20321 matches found
CVE-2024-8010
The component accepts XML input through the publisher without disabling external entity resolution. This allows malicious actors to submit a crafted XML payload that exploits the unescaped external entity references. By leveraging this vulnerability, a malicious actor can read confidential files...
CVE-2024-8010: Improper Restriction of XML External Entity Reference
The component accepts XML input through the publisher without disabling external entity resolution. This allows malicious actors to submit a crafted XML payload that exploits the unescaped external entity references. By leveraging this vulnerability, a malicious actor can read confidential files...
Google Chrome FileSystem Component Memory Misreference Vulnerability
Google Chrome is a web browser from Google, an American company. A memory misreference vulnerability exists in the Google Chrome FileSystem component, which can be exploited by an attacker to leverage object corruption via specially crafted HTML pages...
The vulnerability of the Brokering File System (BFS) of the Windows operating system, which allows a hacker to increase their privileges
The vulnerability of the Brokering File System BFS in the Windows operating system is related to a memory reclamation error. Exploiting this vulnerability can allow an attacker to increase their privileges...
SUSE SLED15: libnfsidmap0 / libnfsidmap1 / nfs-client / nfs-doc / etc (SUSE-SU-2026:1356-1)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:1356-1 advisory. This update for nfs-utils fixes the following issue: Security fixes: - CVE-2025-12801: rpc.mountd allows ...
CVE-2024-2374: Improper Restriction of XML External Entity Reference
The XML parsers within multiple WSO2 products accept user-supplied XML data without properly configuring to prevent the resolution of external entities. This omission allows malicious actors to craft XML payloads that exploit the parser's behavior, leading to the inclusion of external resources. ...
Vulnerability of the Windows Common Log File System Driver in Windows operating systems, which allows attackers to escalate their privileges
The vulnerability of the Windows Common Log File System Driver in Windows operating systems is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to gain elevated privileges...
The vulnerability of the Brokering File System (BFS) in Windows operating systems allows a perpetrator to increase their privileges.
The vulnerability of the Brokering File System BFS in Windows operating systems is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to increase their privileges...
The vulnerability of the Windows Projected File System component in operating systems allows attackers to elevate their privileges.
The vulnerability of the Windows Projected File System component in operating systems relates to a flaw in the mechanism for re-allocating previously released memory. Exploiting this vulnerability can allow an attacker to gain elevated privileges...
CVE-2026-6360
An use after free flaw was found in the FileSystem component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=497880137...
USN-8145-5 linux-azure, linux-azure-4.15 vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - Cryptographic API; - UDF file system; - NFC subsystem; - Network traffic control;...
USN-8145-5: Linux kernel (Azure) vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - Cryptographic API; - UDF file system; - NFC subsystem; - Network traffic control;...
CVE-2026-6360
Use after free in FileSystem in Google Chrome prior to 147.0.7727.101 allowed a remote attacker to potentially exploit object corruption via a crafted HTML page. Chromium security severity: High...
CVE-2026-32219
Double free in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally...
CVE-2026-32091
Concurrent execution using shared resource with improper synchronization 'race condition' in Microsoft Brokering File System allows an unauthorized attacker to elevate privileges locally...
CVE-2026-32078
Use after free in Windows Projected File System allows an authorized attacker to elevate privileges locally...
CVE-2026-32069
Double free in Windows Projected File System allows an authorized attacker to elevate privileges locally...
CVE-2026-32074
Double free in Windows Projected File System allows an authorized attacker to elevate privileges locally...