The vulnerability of the kernel driver of Windows operating systems allows attackers to elevate their privileges to the SYSTEM level.

The vulnerability of the kernel driver of Windows operating systems relates to the execution of operations beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to elevate their privileges to the SYSTEM level...

The vulnerability of Mozilla Firefox, Firefox ESR, and the email client Thunderbird relates to the execution of operations beyond the buffer in memory, allowing an attacker to execute arbitrary code.

The vulnerability of Mozilla Firefox, Firefox ESR, and the email client Thunderbird relates to the execution of operations outside of the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through a specially created web page...

The vulnerability of the Windows operating system’s kernel allows attackers to disclose sensitive information that is protected by security measures.

The vulnerability of the Windows operating system’s kernel is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to disclose sensitive information that is protected by security measures...

UBUNTU-CVE-2022-48923

In the Linux kernel, the following vulnerability has been resolved: btrfs: prevent copying too big compressed lzo segment Compressed length can be corrupted to be a lot larger than memory we have allocated for buffer. This will cause memcpy in copycompressedsegment to write outside of allocated...

The vulnerability of the kdb_read() function in the Linux operating system allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the kdbread function in the kernel/debug/kdb/kdbio.c file of the Linux operating system is related to memory writing beyond the bounds of the allocated buffer. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibilit...

The vulnerability of the Toolgate component in Parallels Desktop hypervisor allows a hacker to elevate their privileges and execute arbitrary code.

The vulnerability of the Toolgate component in Parallels Desktop Hypervisor Suite involves an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to enhance their privileges and execute arbitrary code...

OESA-2024-1817 xorg-x11-server-xwayland security update

Xwayland is an X server for running X clients under Wayland. %package devel Summary: Development package Requires: pkgconfig %description devel The development package provides the developmental files which are necessary for developing Wayland compositors using Xwayland. %prep %autosetup -n...

The vulnerability of the HTTP/3 QUIC module (ngx_http_v3_module) in NGINX Plus and NGINX OSS web servers allows a attacker to cause a service failure.

The vulnerability of the HTTP/3 QUIC module ngxhttpv3module in NGINX Plus and NGINX OSS servers is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to cause service interruptions by sending specially crafted HTTP/3 requests...

The vulnerability of the kernel of microprogramming software in Qualcomm’s embedded chips allows a hacker to execute arbitrary code.

The vulnerability of the kernel of microprogramming software in embedded Qualcomm chips relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

The vulnerability of the amu_fie_setup() function in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the amufiesetup function in the arch/arm64/kernel/topology.c module of the Linux operating system is related to access to memory beyond the allocated buffer. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility ...

The vulnerability of the Teamcenter Visualization lifecycle management system and the 3D JT/JT2Go viewer tool lies in the recording of data beyond the buffer limit in memory, allowing an attacker to execute arbitrary code.

The vulnerability of the Teamcenter Visualization lifecycle management system and its 3D viewing tool JT/JT2Go relates to writing beyond the buffer in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code using specially created CGM files...

The vulnerability of Mozilla Firefox, Firefox ESR, and the email client Thunderbird relates to the execution of operations outside the buffer in memory, allowing an attacker to gain unauthorized access to protected information.

The vulnerability of Mozilla Firefox, Firefox ESR, and the email client Thunderbird is related to the execution of operations outside of the buffer in memory due to a numerical overflow. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information durin...

The vulnerability in the implementation of the Server Message Block (SMB) protocol in Windows operating systems allows a perpetrator to increase their privileges.

The vulnerability of the Server Message Block SMB protocol in Windows operating systems is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerability of the Remote Access Connection Manager in Windows operating systems allows a hacker to disclose protected information.

The vulnerability of the Remote Access Connection Manager in Windows operating systems is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to disclose sensitive information that is protected by security measures...

The vulnerability of the Remote Access Connection Manager in Windows operating systems allows a hacker to disclose protected information.

The vulnerability of the Remote Access Connection Manager in Windows operating systems is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to disclose sensitive information that is protected by security measures...

USN-6726-2 linux-iot vulnerabilities

Pratyush Yadav discovered that the Xen network backend implementation in the Linux kernel did not properly handle zero length data request, leading to a null pointer dereference vulnerability. An attacker in a guest VM could possibly use this to cause a denial of service host domain crash...

The vulnerability of the libarchive library for Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the libarchive library for Windows operating systems relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

SUSE CVE-2024-26811

In the Linux kernel, the following vulnerability has been resolved: ksmbd: validate payload size in ipc response If installing malicious ksmbd-tools, ksmbd.mountd can return invalid ipc response to ksmbd kernel server. ksmbd should validate payload size of ipc response from ksmbd.mountd to avoid...

The vulnerability in the `gui/util/qktxhandler.cpp` component of the KTX image processing module of the cross-platform framework for developing Qt software allows a hacker to cause a service failure.

The vulnerability in the gui/util/qktxhandler.cpp component of the KTX image processing module for the cross-platform development framework for Qt software development relates to the execution of operations outside of the buffer in memory. Exploiting this vulnerability could allow a malicious act...

Fedora 38 : kernel (2024-a56a47ef1b)

The remote Fedora 38 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-a56a47ef1b advisory. The 6.8.5 stable kernel update contains a number of important fixes across the tree. Tenable has extracted the preceding description block directly from the...