PT-2022-2842 · Microsoft · Windows Hyper-V +1

Name of the Vulnerable Software and Affected Versions: Windows Hyper-V affected versions not specified Description: The issue is related to synchronization errors in the Windows Hyper-V hardware virtualization system, specifically a "race condition" situation. This allows a remote attacker to...

PT-2022-2836 · Microsoft · Windows Dns Server +1

Name of the Vulnerable Software and Affected Versions: Windows DNS Server affected versions not specified Description: The issue is caused by synchronization errors when using a shared resource in the Windows operating system. It allows remote attackers to execute arbitrary code and affect the...

Mozilla Firefox Resource Management DoS

The vulnerability of the Mozilla Firefox browser is related to resource management errors. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

Microsoft Windows Kernel Information Leakage Vulnerability

The Microsoft Windows Kernel is the kernel of the Windows operating system from the American company Microsoft. An information disclosure vulnerability exists in Microsoft Windows Kernel. The vulnerability arises from errors in configuration, etc. in the operation of a networked system or product...

Samsung SMR buffer error vulnerability

Samsung SMR is a system patch package from South Korea's Samsung Samsung. A buffer overflow vulnerability exists in Samsung SMR, which stems from an incorrect boundary check in the Quram Agif library and can be exploited by attackers to cause arbitrary code execution...

Nginx LDAP Auth Code Execution

The vulnerability of the LDAP-auth HTTP-server implementation based on Nginx is related to errors in the code. Exploiting this vulnerability allows a remote attacker to execute any arbitrary code on the vulnerable system...

NVIDIA GPU Display Driver Heap Buffer Overflow DoS

The vulnerability of the nvlddmkm.sys component of the NVIDIA GPU Display Driver is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability allows an attacker to access confidential data and cause system failures...

Mbed TLS SSL/TLS Certificate Validation

The vulnerability of TLS and SSL Mbed TLS implementations is related to the incorrect use of the revocationDate check. Exploiting this vulnerability allows a remote attacker to compromise the integrity of data...

Oracle Java SE Libraries GraalVM Enterprise Partial DoS

The vulnerability of the Libraries component of the Oracle Java SE software platform, the Oracle GraalVM Enterprise Edition virtual machine, and the Oracle Solaris operating system is related to resource release errors. Exploiting this vulnerability can allow an attacker to cause a partial servic...

Oracle Enterprise Session Border Controller Log Component Partial DoS

The vulnerability of the Log component in the Oracle Enterprise Session Border Controller is related to resource release errors. Exploiting this vulnerability could allow a malicious actor to cause a partial service outage using the HTTP protocol...

Generic-array module Type Handling DoS

The vulnerability of the Generic-array module in Rust is related to the increased lifespan of the arr! macro. Exploiting this vulnerability allows a remote attacker to cause service failures...

Intel Intra-mode BTI Unauthorized Access

The vulnerability of the Intel microprogrammable processor’s Intra-mode BTI IMBTI implementation is related to errors in parameter processing. Exploiting this vulnerability can allow an intruder to gain unauthorized access to protected information...

Firefox Thunderbird JIT Data Compromise

The vulnerability of the JIT component in the Firefox web browser and the Thunderbird email client is related to errors during resource release. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

Faust CosPrim computeSigOutput DoS

The vulnerability of the CosPrim::computeSigOutput function in the cosprim.hh component of the Faust sound synthesis and processing programming language is related to pointer arithmetic errors. Exploiting this vulnerability allows an attacker to cause a service failure...

Paramiko SSHv2 Information Disclosure

The vulnerability of the SSHv2 protocol implementation by the Paramiko library is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to access confidential information...

Google Chrome Microsoft Edge Code Execution

The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers is related to type conversion errors. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through a specially created web page...

MP4Box Heap Buffer Overflow DoS

The vulnerability of the DumpTrackInfo function in the MP4Box multimedia platform’s command is related to pointer assignment errors. Exploiting this vulnerability allows a remote attacker to trigger a service failure using a specially created file...

Server MySQL DML DoS

The vulnerability of the Server component: The DML part of the MySQL database management system is related to errors during resource release. Exploiting this vulnerability allows a malicious actor to cause service interruptions remotely...

Server MySQL DML DoS

The vulnerability of the Server component: The DML mechanism of the MySQL database management system is related to errors during resource release. Exploiting this vulnerability allows a malicious actor to cause service interruptions remotely...

MySQL Optimizer DoS

The vulnerability of the Server: Optimizer component of the MySQL database management system is related to errors during resource release. Exploiting this vulnerability allows a malicious actor to cause service interruptions remotely...