CVE-2025-55339

CVE-2025-55339 : Windows Network Driver Interface Specification (NDIS) driver contains an out-of-bounds read that enables an authorized, local attacker to achieve elevated privileges. The Initial and Connected documents confirm the vulnerability description but do not provide concrete remediation...

Windows Network Driver Interface Specification (NDIS) Driver Elevation of Privilege Vulnerability

Out-of-bounds read in Windows NDIS allows an authorized attacker to elevate privileges locally...

CVE-2025-20716

In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: WCNCR00421149; Issue ID: MSV-372...

CVE-2025-20717

The vulnerability CVE-2025-20717 affects the wlan AP driver (MediaTek) and stems from an incorrect bounds check that enables an out-of-bounds write. This can lead to local escalation of privilege for an attacker who already has System privileges, with no user interaction required. A patch is avai...

CVE-2025-20719

The CVE-2025-20719 entry concerns the MediaTek wlan AP driver with an out-of-bounds write caused by an incorrect bounds check. This can enable remote (proximal/adjacent) privilege escalation without user interaction, with an attack vector described as adjacent and a high impact on confidentiality...

Microsoft Windows Network Driver Interface Specification 缓冲区错误漏洞

The Microsoft Windows Network Driver Interface Specification is one of the core components of a Windows network architecture from Microsoft Corporation USA. A buffer error vulnerability exists in the Microsoft Windows Network Driver Interface Specification, which can be exploited by an attacker t...

PT-2025-42024

Name of the Vulnerable Software and Affected Versions Windows versions affected versions not specified Description An out-of-bounds read issue exists in Windows NDIS. A local attacker with authorization can exploit this to elevate privileges. Recommendations At the moment, there is no information...

net/mlx5e: SHAMPO, Fix incorrect page release

...

Linux Distros Unpatched Vulnerability : CVE-2023-53556

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - iavf: Fix use-after-free in freenetdev We do netifnapiadd for all allocated qvectors, but potentially do netifnapidel for part of them, then kfree qvectors and...

SUSE CVE-2023-53556

In the Linux kernel, the following vulnerability has been resolved: iavf: Fix use-after-free in freenetdev We do netifnapiadd for all allocated qvectors, but potentially do netifnapidel for part of them, then kfree qvectors and leave invalid pointers at dev-napilist. Reproducer: root@host cat...

EUVD-2018-7349

Malware in sbrugna...

EUVD-2020-2198

Malware in sbrugna...

EUVD-2015-6041

Malware in sbrugna...

EUVD-2020-2331

Malware in sbrugna...

EUVD-2017-4763

Malware in sbrugna...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-387334)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-387334 advisory. In the Linux kernel, the following vulnerability has been resolved: net/bnx2x: Prevent access to a freed page in pagepool Fix race condition leading to system crash...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987043)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987043 advisory. In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix page reclaim for dead peer hairpin When adding a hairpin flow, a firmware-side sen...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-413933)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-413933 advisory. In the Linux kernel, the following vulnerability has been resolved: bnx2x: Fix multiple UBSAN array-index-out-of-bounds Fix UBSAN warnings that occur when using a...

CVE-2023-53581 net/mlx5e: Check for NOT_READY flag state after locking

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Check for NOTREADY flag state after locking Currently the check for NOTREADY flag is performed before obtaining the necessary lock. This opens a possibility for race condition when the flow is concurrently removed from...

CVE-2023-53556 iavf: Fix use-after-free in free_netdev

In the Linux kernel, the following vulnerability has been resolved: iavf: Fix use-after-free in freenetdev We do netifnapiadd for all allocated qvectors, but potentially do netifnapidel for part of them, then kfree qvectors and leave invalid pointers at dev-napilist. Reproducer: root@host cat...