CVE-2023-31325

Improper isolation of shared resources on System-on-a-chip SOC could a privileged attacker to tamper with the contents of the PSP reserved DRAM region potentially resulting in loss of confidentiality and integrity...

CVE-2023-31325

CVE-2023-31325 describes an improper isolation of shared resources on a System-on-a-Chip (SOC) that could allow a privileged attacker to tamper with the PSP-reserved DRAM region, potentially compromising confidentiality and integrity. Connected sources indicate this affects AMD client processor p...

AMD Graphics Driver和AMD Client Processor 安全漏洞

AMD Graphics Driver and AMD Client Processor are both products of UltraMed Semiconductor AMD, Inc.AMD Graphics Driver is an integrated graphics driver.AMD Client Processor is a processor for client devices e.g., personal computers PCs, laptops, etc.. A security vulnerability exists in AMD Graphic...

CVE-2025-48551

In multiple locations, there is a possible leak of an image across the Android User isolation boundary due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation...

CVE-2025-48551

In multiple locations, there is a possible leak of an image across the Android User isolation boundary due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation...

CVE-2025-48551

CVE-2025-48551 involves an information-disclosure flaw in Android where an image can leak across the User isolation boundary due to a confused deputy. The vulnerability is local (AV:L/AC:L/PR:L/UI:R), requires user interaction, and could expose confidential data (C:H/I:N/A:N) without executing co...

CVE-2025-48551

In multiple locations, there is a possible leak of an image across the Android User isolation boundary due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation...

CVE-2025-48551

In multiple locations, there is a possible leak of an image across the Android User isolation boundary due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation...

Cri-o: pods are able to break out of resource confinement on cgroupv2

...

A flaw named "EntryBleed" was found in the Linux Kernel Page Table Isolation (KPTI). This issue could allow a local attacker to leak KASLR base via prefetch side-channels based on TLB timing for Intel systems.

...

PT-2025-36072

Name of the Vulnerable Software and Affected Versions: Android affected versions not specified Description: A potential information disclosure issue exists due to a confused deputy condition, which may allow an image to leak across the Android User isolation boundary. Exploitation requires user...

Google Android 安全漏洞

Google Android is a Linux-based open source operating system from Google. Google Android has an information disclosure vulnerability that can be exploited by attackers to obtain sensitive information...

PT-2025-36063

Name of the Vulnerable Software and Affected Versions: FaceSettings.java affected versions not specified Description: Improper input validation in the onCreate function of FaceSettings.java may allow an attacker to remove biometric unlock across user profiles. This could lead to local escalation ...

Linux Distros Unpatched Vulnerability : CVE-2019-10145

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - rkt through version 1.30.0 does not isolate processes in containers that are run with rkt enter. Processes run with rkt enter do not have seccomp filtering duri...

Linux Distros Unpatched Vulnerability : CVE-2019-10147

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - rkt through version 1.30.0 does not isolate processes in containers that are run with rkt enter. Processes run with rkt enter are not limited by cgroups during...

Linux Distros Unpatched Vulnerability : CVE-2019-10144

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - rkt through version 1.30.0 does not isolate processes in containers that are run with rkt enter. Processes run with rkt enter are given all capabilities during...

SunPower PVS6

RISK EVALUATION Successful exploitation of this vulnerability could allow attackers to gain full access to the device, enabling them to replace firmware, modify settings, disable the device, create SSH tunnels, and manipulate attached devices. 2. RECOMMENDED PRACTICES CISA recommends users take...

ASB-A-407991863

In multiple locations, there is a possible leak of an image across the Android User isolation boundary due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation...

Linux Distros Unpatched Vulnerability : CVE-2025-20109

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper Isolation or Compartmentalization in the stream cache mechanism for some IntelR Processors may allow an authenticated user to potentially enable...

Linux Distros Unpatched Vulnerability : CVE-2025-46416

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The Nix, Lix, and Guix package managers allow a bypass of build isolation in which a user can elevate their privileges to the build user account e.g., nixbld or...