CVE-2024-11263

CVE-2024-11263 concerns RISCV GP relative addressing when CONFIG_RISCV_GP=y. The gp register is reported to point 0x800 bytes past the start of the .sdata section, which the linker uses to relax accesses to global symbols. Across the connected documents, the issue is described with this root caus...

CVE-2024-51037

An issue in kodbox v.1.52.04 and before allows a remote attacker to obtain sensitive information via the captcha feature in the password reset function...

Windows Hyper-V Shared Virtual Disk Privilege Escalation

The vulnerability of the Windows Hyper-V Shared Virtual Disk function in the Windows operating system is related to the assignment of an untrusted pointer. Exploiting this vulnerability can allow attackers to gain increased privileges...

CVE-2024-50986

An issue in Clementine v.1.3.1 allows a local attacker to execute arbitrary code via a crafted DLL file...

Microsoft Windows Hyper-V Denial of Service Vulnerability (CNVD-2024-45322)

Microsoft Windows Hyper-V is a tool from Microsoft USA that provides hardware virtualization. A denial of service vulnerability exists in Microsoft Windows Hyper-V. An attacker could exploit this vulnerability to cause a denial of service...

CVE-2024-11263: Privilege Context Switching Error

When the Global Pointer GP relative addressing is enabled CONFIGRISCVGP=y, the gp reg points at 0x800 bytes past the start of the .sdata section which is then used by the linker to relax accesses to global symbols...

CVE-2024-50986

An issue in Clementine v.1.3.1 allows a local attacker to execute arbitrary code via a crafted DLL file...

Microsoft Windows Hyper-V Shared Virtual Disk Elevation of Privilege Vulnerability

Microsoft Windows Hyper-V is a virtualization technology developed by Microsoft for creating and managing virtual machines on the Windows operating system, of which the Shared Virtual Disk is one. An elevation of privilege vulnerability exists in Microsoft Windows Hyper-V Shared Virtual Disk, whi...

Ubuntu 24.04 LTS : Linux kernel vulnerabilities (USN-7089-4)

The remote Ubuntu 24.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7089-4 advisory. Chenyuan Yang discovered that the USB Gadget subsystem in the Linux kernel did not properly check for the device to be enabled before writing. A local...

Microsoft and Adobe Patch Tuesday, November 2024 Security Update Review

Microsoft has released its November 2024 Patch Tuesday updates, targeting various vulnerabilities that could impact users and organizations worldwide. From zero-day threats to key product patches, here’s what’s crucial to apply this month. Here’s a breakdown of the updates and how they impact you...

CVE-2024-43633

Windows Hyper-V Denial of Service Vulnerability...

CVE-2024-43633

Windows Hyper-V Denial of Service Vulnerability...

CVE-2024-43624

Windows Hyper-V Shared Virtual Disk Elevation of Privilege Vulnerability...

CVE-2024-43624

Windows Hyper-V Shared Virtual Disk Elevation of Privilege Vulnerability...

CVE-2024-43633 Windows Hyper-V Denial of Service Vulnerability

...

CVE-2024-43633

Technical details for CVE-2024-43633 are not publicly available in the provided documents; affected components, root cause, impact, or fixes are not disclosed here. Monitor for updates.

CVE-2024-43633 Windows Hyper-V Denial of Service Vulnerability

...

CVE-2024-43624

CVE-2024-43624 involves a privilege-escalation flaw in Windows Hyper-V Shared Virtual Disk. The CNVD/CVR sources describe the issue as a flaw in the Hyper-V Shared Virtual Disk that allows an attacker to obtain elevated privileges on the affected system. Microsoft has released security updates ad...

CVE-2024-43624 Windows Hyper-V Shared Virtual Disk Elevation of Privilege Vulnerability

...

USN-7100-2: Linux kernel vulnerabilities

Supraja Sridhara, Benedict Schlüter, Mark Kuhne, Andrin Bertschi, and Shweta Shinde discovered that the Confidential Computing framework in the Linux kernel for x86 platforms did not properly handle 32-bit emulation on TDX and SEV. An attacker with access to the VMM could use this to cause a deni...