CVE-2025-24066

Heap-based buffer overflow in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally...

CVE-2025-24066

CVE-2025-24066 is a local privilege escalation in Windows Kernel-Mode Drivers caused by a heap-based buffer overflow in the kernel streaming service driver. The impact is increased privileges (local), with the vulnerability exploitable only locally. Microsoft has released updates addressing this ...

PT-2025-10813 · Microsoft · Windows Kernel-Mode Driver +1

Name of the Vulnerable Software and Affected Versions: Windows Kernel-Mode Drivers affected versions not specified Description: A heap-based buffer overflow issue in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally. Recommendations: At the moment, there is n...

Microsoft Windows Kernel Mode Drivers 安全漏洞

Microsoft Windows Kernel Mode Drivers is a Windows kernel mode driver from Microsoft Corporation USA. A security vulnerability exists in Microsoft Windows Kernel Mode Drivers. An attacker could exploit the vulnerability to elevate privileges. The following products and editions are affected:Windo...

Linux Distros Unpatched Vulnerability : CVE-2025-21750

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: brcmfmac: Check the return value of ofpropertyreadstringindex Somewhen between 6.10 and 6.11 the driver started to crash on my MacBookPro14,3. The propert...

Linux Distros Unpatched Vulnerability : CVE-2024-56614

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - xsk: fix OOB map writes when deleting elements Jordy says: In the xskmapdeleteelem function an unsigned integer map-maxentries is compared with a user-controll...

CVE-2024-53034

Memory corruption occurs during an Escape call if an invalid Kernel Mode CPU event and sync object handle are passed with the DriverKnownEscape flag reset...

Linux Distros Unpatched Vulnerability : CVE-2021-47566

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - proc/vmcore: fix clearing user buffer by properly using clearuser To clear a user buffer we cannot simply use memset, we have to use clearuser. With a virtio-me...

The vulnerability of the Intel 800 Series Ethernet Linux Kernel Mode Driver driver, related to access control deficiencies, allows an intruder to gain unauthorized access to protected information.

The vulnerability of the Intel 800 Series Ethernet Linux Kernel Mode Driver is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

CVE-2024-53034

Memory corruption occurs during an Escape call if an invalid Kernel Mode CPU event and sync object handle are passed with the DriverKnownEscape flag reset...

CVE-2024-53034

CVE-2024-53034 affects Qualcomm chipsets’ DSP_Services, where memory corruption occurs during an Escape call if an invalid Kernel Mode CPU event and sync object handle are passed with DriverKnownEscape flag reset. Root cause: memory corruption in the Escape handling path when invalid kernel-event...

CVE-2024-53034 Untrusted Pointer Dereference in DSP_Services

Memory corruption occurs during an Escape call if an invalid Kernel Mode CPU event and sync object handle are passed with the DriverKnownEscape flag reset...

CVE-2024-53034 Untrusted Pointer Dereference in DSP_Services

Memory corruption occurs during an Escape call if an invalid Kernel Mode CPU event and sync object handle are passed with the DriverKnownEscape flag reset...

Qualcomm Chipsets 安全漏洞

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. A security vulnerability exists in Qualcomm Chipsets that originates from a memory corruption that occurs when passing invalid kernel-mode CPU events and synchronization object handles...

Microsoft Windows Win32k Improper Resource Shutdown or Release Vulnerability

Microsoft Windows Win32k contains an improper resource shutdown or release vulnerability that allows for local, authenticated privilege escalation. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode...

CVE-2025-21740

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

CVE-2025-21778 tracing: Do not allow mmap() of persistent ring buffer

In the Linux kernel, the following vulnerability has been resolved: tracing: Do not allow mmap of persistent ring buffer When trying to mmap a trace instance buffer that is attached to reservemem, it would crash: BUG: unable to handle page fault for address: ffffe97bd00025c8 PF: supervisor read...

CVE-2024-21971

Improper input validation in AMD Crash Defender could allow an attacker to provide the Windows® system process ID to a kernel-mode driver, resulting in an operating system crash, potentially leading to denial of service...

CVE-2024-21971

Summary : CVE-2024-21971 is described as an improper input validation vulnerability in AMD Crash Defender that could let an attacker pass the Windows system process ID to a kernel-mode driver, potentially crash the OS and cause denial of service. Affected context (from provided documents) : AMD C...

CVE-2024-21971

Improper input validation in AMD Crash Defender could allow an attacker to provide the Windows® system process ID to a kernel-mode driver, resulting in an operating system crash, potentially leading to denial of service...