Windows Cluster Shared Volume (CSV) Elevation of Privilege Vulnerability

...

RLSA-2022:1975 Important: kernel-rt security and bug fix update

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Security Fixes: kernel: fget: check that the fd still exists after getting a ref to it CVE-2021-4083 kernel: avoid cyclic entity chains due to malformed U...

PT-2022-2447 · Microsoft · Windows Digital Media Receiver +1

Name of the Vulnerable Software and Affected Versions: Windows Digital Media Receiver affected versions not specified Description: The issue is related to synchronization errors when using a shared resource in the Windows Digital Media Receiver component of the Windows operating system. This can...

PT-2022-2645 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to errors in synchronization when using a shared resource, specifically a "race condition" in the Storage Spaces Direct feature of the Microsoft Windows operating syste...

PT-2022-2544 · Microsoft · Windows Cluster Shared Volume +1

Name of the Vulnerable Software and Affected Versions: Windows Cluster Shared Volume CSV affected versions not specified Description: The issue is related to errors in synchronization when using a shared resource in the Windows Cluster Shared Volume CSV file system, which can be exploited to...

Microsoft Windows Cluster Shared Volume 竞争条件问题漏洞

Microsoft Windows Cluster Shared Volume is a general-purpose cluster file system from Microsoft Corporation USA. A competitive conditions issue vulnerability exists in Microsoft Windows Cluster Shared Volume CSV. The following products and editions are affected:Windows Server 2012 Server Core...

Microsoft Windows Cluster Shared Volume 信息泄露漏洞

Microsoft Windows Cluster Shared Volume is a general-purpose cluster file system from Microsoft Corporation USA. An information disclosure vulnerability exists in Microsoft Windows Cluster Shared Volume CSV. The following products and versions are affected:Windows Server 2019,Windows Server 2019...

Speculative Load Disordering

Bulletin ID: AMD-SB-1035 Potential Impact: Data Leakage Severity: Low Summary AMD processors may speculatively re-order load instructions which can result in stale data being observed when multiple processors are operating on shared memory, resulting in potential data leakage. CVE Details...

Microsoft Windows Cluster Shared Volume 竞争条件问题漏洞

Microsoft Windows Cluster Shared Volume is a general-purpose cluster file system from Microsoft Corporation USA. A competitive conditions issue vulnerability exists in Microsoft Windows Cluster Shared Volume CSV. The following products and editions are affected:Windows Server 2019,Windows Server...

Microsoft Windows Cluster Shared Volume 竞争条件问题漏洞

Microsoft Windows Cluster Shared Volume is a general-purpose cluster file system from Microsoft Corporation USA. A competitive conditions issue vulnerability exists in Microsoft Windows Cluster Shared Volume CSV. The following products and versions are affected: Windows Server 2022,Windows Server...

PT-2022-2536 · Microsoft · Windows Cluster Shared Volume +1

Name of the Vulnerable Software and Affected Versions: Windows Cluster Shared Volume CSV affected versions not specified Description: The issue is related to errors in synchronization when using a shared resource in the Windows Cluster Shared Volume CSV file system. This can allow an attacker to...

Microsoft Windows Cluster Shared Volume 信息泄露漏洞

Microsoft Windows Cluster Shared Volume is a general-purpose cluster file system from Microsoft Corporation USA. An information disclosure vulnerability exists in Microsoft Windows Cluster Shared Volume CSV. The following products and editions are affected:Windows Server 2019,Windows Server 2019...

Microsoft Windows Cluster Shared Volume 信息泄露漏洞

Microsoft Windows Cluster Shared Volume is a general-purpose cluster file system from Microsoft Corporation USA. An information disclosure vulnerability exists in Microsoft Windows Cluster Shared Volume CSV. The following products and versions are affected:Windows Server 2022,Windows Server 2022...

Microsoft Windows 竞争条件问题漏洞

An elevation of privilege vulnerability exists in Microsoft Windows Digital Media Receiver, a desktop operating system from Microsoft Corporation. The vulnerability stems from improper handling of concurrent access when concurrent code needs mutually exclusive access to shared resources during th...

PT-2022-2446 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to an elevation-of-privilege vulnerability in the Windows operating system, specifically concerning the Advanced Local Procedure Call ALPC handler. It involves...

PT-2022-2454 · Microsoft · Windows Hyper-V +1

Name of the Vulnerable Software and Affected Versions: Windows Hyper-V affected versions not specified Description: The issue is related to synchronization errors when using a shared resource in the Windows Hyper-V hardware virtualization system. This can allow an attacker to elevate their...

PT-2022-2535 · Microsoft · Windows Kernel +1

Name of the Vulnerable Software and Affected Versions: Windows Kernel affected versions not specified Description: The issue is related to an elevation of privilege vulnerability in the Windows Kernel, caused by synchronization errors when using a shared resource. This could allow an attacker to...

Microsoft Windows Cluster Shared Volume 竞争条件问题漏洞

Microsoft Windows Cluster Shared Volume is a general-purpose cluster file system from Microsoft Corporation USA. A competitive conditions issue vulnerability exists in Microsoft Windows Cluster Shared Volume CSV. The following products and editions are affected:Windows Server 2019,Windows Server...

PT-2022-2545 · Microsoft · Windows Cluster Shared Volume +1

Name of the Vulnerable Software and Affected Versions: Windows Cluster Shared Volume CSV affected versions not specified Description: The issue is related to errors in synchronization when using a shared resource in the Windows Cluster Shared Volume CSV file system, which can allow an attacker to...

Microsoft Windows Storage Spaces Controller 竞争条件问题漏洞

An elevation-of-privilege vulnerability exists in Microsoft Windows Storage Spaces Controller, a driver necessary to provide storage space functionality for Microsoft Corporation. The vulnerability stems from improper handling of concurrent access when concurrent code needs to mutually exclusive...