5838 matches found
CVE-2025-2817
Thunderbird's update mechanism allowed a medium-integrity user process to interfere with the SYSTEM-level updater by manipulating the file-locking behavior. By injecting code into the user-privileged process, an attacker could bypass intended access controls, allowing SYSTEM-level file operations...
CVE-2025-2817
Thunderbird's update mechanism allowed a medium-integrity user process to interfere with the SYSTEM-level updater by manipulating the file-locking behavior. By injecting code into the user-privileged process, an attacker could bypass intended access controls, allowing SYSTEM-level file operations...
CVE-2025-2817
Thunderbird's update mechanism allowed a medium-integrity user process to interfere with the SYSTEM-level updater by manipulating the file-locking behavior. By injecting code into the user-privileged process, an attacker could bypass intended access controls, allowing SYSTEM-level file operations...
CVE-2025-2817
The Update Handler component in Mozilla Firefox , Mozilla Firefox ESR , and Mozilla Thunderbird contains a privilege escalation vulnerability (CVE-2025-2817 ) caused by access control deficiencies in the update mechanism. Specifically, a medium-integrity user process can interfere with the SYSTEM...
CVE-2025-2817
Thunderbird's update mechanism allowed a medium-integrity user process to interfere with the SYSTEM-level updater by manipulating the file-locking behavior. By injecting code into the user-privileged process, an attacker could bypass intended access controls, allowing SYSTEM-level file operations...
CVE-2025-2817 Privilege escalation in Thunderbird Updater
Thunderbird's update mechanism allowed a medium-integrity user process to interfere with the SYSTEM-level updater by manipulating the file-locking behavior. By injecting code into the user-privileged process, an attacker could bypass intended access controls, allowing SYSTEM-level file operations...
Mozilla Firefox security vulnerabilities
Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. A security vulnerability exists in versions of Mozilla Firefox prior to 138, which stems from a mishandled file locking behavior that could lead to elevated privileges...
CVE-2025-2817: Improper Limitation of a Pathname to a Restricted Directory
Thunderbird's update mechanism allowed a medium-integrity user process to interfere with the SYSTEM-level updater by manipulating the file-locking behavior. By injecting code into the user-privileged process, an attacker could bypass intended access controls, allowing SYSTEM-level file operations...
PT-2025-23158
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability in the Linux kernel has been identified, related to the erofs file system. The issue arises when bio add folio fails due to being full, and erofs fileio scan folio retrie...
Mozilla -- control access bypass
[email protected] reports: Thunderbird's update mechanism allowed a medium-integrity user process to interfere with the SYSTEM-level updater by manipulating the file-locking behavior. By injecting code into the user-privileged process, an attacker could bypass intended access controls, allowin...
Linux Kernel Heap Buffer Overflow DoS
The vulnerability of the functions kcompactd mm/compaction.c and nfsreleasefolio fs/nfs/file.c in the Linux kernel is related to improper locking mechanisms. Exploiting this vulnerability could allow an attacker to cause service failures...
Linux kernel Heap Buffer Overflow DoS
The vulnerability of the isanalpha2 function net/wireless/reg.c in the Linux operating system is related to insufficient locking mechanisms. Exploiting this vulnerability could allow an attacker to cause a service failure...
Linux kernel PVR Queue Function DoS
The vulnerabilities of the functions pvrqueuefencegetdrivername and pvrqueuefenceinit drivers/gpu/drm/imagination/pvrqueue.c in the Linux kernel are related to insufficient locking. Exploiting these vulnerabilities could allow an attacker to trigger a service failure...
gpio_rcar DoS
The vulnerabilities of the functions gpiorcarconfigInterruptInputMode, gpiorcarconfigGeneralInputOutputMode, gpiorcargetmultiple, gpiorcarset, gpiorcarsetmultiple, and gpiorcarprobe drivers/gpio/gpiorcar.c in the Linux kernel are related to insufficient locking. Exploitation of these...
PT-2025-17634 · Undefined · Undefined
Name of the Vulnerable Software and Affected Versions: IntelR Core Ultra Processors affected versions not specified Description: The issue is related to improper locking in the IntelR Integrated Connectivity I/O interface CNVi for some IntelR Core Ultra Processors. This may allow an unauthenticat...
Linux kernel Heap Buffer Overflow DoS
The vulnerability of the inatomic function in the net/core/sock.c module of the Linux kernel is related to insufficient locking of resources. Exploiting this vulnerability could allow an attacker to cause a service failure...
Linux ppp_channel_bridge_input Buffer Overflow DoS
The vulnerability of the pppchannelbridgeinput function in the Linux operating system’s ppp component is related to insufficient resource locking. Exploiting this vulnerability can allow an attacker to cause a service failure...
Linux iso_listen_bis() DoS
The vulnerability of the isolistenbis function in the Linux operating system is related to incorrect resource locking. Exploiting this vulnerability can allow an attacker to cause a service failure...
DEBIAN-CVE-2025-22126
In the Linux kernel, the following vulnerability has been resolved: md: fix mddev uaf while iterating allmddevs list While iterating allmddevs list from mdnotifyreboot and mdexit, listforeachentrysafe is used, and this can race with deletint the next mddev, causing UAF: t1: spinlock...
CVE-2025-22098
In the Linux kernel, the following vulnerability has been resolved: drm: zynqmpdp: Fix a deadlock in zynqmpdpignorehpdset Instead of attempting the same mutex twice, lock and unlock it. This bug has been detected by the Clang thread-safety analyzer...