CVE-2023-31310

CVE-2023-31310 concerns improper input validation in Power Management Firmware (PMFW). The known issue involves an attacker with privileges sending a malformed input to the set temperature input selection command, potentially leading to loss of integrity and/or availability. The PT-2024-12271 ent...

CVE-2023-31307

Improper validation of array index in Power Management Firmware PMFW may allow a privileged attacker to cause an out-of-bounds memory read within PMFW, potentially leading to a denial of service...

CVE-2023-31307

CVE-2023-31307 involves improper validation of an array index in Power Management Firmware (PMFW), allowing a local, privileged attacker to trigger an out-of-bounds memory read and potentially cause a denial of service. The issue is documented across multiple sources, referencing PMFW as the vuln...

CVE-2023-31307

Improper validation of array index in Power Management Firmware PMFW may allow a privileged attacker to cause an out-of-bounds memory read within PMFW, potentially leading to a denial of service...

CVE-2023-20513

CVE-2023-20513 concerns the Power Management Firmware (PMFW). Multiple sources confirm an insufficient bounds check in PMFW can be exploited by a malicious VF (virtualization function) to send a malformed message, potentially causing a denial of service . The Red Hat/NVD/NVD-derived descriptions ...

CVE-2023-20513

An insufficient bounds check in PMFW Power Management Firmware may allow an attacker to utilize a malicious VF virtualization function to send a malformed message, potentially resulting in a denial of service...

Windows Power Dependency Coordinator Elevation of Privilege Vulnerability

...

Microsoft Windows Power Dependency Coordinator Privilege Escalation Vulnerability

Microsoft Windows Power Dependency Coordinator contains an unspecified vulnerability that allows for privilege escalation, enabling a local attacker to obtain SYSTEM privileges...

CVE-2023-31310: Improper Validation of Specified Quantity in Input

Improper input validation in Power Management Firmware PMFW may allow an attacker with privileges to send a malformed input for the "set temperature input selection" command, potentially resulting in a loss of integrity and/or availability...

VulnCheck KEV: CVE-2024-38107

Microsoft Windows Power Dependency Coordinator contains an unspecified vulnerability that allows for privilege escalation, enabling a local attacker to obtain SYSTEM privileges...

PT-2024-12269 · Unknown · Power Management Firmware

Name of the Vulnerable Software and Affected Versions: Power Management Firmware affected versions not specified Description: The generation of weak and predictable Initialization Vector IV in Power Management Firmware may allow an attacker with privileges to reuse IV values to reverse-engineer...

PT-2024-11950 · Pmfw · Pmfw

Name of the Vulnerable Software and Affected Versions: PMFW Power Management Firmware affected versions not specified Description: An insufficient bounds check in PMFW may allow an attacker to utilize a malicious VF virtualization function to send a malformed message, potentially resulting in a...

PT-2024-12270 · Unknown · Power Management Firmware

Name of the Vulnerable Software and Affected Versions: Power Management Firmware PMFW affected versions not specified Description: The issue is related to improper validation of array index in Power Management Firmware PMFW, which may allow a privileged attacker to cause an out-of-bounds memory...

Kofax Power PDF Memory Misreference Information Disclosure Vulnerability (CNVD-2024-39654)

Kofax Power PDF is a professional PDF editing and management software from Kofax. Kofax Power PDF suffers from a memory misreference information disclosure vulnerability, which can be exploited by attackers to disclose sensitive information...

Kofax Power PDF Memory Misreference Information Disclosure Vulnerability

Kofax Power PDF is a professional PDF editing and management software from Kofax. Kofax Power PDF suffers from a memory misreference information disclosure vulnerability, which is caused by free usage when parsing OXPS files. An attacker can exploit this vulnerability to disclose sensitive...

CVE-2024-38107

Windows Power Dependency Coordinator Elevation of Privilege Vulnerability Recent assessments: Assessed Attacker Value: 0 Assessed Attacker Value: 0Assessed Attacker Value: 0...

Microsoft Windows Power Dependency Coordinator resource management error vulnerability

The Microsoft Windows Power Dependency Coordinator is a component of Windows systems from Microsoft Corporation USA that coordinates power management related operations. A resource management error vulnerability exists in Microsoft Windows Power Dependency Coordinator. An attacker could exploit...

CVE-2024-38107: Use After Free

Windows Power Dependency Coordinator Elevation of Privilege Vulnerability...

CVE-2023-31305: Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)

Generation of weak and predictable Initialization Vector IV in PMFW Power Management Firmware may allow an attacker with privileges to reuse IV values to reverse-engineer debug data, potentially resulting in information disclosure...

CVE-2023-31307: Improper Validation of Array Index

Improper validation of array index in Power Management Firmware PMFW may allow a privileged attacker to cause an out-of-bounds memory read within PMFW, potentially leading to a denial of service...