Microsoft Office Graphics Remote Code Execution Vulnerability (CNVD-2022-89425)

Microsoft Graphics Component is a graphics driver component of Microsoft Corporation USA. A remote code execution vulnerability exists in Microsoft Office Graphics. An attacker could exploit this vulnerability to execute code on the target host...

Microsoft Office Graphics remote code execution vulnerability (CNVD-2022-89426)

Microsoft Graphics Component is a graphics driver component of Microsoft Corporation USA.A remote code execution vulnerability exists in Microsoft Office Graphics. An attacker could exploit this vulnerability to execute code on the target host...

Microsoft Office Visio Remote Code Execution Vulnerability (CNVD-2022-89424)

Microsoft Office is a suite of office software developed by Microsoft Corporation based on the Windows operating system. Microsoft Office Visio is vulnerable to remote code execution. An attacker could exploit the vulnerability to execute code on the target host...

Microsoft Office Visio Remote Code Execution Vulnerability (CNVD-2022-89422)

Microsoft Office is a suite of office software developed by Microsoft Corporation based on the Windows operating system. Microsoft Office Visio is vulnerable to remote code execution. An attacker could exploit the vulnerability to execute code on the target host...

Microsoft Office Graphics remote code execution vulnerability (CNVD-2022-89423)

Microsoft Office is an office software suite product of the United States Microsoft Corporation Microsoft. Common components of the product include Word, Excel, Access, Powerpoint, FrontPage, etc. A remote code execution vulnerability exists in Microsoft Office Graphics. An attacker could exploit...

CVE-2022-20572

In veritytarget of dm-verity-target.c, there is a possible way to modify read-only files due to a missing permission check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android...

DEBIAN-CVE-2022-20572

In veritytarget of dm-verity-target.c, there is a possible way to modify read-only files due to a missing permission check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android...

prometheus-jmx-exporter security update

An update is available for prometheus-jmx-exporter. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Prometheus JMX Exporter is a JMX to Prometheus exporter: a...

Important: prometheus-jmx-exporter security update

Prometheus JMX Exporter is a JMX to Prometheus exporter: a collector that can be configured to scrape and expose MBeans of a JMX target. Security Fixes: SnakeYaml: Constructor Deserialization Remote Code Execution CVE-2022-1471 For more details about the security issues, including the impact, a...

hw: cpu: Intel: information disclosure via local access

A flaw was found in hw. The unprotected alternative channel of return branch target prediction in some IntelR Processors may allow an authorized user to enable information disclosure via local access...

hw: cpu: Intel: information disclosure via local access

A flaw was found in hw. The unprotected alternative channel of return branch target prediction in some IntelR Processors may allow an authorized user to enable information disclosure via local access...

Microsoft Office Visio 安全漏洞

Microsoft Office is a suite of office software developed by Microsoft Corporation based on the Windows operating system. Microsoft Office Visio is vulnerable to remote code execution. An attacker could exploit the vulnerability to execute code on the target host...

Microsoft Graphics Component 安全漏洞

Microsoft Graphics Component is a graphics driver component of Microsoft Corporation USA.A remote code execution vulnerability exists in Microsoft Office Graphics. An attacker could exploit this vulnerability to execute code on the target host...

Microsoft Office Visio 安全漏洞

Microsoft Office is a suite of office software developed by Microsoft Corporation based on the Windows operating system. Microsoft Office Visio is vulnerable to remote code execution. An attacker could exploit the vulnerability to execute code on the target host...

Microsoft Graphics Component 安全漏洞

Microsoft Graphics Component is a graphics driver component of Microsoft Corporation USA.A remote code execution vulnerability exists in Microsoft Office Graphics. An attacker could exploit this vulnerability to execute code on the target host...

Low PVS boot throughput

A customer observed that PVS target device boot statistics, viewed in status tray tool, showed low throughput and a long boot time on existing target devices. Testing a new vdisk, minimal install with just PVS target device software and not domain joined, showed much quicker boot time and higher...

PT-2022-14693 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-11 through Android-13 Description: The issue is related to a confused deputy in the ResetTargetTaskHelper.java test, which could allow the hijacking of any app that sets allowTaskReparenting to true. This could lead t...

GSD-2022-1008136 scsi: target: tcm_loop: Fix possible name leak in tcm_loop_setup_hba_bus()

scsi: target: tcmloop: Fix possible name leak in tcmloopsetuphbabus This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.225 by commit...

GSD-2022-1007882 scsi: target: tcm_loop: Fix possible name leak in tcm_loop_setup_hba_bus()

scsi: target: tcmloop: Fix possible name leak in tcmloopsetuphbabus This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.80 by commit...

GSD-2022-1007700 scsi: target: tcm_loop: Fix possible name leak in tcm_loop_setup_hba_bus()

scsi: target: tcmloop: Fix possible name leak in tcmloopsetuphbabus This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.10 by commit...