CVE-2024-44243

This CVE concerns macOS Sequoia 15.2 where a configuration issue allowed an app to modify protected parts of the file system. The fixed version is macOS Sequoia 15.2 (and related security advisories note fixes across Sequoia/Sonoma/Ventura). Affected component is a filesystem protection/permissio...

DRUPAL-CONTRIB-2024-076

Open Social is a Drupal distribution for online communities, which ships with a default optional module social\file\private to ensure the images and files provided by the distribution are stored in the private instead of the public filesystem. For installations of Open Social prior to version...

kernel: selinux,smack: don't bypass permissions check in inode_setsecctx hook

In the Linux kernel, the following vulnerability has been resolved: selinux,smack: don't bypass permissions check in inodesetsecctx hook Marek Gresko reports that the root user on an NFS client is able to change the security labels on files on an NFS filesystem that is exported with root squashin...

kernel: selinux,smack: don't bypass permissions check in inode_setsecctx hook

In the Linux kernel, the following vulnerability has been resolved: selinux,smack: don't bypass permissions check in inodesetsecctx hook Marek Gresko reports that the root user on an NFS client is able to change the security labels on files on an NFS filesystem that is exported with root squashin...

PT-2024-36361 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 14.7.2 macOS versions prior to 15.2 Description: The issue was addressed with improved permissions logic. An app may be able to modify protected parts of the file system. Recommendations: For macOS versions prior to...

Open Social - Moderately critical - Access bypass - SA-CONTRIB-2024-076

Open Social is a Drupal distribution for online communities, which ships with a default optional module socialfileprivate to ensure the images and files provided by the distribution are stored in the private instead of the public filesystem. For installations of Open Social prior to version 11.8....

macOS 15.x < 15.2 Multiple Vulnerabilities (121839)

The remote host is running a version of macOS / Mac OS X that is 15.x prior to 15.2. It is, therefore, affected by multiple vulnerabilities: - The issue was addressed with improved memory handling. This issue is fixed in watchOS 11.2, visionOS 2.2, tvOS 18.2, macOS Sequoia 15.2, Safari 18.2, iOS...

The vulnerability of the ext4 kernel component in the Linux operating system, which allows a hacker to cause a service failure

The vulnerability of the ext4 kernel component in the Linux operating system is related to improper error handling. Exploiting this vulnerability can allow an attacker to cause a service failure...

PT-2025-3056 · Apple · Macos Sonoma +3

Name of the Vulnerable Software and Affected Versions: macOS Sonoma versions prior to 14.7.2 macOS Sequoia versions prior to 15.2 macOS Ventura versions prior to 13.7.2 Description: A logic issue was addressed with improved restrictions, which could allow an attacker to gain access to protected...

CVE-2024-49138 Windows Common Log File System Driver Elevation of Privilege Vulnerability

...

CVE-2024-49090 Windows Common Log File System Driver Elevation of Privilege Vulnerability

...

CVE-2024-49090 Windows Common Log File System Driver Elevation of Privilege Vulnerability

...

CVE-2024-49088 Windows Common Log File System Driver Elevation of Privilege Vulnerability

...

CVE-2024-49088

CVE-2024-49088 affects the Windows Common Log File System Driver and is described as a local elevation of privilege vulnerability. The CVSS 3.1 vector (LOCAL, LOW complexity, LOW privileges required) with a base score of 7.8 indicates a high-risk, local-attack scenario resulting in high impact to...

CVE-2024-49093

CVE-2024-49093: Windows Resilient File System (ReFS) Elevation of Privilege vulnerability. Affected: ReFS on Windows. Root cause and exploit details are not fully disclosed in the provided documents; the CVSSv3.1 vector from the initial entry indicates LOCAL attack vector, LOW attack complexity, ...

CVE-2024-49093 Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability

...

CVE-2024-49093 Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability

...

Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability

...

Windows Common Log File System Driver Elevation of Privilege Vulnerability

...

Microsoft Windows Common Log File System Driver 安全漏洞

The Microsoft Windows Common Log File System Driver is a Microsoft Corporation Common Log File System CLFS API that provides a high-performance, common log file subsystem that can be used by dedicated client applications and shared by multiple clients to optimize logging and access. access. A...