EUVD-2025-93450

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Speech allows an authorized attacker to elevate privileges locally...

CVE-2025-59507

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Speech allows an authorized attacker to elevate privileges locally...

kernel: acpi: typec: ucsi: Introduce a ->poll_cci method

In the Linux kernel, the following vulnerability has been resolved: acpi: typec: ucsi: Introduce a -pollcci method For the ACPI backend of UCSI the UCSI "registers" are just a memory copy of the register values in an opregion. The ACPI implementation in the BIOS ensures that the opregion contents...

kernel: mm: zswap: properly synchronize freeing resources during CPU hotunplug

In the Linux kernel, the following vulnerability has been resolved: mm: zswap: properly synchronize freeing resources during CPU hotunplug In zswapcompress and zswapdecompress, the per-CPU acompctx of the current CPU at the beginning of the operation is retrieved and used throughout. However, sin...

kernel: acpi: typec: ucsi: Introduce a ->poll_cci method

In the Linux kernel, the following vulnerability has been resolved: acpi: typec: ucsi: Introduce a -pollcci method For the ACPI backend of UCSI the UCSI "registers" are just a memory copy of the register values in an opregion. The ACPI implementation in the BIOS ensures that the opregion contents...

kernel: mm: zswap: properly synchronize freeing resources during CPU hotunplug

In the Linux kernel, the following vulnerability has been resolved: mm: zswap: properly synchronize freeing resources during CPU hotunplug In zswapcompress and zswapdecompress, the per-CPU acompctx of the current CPU at the beginning of the operation is retrieved and used throughout. However, sin...

Windows Kernel Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Kernel allows an authorized attacker to elevate privileges locally...

The vulnerability of the panthor_groupdestroy() function in the drivers/gpu/drm/panthor/panthor_sched.c driver module exposes the Direct Rendering Infrastructure (DRI) kernel of the Linux operating system, allowing a malicious actor to cause a service failure.

The vulnerability of the panthorgroupdestroy function in the drivers/gpu/drm/panthor/panthorsched.c driver for the Direct Rendering Infrastructure DRI support in the Linux operating system is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an...

ALSA-2025:20095 Moderate: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: xen: Xen hypercall page unsafe against speculative attacks Xen Security Advisory 466 CVE-2024-53241 kernel: exfat: fix out-of-bounds access of directory entries CVE-2024-53147 kernel: zra...

PT-2025-46456

Name of the Vulnerable Software and Affected Versions Windows DirectX affected versions not specified Description A race condition exists in Windows DirectX due to concurrent execution using a shared resource with improper synchronization. This allows an authorized attacker to elevate privileges...

PT-2025-46484

Name of the Vulnerable Software and Affected Versions Windows DirectX affected versions not specified Description A race condition exists in Windows DirectX due to concurrent execution using a shared resource with improper synchronization. This allows an authorized attacker to cause a denial of...

CVE-2025-64682: Concurrent Execution using Shared Resource with Improper Synchronization

In JetBrains Hub before 2025.3.104432 a race condition allowed bypass of the Agent-user limit...

CVE-2025-64683: Concurrent Execution using Shared Resource with Improper Synchronization

In JetBrains Hub before 2025.3.104432 information disclosure was possible via the Users API...

Microsoft Windows Bluetooth Service Resource Management Error Vulnerability

Microsoft Windows Bluetooth Service is a Bluetooth driver from Microsoft Microsoft Corporation, USA. A resource management error vulnerability exists in Microsoft Windows Bluetooth Service that stems from a contention condition due to improper synchronization of shared resources, which can be...

PT-2025-54661

Уязвимость функции mddev unlock модуля drivers/md/md.c драйвера нескольких устройств RAID и LVM ядра операционной системы Linux связана с ошибками синхронизации при использовании общего ресурса. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании...

The vulnerability of the nvmepciNRMs() function in the drivers/nvme/host/pci.c module of the Linux NVME kernel driver allows a attacker to cause a service failure.

The vulnerability of the nvmepciNRMs function in the drivers/nvme/host/pci.c module of the Linux NVME kernel driver is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the “Red Database” database management system, related to synchronization errors when using a common resource, allows a perpetrator to cause a server service failure.

The vulnerability of the “Red Database” database management system is related to synchronization errors when using a common resource. Exploiting this vulnerability can allow an attacker to cause a service failure on the server...

The vulnerability of the `AggTraceMemoryFile::updateVersion` function in the `AggTraceSharedMemory.cpp` module of the “Red Database” database management system allows a hacker to cause a service failure on the server.

The vulnerability of the AggTraceMemoryFile::updateVersion function in the AggTraceSharedMemory.cpp module of the “Red Database” database management system is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause a service...

The vulnerability of the ConfiguredPlugin::release function in the PluginManager.cpp module of the “Red Database” database management system allows a hacker to cause a service failure on the server.

The vulnerability in the ConfiguredPlugin::release function of the PluginManager.cpp module of the database management system “Red Database” is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to cause a service failure on the...

The vulnerability of the do_task() function in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the dotask function in the Linux operating system’s kernel is related to synchronization errors when using shared resources „Race Conditions“. Exploiting this vulnerability can allow a perpetrator to cause service failures...