1191 matches found
PT-2024-14698
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.2.0-rc7-syzkaller-17907-g2d3827b3f393 Description The vulnerability is related to a kernel memory exposure attempt detected from the SLUB object 'skbuff head cache' in the Linux kernel. The issue occurs when th...
PT-2023-5503
Name of the Vulnerable Software and Affected Versions HarfBuzz versions through 6.0.0 Description The issue in HarfBuzz is related to the hb-ot-layout-gsubgpos.hh component, which allows attackers to trigger On^2 growth via consecutive marks during the process of looking back for base glyphs when...
GSD-2023-1000215 netfilter: ctnetlink: fix compilation warning after data race fixes in ct mark
netfilter: ctnetlink: fix compilation warning after data race fixes in ct mark This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.159 by comm...
GSD-2023-1000137 netfilter: ctnetlink: fix compilation warning after data race fixes in ct mark
netfilter: ctnetlink: fix compilation warning after data race fixes in ct mark This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.83 by commi...
GSD-2023-1000033 netfilter: ctnetlink: fix compilation warning after data race fixes in ct mark
netfilter: ctnetlink: fix compilation warning after data race fixes in ct mark This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.13 by commit...
Microsoft Patch Tuesday December 2022: SPNEGO RCE, Mark of the Web Bypass, Edge Memory Corruptions
Hello everyone! This episode will be about Microsoft Patch Tuesday for December 2022, including vulnerabilities that were added between November and December Patch Tuesdays. As usual, I use my open source Vulristics project to analyse and prioritize vulnerabilities. Alternative video link for...
Microsoft Patch Tuesday, December 2022 Edition
Microsoft has released its final monthly batch of security updates for 2022, fixing more than four dozen security holes in its various Windows operating systems and related software. The most pressing patches include a zero-day in a Windows feature that tries to flag malicious files from the Web,...
VulnCheck KEV: CVE-2022-44698
Microsoft Defender SmartScreen contains a security feature bypass vulnerability that could allow an attacker to evade Mark of the Web MOTW defenses via a specially crafted malicious file...
Microsoft Defender SmartScreen Security Feature Bypass Vulnerability
Microsoft Defender SmartScreen contains a security feature bypass vulnerability that could allow an attacker to evade Mark of the Web MOTW defenses via a specially crafted malicious file...
mark-up.co.il Cross Site Scripting vulnerability OBB-3057317
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
The vulnerability of the Mark of the Web operating system mechanism, which allows a hacker to circumvent existing security restrictions
The vulnerability of the Mark of the Web operating system mechanism is related to security configuration errors. Exploiting this vulnerability allows a malicious actor to bypass existing security restrictions remotely...
The vulnerability of the Mark of the Web operating system mechanism, which allows a hacker to circumvent existing security restrictions
The vulnerability of the Mark of the Web operating system mechanism is related to security configuration errors. Exploiting this vulnerability allows a malicious actor to bypass existing security restrictions remotely...
VulnCheck KEV: CVE-2022-41049
Microsoft Windows Mark of the Web MOTW contains a security feature bypass vulnerability resulting in a limited loss of integrity and availability of security features...
CVE-2022-41091
Windows Mark of the Web Security Feature Bypass Vulnerability...
CVE-2022-41049
Windows Mark of the Web Security Feature Bypass Vulnerability...
CVE-2022-41049
Windows Mark of the Web Security Feature Bypass Vulnerability...
Security feature bypass
Windows Mark of the Web Security Feature Bypass Vulnerability...
CVE-2022-41049 Windows Mark of the Web Security Feature Bypass Vulnerability
...
CVE-2022-41091
CVE-2022-41091 is a Windows security feature bypass in Mark of the Web (MOTW). The vulnerability allows bypassing MOTW protections, with a CVSS v3.1 base score of 5.4 (AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L). Public sources note exploitation in the wild and patches are delivered via Microsoft’s upda...
