124 matches found
CVE-2025-21293
CVE-2025-21293 CVE-2025-21293 — это уязвимость повышения привилегий в службах домена Active Directory. Она позволяет «операторам конфигурации сети» выполнять код с привилегиями SYSTEM через счётчики производительности Windows. Затронутые версии Windows включают Windows 10, 11 и Server. Microsoft...
resmack-fuzz-test
Resmack Фазз-тест Этот проект — исследование фаззера с обратной связью, который использует: ptrace для инструментирования с динамическими точками останова в памяти, задаваемыми целевым процессом создание/восстановление снимков процесса с помощью /proc/pid/map, /proc/pid/clearrefs и...
Perfusion
Perfusion На Windows 7 , Windows Server 2008R2 , Windows 8 и Windows Server 2012 ключ реестра служб RpcEptMapper и DnsCache только для 7/2008R2 настроен со слабыми разрешениями. Любой локальный пользователь может создать подраздел Performance, а затем использовать счетчики производительности...
CVE-2026-58089
When a process calls execve2 to execute a setuid or setgid image, hwpmc4 is supposed to detach PMCs owned by unprivileged processes. An inverted check meant that this scenario was not handled properly. An unprivileged local user who has attached PMCs to a process can continue monitoring it after...
CVE-2026-58089 hwpmc fails to detach PMCs during exec credential transitions
When a process calls execve2 to execute a setuid or setgid image, hwpmc4 is supposed to detach PMCs owned by unprivileged processes. An inverted check meant that this scenario was not handled properly. An unprivileged local user who has attached PMCs to a process can continue monitoring it after...
CVE-2026-53370
In the Linux kernel, the following vulnerability has been resolved: perf/x86/intel: Improve validation and configuration of ACR masks Currently there are several issues on the user space ACR mask validation and configuration. - The validation for user space ACR mask attr.config2 is incomplete,...
Linux kernel 安全漏洞
The Linux kernel is the core of the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from the perf/arm-cmn driver not rejecting hardware configurations that are not supported, potentially...
CVE-2026-24082
Memory Corruption when copying data from a freed source while executing performance counter deselect operation...
Amazon Linux 2023 : bpftool6.18, kernel6.18, kernel6.18-devel (ALAS2023-2026-1596)
It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-1596 advisory. In the Linux kernel, the following vulnerability has been resolved: nvme: fix memory allocation in nvmeprreadkeys CVE-2026-23244 In the Linux kernel, the following vulnerability has been...
CVE-2026-25165
Null pointer dereference in Windows Performance Counters allows an authorized attacker to elevate privileges locally...
The vulnerability of monitoring and diagnostic tools for performance counters in Windows operating systems allows attackers to exploit their privileges.
The vulnerability of the performance monitoring and diagnostic tools of the Windows operating system’s Performance Counters is related to pointer aliasing. Exploiting this vulnerability can allow an attacker to enhance their privileges...
EUVD-2026-10628
Null pointer dereference in Windows Performance Counters allows an authorized attacker to elevate privileges locally...
CVE-2026-25165
Null pointer dereference in Windows Performance Counters allows an authorized attacker to elevate privileges locally...
CVE-2026-25165
Null pointer dereference in Windows Performance Counters allows an authorized attacker to elevate privileges locally...
CVE-2026-25165
CVE-2026-25165 is a Windows local privilege escalation affecting Performance Counters. The description notes a local attack with low privileges, no user interaction, and high impact on confidentiality, integrity, and availability. The underlying root cause and affected component details are not p...
CVE-2026-25165 Performance Counters for Windows Elevation of Privilege Vulnerability
...
CVE-2026-25165 Performance Counters for Windows Elevation of Privilege Vulnerability
...
CVE-2026-25165
Null pointer dereference in Windows Performance Counters allows an authorized attacker to elevate privileges locally...
