issued to tag EOL versions have been rejected by the CVE Program. The Node.js team has, therefore, decided to update previous...