CVE-2022-34479

A malicious website that could create a popup could have resized the popup to overlay the address bar with its own content, resulting in potential user confusion or spoofing attacks. This bug only affects Thunderbird for Linux. Other operating systems are unaffected.. This vulnerability affects...

KB5021233: Windows 10 Version 20H2 / 21H1 / 21H2 / 22H2 Security Update (December 2022)

The remote Windows host is missing security update 5021233. It is, therefore, affected by multiple vulnerabilities - PowerShell Remote Code Execution Vulnerability CVE-2022-41076 - Windows Subsystem for Linux WSL2 Kernel Elevation of Privilege Vulnerability CVE-2022-44689 - A remote code executio...

CVE-2022-44689: Improper Privilege Management

Windows Subsystem for Linux WSL2 Kernel Elevation of Privilege Vulnerability...

CVE-2022-44689 Windows Subsystem for Linux (WSL2) Kernel Elevation of Privilege Vulnerability

...

KLA20122 Multiple vulnerabilities in Microsoft Open Source Software

Elevation of privilege vulnerability was found in Microsoft Open Source Software. Malicious users can exploit this vulnerability to gain privileges. Original advisories CVE-2022-44689 Exploitation Public exploits exist for this vulnerability. Related products Microsoft-Windows CVE list...

KB5021234: Windows 11 Security Update (December 2022)

The remote Windows host is missing security update 5021234. It is, therefore, affected by multiple vulnerabilities - PowerShell Remote Code Execution Vulnerability CVE-2022-41076 - Windows Subsystem for Linux WSL2 Kernel Elevation of Privilege Vulnerability CVE-2022-44689 - A remote code executio...

CVE-2022-31615: NULL Pointer Dereference

NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer, where a local user with basic capabilities can cause a null-pointer dereference, which may lead to denial of service...

CVE-2022-31607: Improper Input Validation

NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer nvidia.ko, where a local user with basic capabilities can cause improper input validation, which may lead to denial of service, escalation of privileges, data tampering, and limited information disclosure...

CVE-2022-31608: Improper Preservation of Permissions

NVIDIA GPU Display Driver for Linux contains a vulnerability in an optional D-Bus configuration file, where a local user with basic capabilities can impact protected D-Bus endpoints, which may lead to code execution, denial of service, escalation of privileges, information disclosure, and data...

CVE-2022-38014

Windows Subsystem for Linux WSL2 Kernel Elevation of Privilege Vulnerability...

CVE-2022-38014: Concurrent Execution using Shared Resource with Improper Synchronization

Windows Subsystem for Linux WSL2 Kernel Elevation of Privilege Vulnerability...

Microsoft Windows Subsystem for Linux 竞争条件问题漏洞

Microsoft Windows Subsystem for Linux WSL is a Microsoft Windows Subsystem for Linux, a compatibility layer capable of running native Linux binary executables ELF format. A vulnerability exists in the Microsoft Windows Subsystem for Linux for competitive conditions issue. The following products a...

KLA20043 PE vulnerability in Microsoft Open Source Software

Elevation of privilege vulnerability was found in Microsoft Open Source Software. Malicious users can exploit this vulnerability to gain privileges. Original advisories CVE-2022-38014 Exploitation Public exploits exist for this vulnerability. Related products Microsoft-Windows CVE list...

KLA20046 Multiple vulnerabilities in Microsoft Azure

Multiple vulnerabilities were found in Microsoft Azure. Malicious users can exploit these vulnerabilities to execute arbitrary code, gain privileges. Below is a complete list of vulnerabilities: 1. A remote code execution vulnerability in Azure RTOS GUIX Studio can be exploited remotely to execut...

Security Bulletin: IBM App Connect Enterprise Certified Container operator and operands may be vulnerable to arbitrary code execution [CVE-2022-25255]

Summary Qt for Linux is not used directly by IBM App Connect Enterprise Certified Container but it is included as an operating system package in the images. IBM App Connect Enterprise Certified Container operator and operands may be vulnerable to arbitrary code execution. This bulletin provides...

PT-2025-53125

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak exists in the Linux kernel related to the V4L2 fwnode data structure. Specifically, the V4L2 fwnode data is not freed during unbind operations, resulting in a memory leak...

USN-5682-1 linux-aws-5.4 vulnerabilities

It was discovered that the BPF verifier in the Linux kernel did not properly handle internal data structures. A local attacker could use this to expose sensitive information kernel memory. CVE-2021-4159 It was discovered that an out-of-bounds write vulnerability existed in the Video for Linux 2...

OESA-2022-1966 kernel security update

The Linux Kernel, the operating system core itself. Security Fixes: An issue was discovered in the Linux kernel through 5.19.8. drivers/firmware/efi/capsule-loader.c has a race condition with a resultant use-after-free.CVE-2022-40307 A flaw use after free in the Linux kernel video4linux driver wa...

CVE-2022-36536: Use of Insufficiently Random Values

An issue in the component postapplogin.php of Super Flexible Software GmbH & Co. KG Syncovery 9 for Linux v9.47x and below allows attackers to escalate privileges via creating crafted session tokens...

PT-2022-23452

Name of the Vulnerable Software and Affected Versions Super Flexible Software GmbH & Co. KG Syncovery 9 for Linux versions 9.47x and below Description A cross-site scripting XSS issue was discovered. This type of issue occurs when an application includes user input in its output without proper...