13390 matches found
BitLocker Device Encryption Bypass
The vulnerability of the BitLocker Device Encryption security function in Windows operating systems is related to security configuration errors. Exploiting this vulnerability could allow a hacker to circumvent security restrictions...
Windows ALPC Privilege Escalation
The vulnerability of the Advanced Local Procedure Call ALPC in Windows operating systems is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to gain increased privileges...
Firefox ESR Information Representation Spear Phishing
The vulnerabilities of Firefox browsers, Firefox ESR, and the email client Thunderbird are related to information representation errors in the user interface. Exploiting these vulnerabilities can allow attackers to perform spear-phishing attacks by making a series of pop-up windows and calls to...
kernel: use-after-free and memory errors in ext4 when mounting and operating on a corrupted image
A use-after-free flaw was found in fs/ext4/namei.c:dxinsertblock in the Linux kernel’s filesystem sub-component. This flaw allows a local attacker with a user privilege to cause a denial of service...
Point to Point Tunneling Protocol Code Execution
The vulnerability of the Point to Point Tunneling Protocol PPTP implementation in Windows operating systems is related to synchronization errors when using a shared resource. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending a specially crafted PPTP packe...
Mark of the Web Bypass
The vulnerability of the Mark of the Web operating system mechanism is related to security configuration errors. Exploiting this vulnerability allows a malicious actor to bypass existing security restrictions remotely...
Windows for connected users Privilege Escalation
The vulnerability of the functional capabilities for connected users and telemetry in the Windows operating system arises due to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to increase their privileges...
SharePoint Information Representation Spear Phishing
The vulnerability of Microsoft SharePoint Foundation, SharePoint Server, and SharePoint Enterprise Server relates to information display errors in the user interface. Exploiting this vulnerability can allow an attacker to perform spear-phishing attacks remotely...
Windows ALPC Privilege Escalation
The vulnerability of the Advanced Local Procedure Call ALPC in the Windows operating system arises due to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to increase their privileges...
Point-to-Point Tunneling Protocol DoS
The vulnerability of the Point-to-Point Tunneling Protocol network protocol implementation in the Windows operating system arises due to synchronization errors when using a shared resource. Exploiting this vulnerability allows an attacker to remotely cause service failures...
PT-2022-37992
Уязвимость функции kcm splice read модуля net/kcm/kcmsock.c реализации сетевых функций ядра операционной системы Linux связана с ошибками синхронизации при использовании общего ресурса. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании...
PT-2022-38224
Уязвимость функции dmc620 pmu init модуля drivers/perf/arm dmc620 pmu.c драйвера мониторинга производительности ядра операционной системы Linux связана с ошибками управления состоянием. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании...
USN-5723-1 vim vulnerabilities
It was discovered that Vim could be made to crash when searching specially crafted patterns. An attacker could possibly use this to crash Vim and cause denial of service. CVE-2022-1674 It was discovered that there existed a NULL pointer dereference in Vim. An attacker could possibly use this to...
GSD-2022-1006738 btrfs: scrub: properly report super block errors in system log
btrfs: scrub: properly report super block errors in system log This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.3 by commit...
Upgraded Q -> M from #471 [1668464969039]
Judge has assessed an item in Issue 471 as M risk. The relevant finding follows: The whole report --- The text was updated successfully, but these errors were encountered: All reactions...
PT-2022-34993 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.3 Description: The issue concerns the btrfs scrub feature, which fails to properly report super block errors in the system log. This could potentially lead to security vulnerabilities, although the actual...
CNG Key Isolation service Privilege Escalation
The vulnerability of the CNG Key Isolation service in the Windows operating system is related to errors in the code. Exploiting this vulnerability can allow an attacker to gain increased privileges...
Windows Photo Import API Privilege Escalation
The vulnerability of the Windows Photo Import API of the Microsoft Windows operating system is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information and increase their privileges...
OESA-2022-2082 libxml2 security update
This library allows to manipulate XML files. It includes support to read, modify and write XML and HTML files. There is DTDs support this includes parsing and validation even with complex DtDs, either at parse time or later once the document has been modified. The output can be a simple SAX strea...
Exiv2 Code Execution
The vulnerability of the QuickTimeVideo::userDataDecoder function in the quicktimevideo.cpp file of the Exiv2 image metadata management library and command-line utilities is related to pointer aliasing errors. Exploiting this vulnerability could allow an attacker to execute arbitrary code...