Windows Level 2 Tunneling Code Execution

The vulnerability of the Layer 2 tunneling protocol implementation in Windows operating systems is related to synchronization errors when using shared resources. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending a specially crafted message to the Remote...

L2TP Code Execution

The vulnerability of the Layer 2 Tunneling Protocol L2TP implementation in Windows operating systems is related to synchronization errors when using a shared resource. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

L2TP Code Execution

The vulnerability of the Layer 2 Tunneling Protocol L2TP implementation in Windows operating systems is related to synchronization errors when using a shared resource. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Graphics component Windows Privilege Escalation

The vulnerability of the Graphics component in Windows operating systems is related to synchronization errors when using shared resources „Race Conditions“. Exploiting this vulnerability can allow an attacker to increase their privileges...

GPU driver Mali-based Arm Valhall unauthorized processing

The vulnerability of the GPU driver for Mali-based processors based on Arm and Valhall is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow attackers to perform incorrect processing operations...

Transactional Rollback Strategies with Spring Cloud Stream and Apache Kafka

Other parts in this blog series Part 1: Introduction to Transactions in Spring Cloud Stream Kafka Applications Part 2: Producer Initiated Transactions in Spring Cloud Stream Kafka Applications Part 3: Synchronizing with External Transaction Managers in Spring Cloud Stream Kafka Applications In th...

GPU driver Mali Bifrost Valhall unauthorized processing

The vulnerability of the GPU driver for Mali-based processors based on Arm, Bifrost, and Valhall is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow attackers to perform incorrect processing operations...

PT-2023-5926 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to errors in synchronization when using a shared resource in the implementation of the Layer 2 Tunneling Protocol L2TP in Windows operating systems. This can allow a...

PT-2023-6151

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description The issue is related to synchronization errors when using a shared resource in the Win32k component of the Windows operating system. This can allow an attacker to elevate their privileges. An...

PT-2023-6070

Name of the Vulnerable Software and Affected Versions Windows Error Reporting Service affected versions not specified Description The issue is caused by synchronization errors when using a shared resource in the Windows Error Reporting service, allowing an attacker to elevate their privileges. Th...

PT-2023-5958

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description The issue is related to the implementation of the Layer 2 Tunneling Protocol L2TP in Windows operating systems, specifically due to synchronization errors when using a shared resource. This...

PT-2023-5966 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to errors in synchronization when using a shared resource in the implementation of the Layer 2 tunneling protocol in Windows operating systems. This can be exploited by...

CVE-2023-36698: Concurrent Execution using Shared Resource with Improper Synchronization

Windows Kernel Security Feature Bypass Vulnerability...

PJSIP Resource Management Error Vulnerability

PJSIP is a free and open source multimedia communications library written in C that implements standards-based protocols such as SIP, SDP, RTP, STUN, TURN, and ICE. A resource management error vulnerability exists in versions of PJSIP prior to 2.14, which stems from a higher-level transfer being...

MediaTek Privilege Escalation

The vulnerability of MediaTek’s microprogramming software lies in synchronization errors when using a common resource. Exploiting this vulnerability can allow attackers to enhance their privileges...

MediaTek Privilege Escalation

The vulnerability of MediaTek’s microprogramming software lies in synchronization errors when using a common resource. Exploiting this vulnerability can allow attackers to enhance their privileges...

Security Bulletin: IBM QRadar Data Synchronization App for IBM QRadar SIEM is vulnerable to using components with known vulnerabilities

Summary The product includes vulnerable components e.g., framework libraries that may be identified and exploited with automated tools. IBM QRadar Data Synchronization App for IBM QRadar SIEM has addressed the applicable CVEs. Vulnerability Details CVEID:CVE-2022-46175 DESCRIPTION: JSON5 could...

PT-2023-5889

Name of the Vulnerable Software and Affected Versions Mali GPU driver affected versions not specified Description The issue is related to improper GPU processing operations that can be performed by a local non-privileged user, potentially allowing access to limited areas outside of buffer bounds ...

CVE-2023-41979: Concurrent Execution using Shared Resource with Improper Synchronization

A race condition was addressed with improved locking. This issue is fixed in macOS Sonoma 14. An app may be able to modify protected parts of the file system...

CVE-2023-41306: Concurrent Execution using Shared Resource with Improper Synchronization

Vulnerability of mutex management in the bone voice ID trusted application TA module. Successful exploitation of this vulnerability may cause the bone voice ID feature to be unavailable...