28473 matches found
The vulnerability of the Secure Channel component in Windows operating systems, which allows attackers to escalate their privileges
The vulnerability of the Secure Channel component in Windows operating systems is related to the reutilization of previously released memory due to competitive access to resources. This “race condition” allows an attacker to enhance their privileges...
CVE-2025-30659
An Improper Handling of Length Parameter Inconsistency vulnerability in the Packet Forwarding Engine PFE of Juniper Networks Junos OS on SRX Series allows an unauthenticated, network-based attacker to cause a Denial-of-Service DoS. When a device configured for Secure Vector Routing SVR receives a...
CVE-2025-30659
An Improper Handling of Length Parameter Inconsistency vulnerability in the Packet Forwarding Engine PFE of Juniper Networks Junos OS on SRX Series allows an unauthenticated, network-based attacker to cause a Denial-of-Service DoS. When a device configured for Secure Vector Routing SVR receives a...
CVE-2025-30659 Junos OS: SRX Series: A device configured for vector routing crashes when receiving malformed traffic
An Improper Handling of Length Parameter Inconsistency vulnerability in the Packet Forwarding Engine PFE of Juniper Networks Junos OS on SRX Series allows an unauthenticated, network-based attacker to cause a Denial-of-Service DoS. When a device configured for Secure Vector Routing SVR receives a...
CVE-2025-30659 Junos OS: SRX Series: A device configured for vector routing crashes when receiving malformed traffic
An Improper Handling of Length Parameter Inconsistency vulnerability in the Packet Forwarding Engine PFE of Juniper Networks Junos OS on SRX Series allows an unauthenticated, network-based attacker to cause a Denial-of-Service DoS. When a device configured for Secure Vector Routing SVR receives a...
CVE-2025-30659
CVE-2025-30659 concerns Juniper Networks Junos OS on SRX Series, where an Improper Handling of Length Parameter Inconsistency in the Packet Forwarding Engine (PFE) can be triggered by a specially malformed SVR (Secure Vector Routing) packet. An unauthenticated, network-based attacker can cause th...
CLSA-2025-1744213211 grub2: Fix of 5 CVEs
CVE-2025-0624: net: Out-of-bounds write in grubnetsearchconfigfile - CVE-2025-0690: read: Integer overflow may lead to out-of-bounds write - CVE-2025-1118: commands/dump: The dump command is not in lockdown when secure boot is enabled - CVE-2025-0678: squash4: Integer overflow may lead to heap...
Exploit for Stack-based Buffer Overflow in Ivanti Connect_Secure
PoC exploit for CVE-2025-22457, a vulnerability in a Ruby applic...
CVE-2024-43046
There may be information disclosure during memory re-allocation in TZ Secure OS...
The vulnerability of the Windows Secure Channel component in Windows operating systems allows attackers to enhance their privileges.
The vulnerability of the Windows Secure Channel component in Windows operating systems is related to competitive access to resources a state of competition. Exploiting this vulnerability can allow attackers to enhance their privileges...
CVE-2025-27492
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Secure Channel allows an authorized attacker to elevate privileges locally...
CVE-2025-27492
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Secure Channel allows an authorized attacker to elevate privileges locally...
CVE-2025-26649
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Secure Channel allows an authorized attacker to elevate privileges locally...
CVE-2025-26649
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Secure Channel allows an authorized attacker to elevate privileges locally...
CVE-2025-27492 Windows Secure Channel Elevation of Privilege Vulnerability
...
CVE-2025-27492
CVE-2025-27492 arises from a race condition in Windows Secure Channel (Schannel) due to improper synchronization on a shared resource, enabling a locally authenticated attacker to elevate privileges. The entry is supported by multiple sources noting a Windows Privilege Elevation vulnerability and...
CVE-2025-26649 Windows Secure Channel Elevation of Privilege Vulnerability
...
CVE-2025-26649
CVE-2025-26649 describes a race condition in Windows Secure Channel (concurrent execution using a shared resource with improper synchronization) that could allow a locally authenticated user to elevate privileges. Primary sources (MSRC/NVD) confirm the vulnerability exists in the Windows Secure C...
Ivanti Releases Security Updates for Connect Secure, Policy Secure, and ZTA Gateways
Updated April 8, 2025 CISA updated these mitigations based on identification of a new malware variant called RESURGE that could undermine the effectiveness of the mitigations previously provided. For more information on RESURGE, see MAR-25993211.R1.V1.CLEAR and CISA Releases Malware Analysis Repo...