CVE-2023-53828 Bluetooth: hci_sync: Avoid use-after-free in dbg for hci_add_adv_monitor()

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hcisync: Avoid use-after-free in dbg for hciaddadvmonitor KSAN reports use-after-free in hciaddadvmonitor. While adding an adv monitor, hciaddadvmonitor calls - msftaddmonitorpattern calls - msftaddmonitorsync calls -...

CVE-2023-53828

CVE-2023-53828 affects the Linux kernel Bluetooth subsystem (net/bluetooth/hci_core.c) where hci_add_adv_monitor() triggers a use-after-free via a path through msft_add_monitor_pattern(), msft_add_monitor_sync(), and msft_le_monitor_advertisement_cb() in error handling. KSAN reported the use-afte...

CVE-2023-53828 Bluetooth: hci_sync: Avoid use-after-free in dbg for hci_add_adv_monitor()

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hcisync: Avoid use-after-free in dbg for hciaddadvmonitor KSAN reports use-after-free in hciaddadvmonitor. While adding an adv monitor, hciaddadvmonitor calls - msftaddmonitorpattern calls - msftaddmonitorsync calls -...

CVE-2023-53828

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hcisync: Avoid use-after-free in dbg for hciaddadvmonitor KSAN reports use-after-free in hciaddadvmonitor. While adding an adv monitor, hciaddadvmonitor calls - msftaddmonitorpattern calls - msftaddmonitorsync calls -...

SUSE CVE-2022-50627

In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: fix monitor mode bringup crash When the interface is brought up in monitor mode, it leads to NULL pointer dereference crash. This crash happens when the packet type is extracted for a SKB. This extraction which is...

SUSE CVE-2025-40294

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: Fix OOB access in parseadvmonitorpattern In the parseadvmonitorpattern function, the value of the 'length' variable is currently limited to HCIMAXEXTADLENGTH251. The size of the 'value' array in the mgmtadvpatter...

PT-2025-49839

A vulnerability has been identified in SINEC Security Monitor All versions V4.10.0. The affected application does not have proper authorization checks for the file transfer feature in ssmctl-client command. This could allow an authenticated, lowly privileged local attacker to read or write to any...

Microsoft Azure Monitor 缓冲区错误漏洞

Microsoft Azure Monitor is a new style of observability tool from Microsoft USA that enables end-to-end monitoring capabilities for applications, infrastructure and networks. A buffer error vulnerability exists in Microsoft Azure Monitor. An attacker exploiting this vulnerability could remotely...

PT-2025-50175

Name of the Vulnerable Software and Affected Versions Azure Monitor Agent affected versions not specified Description An out-of-bounds write issue exists in the Azure Monitor Agent. This allows an authorized attacker to execute code over a network. Recommendations At the moment, there is no...

PT-2025-50192

Name of the Vulnerable Software and Affected Versions Windows Camera Frame Server Monitor affected versions not specified Description An issue with access control in Windows Camera Frame Server Monitor can allow a local attacker to disclose information. The vulnerability allows attackers to obtai...

PT-2025-49719

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the Bluetooth component of the Linux kernel, specifically within the hci add adv monitor function. The issue occurs when adding an advertisement monitor,...

KLA90814 ACE vulnerability in Microsoft Azure

A remote code execution vulnerability was found in Microsoft Azure. Malicious users can exploit this vulnerability to execute arbitrary code, cause denial of service. Original advisories CVE-2025-62550 Exploitation Related products Microsoft-Azure Azure-Monitor Azure-Monitor-Agent CVE list...

CVE-2025-62550: Out-of-bounds Write

Out-of-bounds write in Azure Monitor Agent allows an authorized attacker to execute code over a network...

CVE-2025-62570: Improper Access Control

Improper access control in Windows Camera Frame Server Monitor allows an authorized attacker to disclose information locally...

CVE-2025-40830: Improper Authorization

A vulnerability has been identified in SINEC Security Monitor All versions V4.10.0. The affected application does not have proper authorization checks for the filetransfer feature in ssmctl-client command. This could allow an authenticated, lowly privileged local attacker to read or write to any...

Siemens SINEC Security Monitor 输入验证错误漏洞

Siemens SINEC Security Monitor is an industrial security monitor from Siemens Germany. An input validation error vulnerability exists in Siemens SINEC Security Monitor versions prior to V4.10.0, which stems from a lack of input validation for the date parameter in the report generation function,...

Siemens SINEC Security Monitor 授权问题漏洞

Siemens SINEC Security Monitor is an industrial security monitor from Siemens Germany. An authorization issue vulnerability exists in Siemens SINEC Security Monitor versions prior to V4.10.0, which stems from a lack of authorization checking in the filetransfer function of the ssmctl-client...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel, which stems from the presence of released and reused debugging information access in advmonitor processing...

PT-2025-49840

A vulnerability has been identified in SINEC Security Monitor All versions V4.10.0. The affected application lacks input validation of date parameter in report generation functionality. This could allow an authenticated, lowly privileged attacker to cause denial of service condition of the report...

CVE-2025-40831: Improper Input Validation

A vulnerability has been identified in SINEC Security Monitor All versions V4.10.0. The affected application lacks input validation of date parameter in report generation functionality. This could allow an authenticated, lowly privileged attacker to cause denial of service condition of the report...