CVE-2025-26675

CVE-2025-26675 is a Windows Subsystem for Linux elevation-of-privilege vulnerability caused by an out-of-bounds read. The issue allows an authorized, local attacker to elevate privileges on affected Windows systems. Public sources in the connected documents confirm the vulnerability and its impac...

Windows Subsystem for Linux Elevation of Privilege Vulnerability

Out-of-bounds read in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally...

CVE-2025-26675: Out-of-bounds Read

Out-of-bounds read in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally...

Microsoft Windows Subsystem for Linux（WSL） 缓冲区错误漏洞

Microsoft Windows Subsystem for Linux WSL is a Linux subsystem for Windows, a compatibility layer capable of running native Linux binary executables ELF format from Microsoft. A buffer error vulnerability exists in Microsoft Windows Subsystem for Linux WSL. An attacker could exploit this...

PT-2025-15517 · Microsoft · Windows Subsystem For Linux +1

Name of the Vulnerable Software and Affected Versions: Windows Subsystem for Linux affected versions not specified Description: The issue is related to an out-of-bounds read that allows an authorized attacker to elevate privileges locally. It is described as an elevation-of-privilege vulnerabilit...

CVE-2025-24084

Untrusted pointer dereference in Windows Subsystem for Linux allows an unauthorized attacker to execute code locally...

CVE-2025-24084

Untrusted pointer dereference in Windows Subsystem for Linux allows an unauthorized attacker to execute code locally...

CVE-2025-24084

Untrusted pointer dereference in Windows Subsystem for Linux allows an unauthorized attacker to execute code locally...

CVE-2025-24084 Windows Subsystem for Linux (WSL2) Kernel Remote Code Execution Vulnerability

...

CVE-2025-24084 Windows Subsystem for Linux (WSL2) Kernel Remote Code Execution Vulnerability

...

CVE-2025-24084

CVE-2025-24084 affects Windows Subsystem for Linux (WSL2) and is a kernel-level issue caused by an untrusted pointer dereference, enabling local code execution. Evidence in theInitial Description confirms local RCE potential in WSL2. Connected documents corroborate Windows context (WSL2) and prov...

Windows Subsystem for Linux (WSL2) Kernel Remote Code Execution Vulnerability

Untrusted pointer dereference in Windows Subsystem for Linux allows an unauthorized attacker to execute code locally...

PT-2025-10827

Name of the Vulnerable Software and Affected Versions: Windows Subsystem for Linux affected versions not specified Description: The issue is related to an untrusted pointer dereference, which allows an unauthorized attacker to execute code locally. Recommendations: At the moment, there is no...

Microsoft Windows Subsystem for Linux（WSL） 安全漏洞

Microsoft Windows Subsystem for Linux WSL is a Microsoft Windows subsystem for Linux, a compatibility layer capable of running native Linux binary executables ELF format. A security vulnerability exists in the Microsoft Windows Subsystem for Linux WSL. The following products and versions are...

CVE-2025-24084: Untrusted Pointer Dereference

Untrusted pointer dereference in Windows Subsystem for Linux allows an unauthorized attacker to execute code locally...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a null pointer dereference to ctx-activefmt in calctxv4l2initformats...

CVE-2025-23359

NVIDIA Container Toolkit for Linux contains a Time-of-Check Time-of-Use TOCTOU vulnerability when used with default configuration, where a crafted container image could gain access to the host file system. A successful exploit of this vulnerability might lead to code execution, denial of service,...

CVE-2025-1146: Improper Following of a Certificate's Chain of Trust

CrowdStrike uses industry-standard TLS transport layer security to secure communications from the Falcon sensor to the CrowdStrike cloud. CrowdStrike has identified a validation logic error in the Falcon sensor for Linux, Falcon Kubernetes Admission Controller, and Falcon Container Sensor where o...

CVE-2025-23359: Time-of-check Time-of-use (TOCTOU) Race Condition

NVIDIA Container Toolkit for Linux contains a Time-of-Check Time-of-Use TOCTOU vulnerability when used with default configuration, where a crafted container image could gain access to the host file system. A successful exploit of this vulnerability might lead to code execution, denial of service,...

CVE-2025-1003: Improper Check for Dropped Privileges

A potential vulnerability has been identified in HP Anyware Agent for Linux which might allow for authentication bypass which may result in escalation of privilege. HP is releasing a software update to mitigate this potential vulnerability...