780 matches found
PT-2024-8326 · Microsoft · Windows
Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to synchronization errors when using a shared resource in the Windows Win32 Kernel Subsystem. This can allow an attacker to elevate their privileges. The estimated numb...
The vulnerability of the rtas component in the Linux operating system’s kernel allows a hacker to trigger a service failure.
The vulnerability of the rtas component in the Linux operating system arises due to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the Seamless Firmware Update Handler component in Intel microprogramming systems arises from synchronization errors when using shared resources, allowing attackers to trigger a service failure.
The vulnerability of the Seamless Firmware Update Handler component in Intel microprogramming systems arises due to synchronization errors when using a common resource. Exploiting this vulnerability can allow an attacker to cause a service failure...
PT-2024-6726
Name of the Vulnerable Software and Affected Versions: Windows Kernel affected versions not specified Description: An elevation-of-privilege vulnerability exists within the Windows kernel due to synchronization errors when a shared resource is used. Successful exploitation of this issue may allow...
PT-2024-6965 · Adobe · Commerce
Name of the Vulnerable Software and Affected Versions: Adobe Commerce versions 2.4.7-p2 through 2.4.4-p10 and earlier Description: The issue is related to a Time-of-check Time-of-use TOCTOU Race Condition vulnerability that could lead to a security feature bypass. An attacker could exploit this...
The vulnerability of the WebAudio component in the Google Chrome web browser allows a hacker to gain access to confidential data, compromise its integrity, and cause service interruptions.
The vulnerability of the WebAudio component in the Google Chrome web browser is related to the simultaneous execution using a shared resource with improper synchronization. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause...
The vulnerability of the `rpmsg_ctrldev_release_device` function in the `lib/debugobjects.c` file of the Linux kernel allows a hacker to trigger a service failure.
The vulnerability of the rpmsgctrldevreleasedevice function in the lib/debugobjects.c file of the Linux kernel is caused by synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to trigger a service failure...
PT-2024-19844 · Unknown · Minksocket
Name of the Vulnerable Software and Affected Versions: MinkSocket affected versions not specified Description: There is a memory corruption issue when releasing shared resources in the MinkSocket listener thread. This issue occurs due to improper handling of shared resources, leading to memory...
PT-2024-6179 · Microsoft · Windows Kernel-Mode Driver +1
Name of the Vulnerable Software and Affected Versions: Windows Kernel-Mode Driver affected versions not specified Description: The issue is related to an Elevation of Privilege vulnerability in the Windows Kernel-Mode Driver. It is caused by synchronization errors when using a shared resource,...
PT-2024-5649 · Microsoft · Windows
Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to synchronization errors when using a shared resource, specifically a "race condition" situation. This can allow an attacker to elevate their privileges. The estimated...
The vulnerability of the Frames component in Google Chrome and Microsoft Edge browsers allows a hacker to execute arbitrary code.
The vulnerability of the Frames component in Google Chrome and Microsoft Edge is related to synchronization errors when using a shared resource. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...
The vulnerability of the Team Chat component in Zoom’s video conferencing software allows attackers to disclose protected information.
The vulnerability of the Team Chat component in Zoom’s video conferencing software is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker who operates remotely to disclose sensitive information...
The vulnerability of Zoom’s video conferencing software, related to synchronization errors when using shared resources (“Race Situation”), allows attackers to escalate their privileges.
The vulnerability of Zoom’s video conferencing software is related to synchronization errors when using a shared resource “Race Situation”. Exploiting this vulnerability can allow attackers to gain increased privileges...
The vulnerabilities of the functions cert_store_stats() and get_ca_certs() in the SSL module of the Python programming language interpreter (CPython) allow a malicious individual to gain unauthorized access to protected information.
The vulnerability of the certstorestats and getcacerts functions in the SSL module of the Python programming language interpreter CPython is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected...
The vulnerability of the DefaultAzureCredential and ManagedIdentityCredential components of the Azure Identity Libraries and Microsoft Authentication Library allows a perpetrator to escalate their privileges.
The vulnerability of the DefaultAzureCredential and ManagedIdentityCredential components in the Azure Identity Libraries and Microsoft Authentication Library authentication libraries is related to synchronization errors when using a common resource. Exploiting this vulnerability can allow attacke...
Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
Overview Affected versions of this package are vulnerable to Concurrent Execution using Shared Resource with Improper Synchronization 'Race Condition' in the authentication process. An attacker can elevate privileges by exploiting race conditions during the token validation steps. This is only...
PT-2024-4173
Name of the Vulnerable Software and Affected Versions Windows Kernel affected versions not specified Description The issue is related to synchronization errors when using a shared resource, which can be exploited to elevate privileges. An elevation-of-privilege vulnerability allows attackers to...
Hitachi FOXMAN-UN Security Vulnerability
Hitachi FOXMAN-UN is a powerful toolset in a comprehensive NMS suite from Hitachi, Ltd Hitachi, Japan. A security vulnerability exists in Hitachi FOXMAN-UN and UNEM, which arises from sensitive information being stored in plaintext in a resource that is accessed by another span of control...
PT-2024-4302
Name of the Vulnerable Software and Affected Versions Azure Identity Libraries and Microsoft Authentication Library affected versions not specified Description The vulnerability in Azure Identity Libraries and Microsoft Authentication Library is related to synchronization errors when using a shar...
The vulnerability of the Apex One NT RealTime Scan anti-virus software programs Trend Micro Apex One and Apex One as a Service allows attackers to enhance their privileges and execute arbitrary code.
The vulnerability of the Apex One NT RealTime Scan antivirus software programs Trend Micro Apex One and Apex One as a Service is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to increase their privileges and execute arbitrary...