Linux kernel function setup_sgio_components() Data Compromise

The vulnerability of the setupsgiocomponents function in the drivers/crypto/marvell/octeontx/otxcptvfreqmgr.c file of the Linux kernel is related to the use of a name with an incorrect reference. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, a...

Linux net/tipc/socket.c Heap Buffer Overflow DoS

The vulnerability of the tipcskconnprotorcv function in the net/tipc/socket.c component of the Linux operating system is related to the improper implementation of thread management. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

Linux net/sched/sch_hfsc.c Heap Buffer Overflow DoS

The vulnerability of the updatevf function in the net/sched/schhfsc.c component of the Linux kernel is related to the implementation of an incorrect control flow. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux kernel fib_rules_dump Heap Buffer Overflow

The vulnerability of the fibrulesdump function in the include/net/fibrules.h component of the Linux kernel is related to the implementation of an incorrect control flow. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the...

Linux kernel vhost_zerocopy_complete Heap Buffer Overflow DoS

The vulnerability of the vhostzerocopycomplete function in the drivers/vhost/net.c component of the Linux kernel is related to insufficient resource control during its existence. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility ...

Linux driver/infiniband/hw/mlx5/main.c Buffer Overflow

The vulnerability of the drivers/infiniband/hw/mlx5/main.c component of the Linux operating system is related to insufficient control over resources with dynamic management. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of...

Linux kernel Set RQ Size Buffer Overflow

The vulnerability of the setrqsize function in the drivers/infiniband/hw/mlx5/qp.c component of the Linux kernel is related to the improper implementation of the control flow. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of...

Linux net/bluetooth hci_read_codec_capabilities Buffer Overflow

The vulnerability of the hcireadcodeccapabilities function in the net/bluetooth/hcicodec.c component of the Linux operating system is related to insufficient resource control during its existence. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity,...

Linux kernel Heap Buffer Overflow DoS

The vulnerability of the qcadmphdr function in the drivers/bluetooth/hciqca.c component of the Linux kernel is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux create_sdw_dailinks Heap Buffer Overflow

The vulnerability of the createsdwdailinks function in the sound/soc/amd/acp/acp-sdw-sof-mach.c component of the Linux operating system is related to insufficient resource control during its existence. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

Linux snd_seq_read() Heap Buffer Overflow

The vulnerability of the sndseqread function in the sound/core/seq/seqclientmgr.c component of the Linux kernel is related to insufficient resource control during its existence. Exploiting this vulnerability could allow an attacker to compromise the confidentiality and accessibility of the...

Linux kernel Control Flow

The vulnerability of the Linux operating system’s kernel is related to the implementation of an incorrect control flow. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

Linux kernel dev_dax_kmem_remove Heap Buffer Overflow DoS

The vulnerability of the devdaxkmemremove function in the drivers/dax/kmem.c kernel module of the Linux operating system is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux net/sched/cls_bpf Buffer Overflow DoS

The vulnerability in the net/sched/clsbpf.c component of the Linux operating system is related to the implementation of an incorrect control flow. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux Component Privilege Escalation

The vulnerability in the Linux operating system’s driver/infiniband/hw/irdma/verbs.c component is related to insufficient resource control during its existence. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of protected...

Linux kernel srpt_get_desc_tbl Heap Buffer Overflow

The vulnerability of the srptgetdesctbl function in the drivers/infiniband/ulp/srpt/ibsrpt.c file of the Linux kernel is related to incorrect calculations. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected...

Linux Component DoS

The vulnerability in the drivers/infiniband/hw/mlx5/devx.c component of the Linux operating system is related to pointer manipulation. Exploiting this vulnerability can allow an attacker to cause a service failure...

Linux kernel addrconf_dad_failure() Buffer Overflow

The vulnerability of the addrconfdadfailure function in the net/ipv6/addrconf.c component of the Linux kernel is related to the implementation of an incorrect control flow. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality, integrity, and accessibility ...

Linux kernel Heap Buffer Overflow DoS

The vulnerability of the athtxedmatasklet function in the drivers/net/wireless/ath/ath9k/xmit.c file of the Linux kernel is related to the occurrence of operations outside of memory buffers. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality, integrity,...

Linux kernel vxlan_gro_prepare_receive Heap Buffer Overflow DoS

The vulnerability of the vxlangropreparereceive function in the drivers/net/vxlan/vxlancore.c component of the Linux kernel is related to the use of pointers. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality, integrity, and accessibility of the protect...

Microsoft Visio Graphical Editors Code Execution

The vulnerability of Microsoft Visio graphical editors in Microsoft Office packages and 365 Apps for Enterprise is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code remotely...

Microsoft Excel Code Execution

The vulnerability of Microsoft Excel spreadsheet editors within the Microsoft Office and Microsoft 365 Apps for Enterprise software packages is related to reading data beyond the allowed range in memory. Exploitation of this vulnerability could allow a malicious actor to execute arbitrary code...

