Ubuntu 22.04 LTS : Linux kernel (NVIDIA) vulnerabilities (USN-6818-3)

The remote Ubuntu 22.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-6818-3 advisory. Alon Zahavi discovered that the NVMe-oF/TCP subsystem in the Linux kernel did not properly validate H2C PDU data, leading to a null pointer dereference...

[SECURITY] Fedora 39 Update: libarchive-3.7.1-2.fc39

Libarchive is a programming library that can create and read several different streaming archive formats, including most popular tar variants, several cpio formats, and both BSD and GNU ar variants. It can also write shar archives and read ISO9660 CDROM images and ZIP archives...

(Pwn2Own) Microsoft Windows mskssrv Driver Use-After-Free Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the Microsoft Kern...

USN-6820-2 linux-nvidia vulnerabilities

It was discovered that the ATA over Ethernet AoE driver in the Linux kernel contained a race condition, leading to a use-after-free vulnerability. An attacker could use this to cause a denial of service or possibly execute arbitrary code. CVE-2023-6270 It was discovered that the Atheros 802.11ac...

CVE-2024-35250

Windows Kernel-Mode Driver Elevation of Privilege Vulnerability...

CVE-2024-30090

Microsoft Streaming Service Elevation of Privilege Vulnerability...

CVE-2024-30089

Microsoft Streaming Service Elevation of Privilege Vulnerability...

CVE-2024-30090

Microsoft Streaming Service Elevation of Privilege Vulnerability...

CVE-2024-30090

Microsoft Streaming Service Elevation of Privilege Vulnerability...

CVE-2024-30089

Microsoft Streaming Service Elevation of Privilege Vulnerability...

CVE-2024-30090 Microsoft Streaming Service Elevation of Privilege Vulnerability

...

CVE-2024-30090

CVE-2024-30090 is an elevation-of-privilege vulnerability affecting the Windows Kernel Streaming framework, specifically the msrks.ks.sys component used for processing streaming data (e.g., microphone/webcam input). The public materials indicate exploitation potential via a memory-bounds/buffer h...

CVE-2024-30090 Microsoft Streaming Service Elevation of Privilege Vulnerability

...

CVE-2024-30089

Technical details about CVE-2024-30089 are not publicly provided in the supplied documents; no explicit affected products, root cause, or remediation are present. Monitor for updates.

CVE-2024-30089 Microsoft Streaming Service Elevation of Privilege Vulnerability

...

CVE-2024-30089 Microsoft Streaming Service Elevation of Privilege Vulnerability

...

Microsoft Streaming Service Elevation of Privilege Vulnerability

...

Microsoft Streaming Service Elevation of Privilege Vulnerability

...

When things go wrong: A digital sharing warning for couples

“When things go wrong” is a troubling prospect for most couples to face, but the internet—and the way that romantic partners engage both with and across it—could require that this worst-case scenario become more of a best practice. In new research that Malwarebytes will release this month, romant...

Microsoft Streaming Service Resource Management Error Vulnerability

Microsoft Streaming Service is a video platform from Microsoft Corporation USA. A resource management error vulnerability exists in Microsoft Streaming Service. An attacker could exploit this vulnerability to elevate privileges. The following products and versions are affected:Windows 10 Version...