PT-2023-3568

Name of the Vulnerable Software and Affected Versions ASP.NET and Visual Studio affected versions not specified Description The issue is caused by synchronization errors when using a shared resource in the .NET platform and Microsoft Visual Studio. This can allow a remote attacker to bypass...

CVE-2023-35361: Concurrent Execution using Shared Resource with Improper Synchronization

Windows Kernel Elevation of Privilege Vulnerability...

PT-2023-3846 · Microsoft · Windows Clip Service +1

Name of the Vulnerable Software and Affected Versions: Windows Clip Service affected versions not specified Description: The issue is related to synchronization errors in the Windows Clip Service, specifically a race condition. This could allow an attacker to elevate their privileges...

PT-2023-3838 · Microsoft · Windows Kernel +1

Name of the Vulnerable Software and Affected Versions: Windows Kernel affected versions not specified Description: The issue is related to synchronization errors when using a shared resource, which can lead to a situation where an attacker gains unauthorized access to the device. This is an...

PT-2023-3569

Name of the Vulnerable Software and Affected Versions .NET and Visual Studio affected versions not specified Description The issue is caused by synchronization errors when using a shared resource in the .NET and Visual Studio software platform. Exploitation of this issue may allow a remote attack...

PT-2023-3926 · Microsoft · Windows Dns Server +1

Name of the Vulnerable Software and Affected Versions: Windows DNS Server affected versions not specified Description: The issue is related to synchronization errors when using a shared resource in the Windows DNS Server component. It allows a remote attacker to execute arbitrary code...

PT-2023-3831 · Microsoft · Office Excel

Name of the Vulnerable Software and Affected Versions: Microsoft Excel affected versions not specified Description: The issue is caused by synchronization errors when using a shared resource in Microsoft Excel, allowing an attacker to gain unauthorized access to the device. This can enable...

PT-2023-3659 · Microsoft · Defender

Name of the Vulnerable Software and Affected Versions: Microsoft Defender affected versions not specified Description: The issue is related to synchronization errors when using a shared resource, specifically a "race condition" situation. This could allow an attacker to elevate their privileges...

PT-2023-3660 · Microsoft · Windows Installer +1

Name of the Vulnerable Software and Affected Versions: Windows Installer affected versions not specified Description: The issue is related to synchronization errors when using a shared resource in the Windows operating system. It allows an attacker to elevate privileges in the system. This is an...

CVE-2023-33170: Concurrent Execution using Shared Resource with Improper Synchronization

ASP.NET and Visual Studio Security Feature Bypass Vulnerability...

IPv6 DoS

The vulnerability of the IPv6 protocol implementation in Linux operating systems is related to uncontrolled resource consumption during the processing of hash tables. Exploiting this vulnerability allows a remote attacker to cause service interruptions by sending numerous SYN requests...

cURL siglongjmp Buffer Overflow DoS

The vulnerability of the alarm and siglongjmp functions in the command-line utility cURL is related to improper synchronization during the resolution of host names. Exploiting this vulnerability can allow a remote attacker to cause service failures...

CVE-2023-32250: Concurrent Execution using Shared Resource with Improper Synchronization

A flaw was found in the Linux kernel's ksmbd, a high-performance in-kernel SMB server. The specific flaw exists within the processing of SMB2SESSIONSETUP commands. The issue results from the lack of proper locking when performing operations on an object. An attacker can leverage this vulnerabilit...

CVE-2023-32254: Concurrent Execution using Shared Resource with Improper Synchronization

A flaw was found in the Linux kernel's ksmbd, a high-performance in-kernel SMB server. The specific flaw exists within the processing of SMB2TREEDISCONNECT commands. The issue results from the lack of proper locking when performing operations on an object. An attacker can leverage this...

CVE-2023-35863: Concurrent Execution using Shared Resource with Improper Synchronization

In MADEFORNET HTTP Debugger through 9.12, the Windows service does not set the seclevel registry key before launching the driver. Thus, it is possible for an unprivileged application to obtain a handle to the NetFilterSDK wrapper before the service obtains exclusive access...

CVE-2023-34451

CometBFT is a Byzantine Fault Tolerant BFT middleware that takes a state transition machine and replicates it on many machines. The mempool maintains two data structures to keep track of outstanding transactions: a list and a map. These two data structures are supposed to be in sync all the time ...

Code injection

CometBFT is a Byzantine Fault Tolerant BFT middleware that takes a state transition machine and replicates it on many machines. The mempool maintains two data structures to keep track of outstanding transactions: a list and a map. These two data structures are supposed to be in sync all the time ...

MISP security vulnerabilities

MISP is an open source software solution. The product is used to collect, store, distribute, and share cybersecurity metrics and has features such as threat cybersecurity event analysis and malware analysis. A security vulnerability exists in MISP version 2.4.172, which stems from the incorrect...

[NetScaler] Service State doesn't sync to Secondary node in HA setup

When you build NetScaler HA pair with VPX on SDX platform. You may observe the issue that Primary doesn't sync service UP/DOWN events to Secondary node. The issue can impact SDX platforms:SDX 8900, SDX 15000, SDX 15000-50G, SDX 26000, and SDX 26000-50S...

Windows Filtering Platform Privilege Escalation

The vulnerability of the Windows Filtering Platform in the operating system Windows is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to increase their privileges...