5869 matches found
Windows kernel Unauthorized Access
The vulnerability of the Windows operating system’s kernel is related to synchronization errors when using a shared resource „Race Condition“. Exploiting this vulnerability can allow an attacker to gain unauthorized access to the device...
Windows Clip Service Privilege Escalation
The vulnerability of the Windows Clip Service in the Windows operating system is related to synchronization errors when using a shared resource “Race Condition”. Exploiting this vulnerability can allow an attacker to gain increased privileges...
Microsoft Excel Synchronization Unauthorized Access
The vulnerability of Microsoft Excel editors arises due to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to gain unauthorized access to the device...
PT-2023-8486 · Apple · Apple Macos
Name of the Vulnerable Software and Affected Versions: macOS versions prior to 11.7.9 macOS versions prior to 12.6.8 macOS versions prior to 13.5 Description: A race condition was addressed with improved state handling, which could allow an app to gain root privileges. The issue is caused by...
CVE-2023-32258: Concurrent Execution using Shared Resource with Improper Synchronization
A flaw was found in the Linux kernel's ksmbd, a high-performance in-kernel SMB server. The specific flaw exists within the processing of SMB2LOGOFF and SMB2CLOSE commands. The issue results from the lack of proper locking when performing operations on an object. An attacker can leverage this...
CVE-2023-32257: Concurrent Execution using Shared Resource with Improper Synchronization
A flaw was found in the Linux kernel's ksmbd, a high-performance in-kernel SMB server. The specific flaw exists within the processing of SMB2SESSIONSETUP and SMB2LOGOFF commands. The issue results from the lack of proper locking when performing operations on an object. An attacker can leverage th...
Microsoft Defender Privilege Escalation
The vulnerability of Microsoft Defender’s operating system vulnerabilities is related to synchronization errors when using a shared resource “Race Condition”. Exploiting this vulnerability can allow an attacker to increase their privileges...
Netskope client service Privilege Escalation
The vulnerability of the Netskope client service is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to increase their privileges...
Windows Installer Privilege Escalation
The vulnerability of the Windows Installer installer on Windows operating systems is related to synchronization errors when using a common resource. Exploiting this vulnerability can allow an attacker to increase their privileges within the system...
.NET Privilege Escalation
The vulnerability of the .NET software platform and the Microsoft Visual Studio development environment arises due to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to gain increased privileges remotely...
.NET Synchronization Bypass
The vulnerability of the .NET software platform and the Microsoft Visual Studio development environment arises due to synchronization errors when using a shared resource. Exploiting this vulnerability allows an attacker to bypass existing security restrictions remotely...
Podman Arbitrary File Read
The vulnerability of the Podman software for managing and starting OCI containers on Red Hat Enterprise Linux, RedOS, and the corporate platform Red Hat OpenShift Container Platform is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow a malicio...
PT-2023-8982 · Libvirt +6 · Libvirt +6
Name of the Vulnerable Software and Affected Versions: libvirt affected versions not specified Description: A flaw was found in the virStoragePoolObjListSearch function of libvirt, which does not return a locked pool as expected. This results in a race condition and denial of service when...
Linux io_uring Privilege Escalation
The vulnerability of the iouring subsystem in Linux operating systems is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to elevate their privileges to the root level...
CVE-2023-38409: Concurrent Execution using Shared Resource with Improper Synchronization
An issue was discovered in setcon2fbmap in drivers/video/fbdev/core/fbcon.c in the Linux kernel before 6.2.12. Because an assignment occurs only for the first vc, the fbconregisteredfb and fbcondisplay arrays can be desynchronized in fbconmodedeleted the con2fbmap points at the old fbinfo...
CVE-2023-36521
A vulnerability has been identified in SIMATIC MV540 H All versions V3.3.4, SIMATIC MV540 S All versions V3.3.4, SIMATIC MV550 H All versions V3.3.4, SIMATIC MV550 S All versions V3.3.4, SIMATIC MV560 U All versions V3.3.4, SIMATIC MV560 X All versions V3.3.4. The result synchronization server of...
CVE-2023-36521
A vulnerability has been identified in SIMATIC MV540 H All versions V3.3.4, SIMATIC MV540 S All versions V3.3.4, SIMATIC MV550 H All versions V3.3.4, SIMATIC MV550 S All versions V3.3.4, SIMATIC MV560 U All versions V3.3.4, SIMATIC MV560 X All versions V3.3.4. The result synchronization server of...
CVE-2023-36521
A vulnerability has been identified in SIMATIC MV540 H All versions V3.3.4, SIMATIC MV540 S All versions V3.3.4, SIMATIC MV550 H All versions V3.3.4, SIMATIC MV550 S All versions V3.3.4, SIMATIC MV560 U All versions V3.3.4, SIMATIC MV560 X All versions V3.3.4. The result synchronization server of...
PT-2023-3838 · Microsoft · Windows Kernel +1
Name of the Vulnerable Software and Affected Versions: Windows Kernel affected versions not specified Description: The issue is related to synchronization errors when using a shared resource, which can lead to a situation where an attacker gains unauthorized access to the device. This is an...