9021 matches found
Argo Workflow may expose artifact repository credentials
Summary An attacker who has permissions to read logs from pods in a namespace with Argo Workflow can read workflow-controller logs and get credentials to the artifact repository. Details An attacker, by reading the logs of the workflow controller pod, can access the artifact repository, and steal...
EUVD-2025-34331
Use after free in Windows PrintWorkflowUserSvc allows an authorized attacker to elevate privileges locally...
EUVD-2025-34332
Use after free in Windows PrintWorkflowUserSvc allows an authorized attacker to elevate privileges locally...
EUVD-2025-34410
Use after free in Windows PrintWorkflowUserSvc allows an authorized attacker to elevate privileges locally...
EUVD-2025-34333
Use after free in Windows PrintWorkflowUserSvc allows an authorized attacker to elevate privileges locally...
EUVD-2025-34343
Improper enforcement of behavioral workflow in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack...
EUVD-2025-34339
Improper enforcement of behavioral workflow in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack...
EUVD-2025-34342
Use after free in Windows PrintWorkflowUserSvc allows an authorized attacker to elevate privileges locally...
GHSA-P84V-GXVW-73PF Argo Workflow has a Zipslip Vulnerability
Vulnerability Description Vulnerability Overview 1. During the artifact extraction process, the unpack function extracts the compressed file to a temporary directory /etc.tmpdir and then attempts to move its contents to /etc using the rename system call, 2. However, since /etc is an already...
Argo Workflow has a Zipslip Vulnerability
Vulnerability Description Vulnerability Overview 1. During the artifact extraction process, the unpack function extracts the compressed file to a temporary directory /etc.tmpdir and then attempts to move its contents to /etc using the rename system call, 2. However, since /etc is an already...
CVE-2025-55690
Use after free in Windows PrintWorkflowUserSvc allows an authorized attacker to elevate privileges locally...
CVE-2025-55691
Use after free in Windows PrintWorkflowUserSvc allows an authorized attacker to elevate privileges locally...
CVE-2025-55684
Use after free in Windows PrintWorkflowUserSvc allows an authorized attacker to elevate privileges locally...
CVE-2025-55685
Use after free in Windows PrintWorkflowUserSvc allows an authorized attacker to elevate privileges locally...
CVE-2025-55684
Use after free in Windows PrintWorkflowUserSvc allows an authorized attacker to elevate privileges locally...
CVE-2025-55686
Use after free in Windows PrintWorkflowUserSvc allows an authorized attacker to elevate privileges locally...
CVE-2025-55682
Improper enforcement of behavioral workflow in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack...
CVE-2025-55682
Improper enforcement of behavioral workflow in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack...