The Practical Issues of Side-Channel-Secure Quantum Key Distribution

Quantum Key Distribution QKD leverages the principles of quantum mechanics to provide theoretically unconditional security for cryptographic key sharing. However, practical implementations remain vulnerable due to non-ideal devices and potential security loopholes at both the source and detection...

The vulnerability of the Microsoft .NET software platform, related to memory release errors, allows a hacker to trigger a service failure.

The vulnerability of the Microsoft .NET software platform is related to memory release errors. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

The vulnerability of the Win32k.sys component in Windows operating systems, which allows a hacker to increase their privileges

The vulnerability of the Win32k.sys component in Windows operating systems is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to increase their privileges remotely...

The vulnerability of the Windows Push Notification Service allows a perpetrator to escalate their privileges on Windows operating systems.

The vulnerability of the Windows Push Notification Service is related to data type conversion errors. Exploiting this vulnerability can allow an attacker to gain increased privileges...

The vulnerability of the Windows Message Queuing system allows a perpetrator to execute arbitrary code.

The vulnerability of Windows’ Message Queuing system is related to synchronization errors when using shared resources. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the Windows Hyper-V hardware virtualization system allows attackers to escalate their privileges.

The vulnerability of the Windows Hyper-V hardware virtualization system is related to synchronization errors when using shared resources „Race Conditions“. Exploiting this vulnerability can allow an attacker to gain increased privileges...

Mozilla Thunderbird < 128.14

The version of Thunderbird installed on the remote macOS or Mac OS X host is prior to 128.14. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2025-71 advisory. - Memory safety bugs present in Firefox ESR 115.26, Firefox ESR 128.13, Thunderbird ESR 128.13, Firefox E...

Linux Distros Unpatched Vulnerability : CVE-2025-48798

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in GIMP when processing XCF image files. If a user opens one of these image files that has been specially crafted by an attacker, GIMP can be...

Linux Distros Unpatched Vulnerability : CVE-2025-48797

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in GIMP when processing certain TGA image files. If a user opens one of these image files that has been specially crafted by an attacker, GIMP...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from not properly handling server-side TLS alerts, which could lead to data read errors...

PT-2025-34170 · Elastic Nv · Endpoint Detection/Response

Уязвимость драйвера elastic-endpoint-driver.sys программного средства для защиты конечных точек Elastic Endpoint Detection and Response EDR связана с ошибками разыменования указателей. Эксплуатация уязвимости может позволить нарушителю выполнить произвольный код и вызвать отказ в обслуживании...

The vulnerability in the ASP component of AMD’s microprogramming graphics processors is related to key management errors, allowing attackers to escalate their privileges.

The vulnerability in the ASP component of AMD’s graphics processor software is related to key management errors. Exploiting this vulnerability can allow an attacker to gain elevated privileges...

Huawei HarmonyOS Type Obfuscation Vulnerability

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. Huawei HarmonyOS suffers from a type confusion vulnerability that can be exploited by an attacker to cause location information attribute errors...

The vulnerability of the Intel PROSet/Wireless WiFi connection utility is related to synchronization errors when using a shared resource (“Race Situation”). This allows a hacker to cause a service failure.

The vulnerability of the Intel PROSet/Wireless WiFi networking utility is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to cause service interruptions...

The vulnerability of Adobe Illustrator’s graphic editor, related to pointer assignment errors, allows a hacker to trigger a service failure.

The vulnerability of the Adobe Illustrator graphic editor is related to pointer assignment errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability in the SMM component of AMD’s graphics processor software relates to synchronization errors when using shared resources, allowing attackers to escalate their privileges.

The vulnerability in the SMM component of AMD’s graphics processor software is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to gain elevated privileges...

The vulnerability of Google Chrome’s cookie handling mechanism, related to errors in using standard permissions, allows a hacker to intercept class identifier registrations and steal cookie files.

The vulnerability of Google Chrome’s cookie handling mechanism is related to errors in the use of standard permissions. Exploiting this vulnerability can allow a hacker to intercept class identifier registrations and steal cookie files...

The vulnerability of the NVM Update Utility component of the microprogramming software for Intel Ethernet Network Adapter E810 Series allows a hacker to gain increased privileges.

The vulnerability of the NVM Update Utility component in the microprogramming software for Intel Ethernet Network Adapter E810 Series relates to inherited permission errors. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability of the asteval programming language library, related to synchronization errors when using a shared resource (“Race Situation”), allows a violator to execute arbitrary code.

The vulnerability of the asteval programming language library is related to synchronization errors when using a shared resource „Race Situation“. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

The vulnerability of the Symantec Endpoint Protection antivirus software lies in synchronization errors when using a shared resource, which allows a hacker to increase their privileges.

The vulnerability of the Symantec Endpoint Protection antivirus software is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to increase their privileges remotely...