Skia Graphic Library Access Disclosure

The vulnerability of the Skia graphic library used by Google Chrome and Microsoft Edge is related to the use of an uninitialized resource. Exploiting this vulnerability could allow a malicious actor to gain access to protected information through a specially created HTML page...

Skia Graphic Library Access Disclosure

The vulnerability of the Skia graphic library in Google Chrome and Microsoft Edge is related to errors during variable initialization. Exploiting this vulnerability can allow an attacker to gain access to protected information through a specially created HTML page...

Hyper-V Hardware Virtualization Code Execution

The vulnerability of the Hyper-V hardware virtualization technology for Windows operating systems relates to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

Media Video Decoder Code Execution

The vulnerability of the Media Video Decoder decoder for Windows systems is related to operations that go beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

Google Chrome PDF Code Execution

The vulnerability of the Google Chrome browser’s PDF component relates to the ability to utilize memory after decompression. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code using a specially created HTML page...

Queue Manager Component Microsoft Message Queuing Service Code Execution

The vulnerability of the Queue Manager component of the Microsoft Message Queuing service on Windows operating systems is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

Microsoft Excel Code Execution

The vulnerability of Microsoft Excel spreadsheet editors within the Microsoft Office and Microsoft 365 Apps for Enterprise software packages is related to a numerical overflow condition. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...

Trusted Execution Environment Privilege Escalation

The vulnerability of the trusted execution environment for Virtualization-Based Security VBS in Windows operating systems is related to a numerical overflow condition. Exploiting this vulnerability can allow an attacker to increase their privileges...

Reliable Multicast Transport Driver Code Execution

The vulnerability of the Reliable Multicast Transport Driver RMCAST for Windows operating systems is related to buffer overflows in dynamic memory. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...

PAN-OS Management Interface Code Execution Root Privileges

The vulnerability of the PAN-OS operating system’s management interface is related to incorrect code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code with root privileges...

RAW image plugin Integer Overflow RCE

The vulnerability of the plugin for viewing RAW images is related to integer overflow. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Microsoft PowerPoint Code Execution

The vulnerability of Microsoft PowerPoint presentation preparation software in Microsoft Office packages and 365 Apps for Enterprise is related to the use of memory after release. Exploiting this vulnerability could allow an attacker to execute arbitrary code remotely...

Remote Desktop Services RCE

The vulnerability of Remote Desktop Services RDS for Windows operating systems relates to the use of memory after release. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

Windows Message Queue Code Execution

The vulnerability of Message Queuing in Windows operating systems is related to the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...

Microsoft Office Memory Use After Free

The vulnerability of Microsoft Office packages and 365 Apps for Enterprise lies in the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Trusted Execution Environment Privilege Escalation

The vulnerability of the trusted execution environment for Virtualization-Based Security VBS in Windows operating systems is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...

Apache Struts RestfulActionMapper Code Execution

The vulnerability of the RestfulActionMapper component of the Apache Struts software framework is related to the lack of measures taken to neutralize special elements used in the expression language operator. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

QUIC Protocol Code Execution

The vulnerability of the QUIC protocol implementation in Windows operating systems is related to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

Windows GDI+ Code Execution

The vulnerability of the Windows GDI+ component of the Windows operating system is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Hyper-V Hardware Virtualization Code Execution

The vulnerability of the Hyper-V hardware virtualization technology in the Windows operating system is related to improper initialization of resources. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

Microsoft Outlook Client Code Execution

The vulnerability of the Microsoft Outlook client and the Microsoft Office and 365 Apps for Enterprise packages is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code remotely...

PostScript Printer Driver Code Execution

The vulnerability of the PostScript Printer Driver for Windows operating systems is related to buffer overflows in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

PostScript Printer Driver Code Execution

The vulnerability of the PostScript Printer Driver for Windows operating systems is related to buffer overflows in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Graphics Component Windows Code Execution

The vulnerability of the Graphics Component component in Windows operating systems is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

Microsoft Office Memory Use After Free

The vulnerability of Microsoft Office packages and 365 Apps for Enterprise lies in the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Ivanti Connect Secure Authentication Bypass Code Execution

The vulnerability of the Ivanti Connect Secure network access control tool relates to the ability to bypass authentication through spoofing. Exploiting this vulnerability allows a malicious actor to circumvent existing security mechanisms and execute arbitrary code...

GitLab Integer Overflow Code Execution

The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to a numerical overflow condition. Exploiting this vulnerability allows a malicious actor, operating remotely, to execute arbitrary code...

FRM Metadata Handler Code Execution

The vulnerability of the FRM Metadata Handler component in the MariaDB database management system is related to incorrect checking of the specified index, position, or offset in the input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...