pKVM virtualization Android Privilege Escalation

The vulnerability of the pKVM virtualization technology protected Kernel-based Virtual Machine in Android operating systems is related to synchronization errors when using shared resources during page caching. Exploiting this vulnerability can allow attackers to gain increased privileges...

Linux kernel Heap Buffer Overflow DoS

The vulnerability of the tracingmapinsert function in the kernel/trace/tracingmap.c module, which supports kernel tracing in Linux operating systems, is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

Linux net/sched cls_api Heap Buffer Overflow DoS

The vulnerability of the tcfblockplaybackoffloads function in the net/sched/clsapi.c module of the net/sched subsystem of the Linux operating system is related to security configuration errors. Exploiting this vulnerability could allow an attacker to access protected information or cause service...

ROS-20251202-07

A vulnerability in the Google Chrome browser's DevTools web development toolkit is related to synchronization errors when using a shared resource. synchronization errors when using a shared resource. Exploitation of the vulnerability could allow an attacker, acting remotely, to bypass the sandbox...

ROS-20251202-03

Vulnerability in DecodeConfig component of Golang programming language is related to uncontrolled consumption of resources. resources. Exploitation of the vulnerability could allow an attacker acting remotely to cause a denial-of-service condition. denial of service A vulnerability in the Downloa...

Office HarmonyOS DoS

The vulnerability of the Office operating system HarmonyOS is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause service failures...

Linux switch_mm_irqs_off Heap Buffer Overflow DoS

The vulnerability of the switchmmirqsoff function in the Linux operating system is related to resource management errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

Linux kernel NFS DoS

The vulnerabilities in the modules fs/nfsd/nfs4proc.c, fs/nfsd/nfs4state.c, fs/nfsd/nfs4xdr.c, fs/nfsd/nfsd.h, and fs/nfsd/xdr4.h of the Linux operating system are related to incorrect calculations. Exploiting these vulnerabilities can allow an attacker to cause service failures...

CVE-2025-58408

Software installed and run as a non-privileged user may conduct improper GPU system calls to trigger reads of stale data that can lead to kernel exceptions and write use-after-free. The Use After Free common weakness enumeration was chosen as the stale data can include handles to resources in whi...

EUVD-2025-199978

Software installed and run as a non-privileged user may conduct improper GPU system calls to trigger reads of stale data that can lead to kernel exceptions and write use-after-free. The Use After Free common weakness enumeration was chosen as the stale data can include handles to resources in whi...

FortiCloud SSO Bypass

The vulnerability of the FortiCloud SSO component of the FortiAnalyzer security event monitoring and analysis software is related to synchronization errors when using a shared resource. Exploiting this vulnerability could allow an attacker to circumvent existing security restrictions remotely...

D-Link DSL-7740C Privilege Escalation

The vulnerability of the service module in D-Link DSL-7740C microprogrammed software routers is related to access control errors. Exploiting this vulnerability can allow an attacker to enhance their privileges remotely...

ROS-20251201-01

A vulnerability in the Core component of the Oracle VM VirtualBox virtualization software tool is related to insufficient protection of service data. Exploitation of the vulnerability could allow an attacker to gain unauthorized access to protected information Vulnerability of Core component of...

JetBrains YouTrack Synchronization Bypass

The vulnerability of the JetBrains YouTrack project and task management software is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow attackers to bypass existing security restrictions remotely...

Siemens Solid Edge Man-in-the-Middle

The vulnerability of Siemens Solid Edge’s design and simulation tools is related to errors in the authentication process for certificates. Exploiting this vulnerability could allow a malicious actor to carry out a “man-in-the-middle” attack...

Google Chrome Autofill UI Replacement

The vulnerability of Google Chrome’s Autofill component is related to information representation errors in the user interface. Exploiting this vulnerability could allow an attacker to replace the user interface with a specially created HTML page...

Google Chrome V8 Engine Use-After-Free

The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine is related to type mixing errors. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information through a specially created HTML page...

Google Chrome V8 Engine Use-After-Free

The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine is related to type mixing errors. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information through a specially created HTML page...

Hesperus Is Phosphorus: Mapping Threat Actor Naming Taxonomies at Scale

This paper studies the problem of Threat Actor TA naming convention inconsistency across leading Cyber Threat Intelligence CTI vendors. The current decentralized and proprietary nomenclature creates confusion and significant obstacles for researchers, including difficulties in integrating and...

SROOT Component Unauthorized Access

The vulnerability of the SROOT component in NVIDIA DGX OS workstations for AI systems, such as DGX Spark, is related to errors in boundary removal of critical data. Exploiting this vulnerability can allow attackers to gain unauthorized access to protected information...