Linux drivers nvme target fc buffer overflow DoS

The vulnerability in the drivers/nvme/target/fc.c component of the Linux operating system is related to insufficient locking mechanisms. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux PCI Controller Cadence DoS

The vulnerability of the drivers/pci/controller/cadence components in the Linux operating system is related to pointer arithmetic errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

bpf Component DoS

The vulnerability of the bpf component in the Linux operating system’s kernel is related to improper synchronization. Exploiting this vulnerability can allow an attacker to cause a service failure...

Linux mm/ksm Heap Buffer Overflow DoS

The vulnerability of the scangetnextrmapitem function in the mm/ksm.c component of the Linux operating system is related to incorrect data input used as a condition for loop execution. Exploiting this vulnerability can allow an attacker to cause a service failure...

Linux driver mtd nand raw cadence-nand-controller Buffer Overflow DoS

The vulnerability of the drivers/mtd/nand/raw/cadence-nand-controller.c component in the Linux operating system is related to pointer arithmetic errors. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

Linux kernel Heap Buffer Overflow DoS

The vulnerability of the usbgadgetstatework function in the /drivers/usb/gadget/udc/core.c file of the Linux kernel is related to situations where the signal processing routine is involved in a race condition. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux kernel Heap Buffer Overflow DoS

The vulnerability of the havemonandosdmap function in the net/ceph/cephcommon.c kernel module of the Linux operating system is related to the dereferencing of a pointer with an expired lifetime. Exploiting this vulnerability could allow an attacker to trigger a service failure...

Linux kernel drivers iio accel DoS

The vulnerability of the drivers/iio/accel component in the Linux operating system is related to pointer dereferencing errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

Linux kernel DoS

The vulnerability in the drivers/regulator/core.c component of the Linux operating system is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

fs/ntfs3 Component DoS

The vulnerability of the fs/ntfs3 component in the Linux operating system is related to the use of an uninitialized resource. Exploiting this vulnerability can allow an attacker to cause a service failure...

Work Folder Service Privilege Escalation

The vulnerability of the Work Folder Service in Windows operating systems relates to the possibility of exploiting memory after it is freed. Exploiting this vulnerability could allow an attacker to increase their privileges...

Windows Telephony Service Privilege Escalation

The vulnerability of the Windows Telephony Service in Windows operating systems is related to synchronization errors when using a shared resource „Race Condition“. Exploiting this vulnerability can allow an attacker to increase their privileges...

Kerberos Privilege Escalation

The vulnerability of the Kerberos protocol for Windows operating systems is related to overflowing buffers in dynamic memory. Exploiting this vulnerability can allow an attacker to enhance their privileges...

Windows kernel Privilege Escalation

The vulnerability of the Windows Kernel component of the Windows operating system relates to the possibility of exploiting memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...

DHCP Server Windows Code Execution

The vulnerability of DHCP servers for Windows operating systems is related to overflowing buffers in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code by sending a specially crafted data packet...

Desktop Window Manager Privilege Escalation

The vulnerability of desktop window managers in Windows operating systems relates to reading beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...

Microsoft Excel Office 365 Apps for Enterprise Code Execution

The vulnerability of Microsoft Excel, Microsoft Office, and 365 Apps for Enterprise programs is related to data type conversion errors. Exploiting this vulnerability can allow attackers to execute arbitrary code by sending a specially crafted malicious file...

Windows DNS Service Privilege Escalation

The vulnerability of the Windows DNS service for Windows operating systems is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...

Win32k.sys Privilege Escalation

The vulnerability of the Win32k.sys component of the Windows operating system is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...

Windows Installer Privilege Escalation

The vulnerability of the Windows Installer component in Windows operating systems is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to increase their privileges...

Microsoft Local Security Authority Server Code Execution

The vulnerability of the Microsoft Local Security Authority Server lsasrv system library in Windows operating systems is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...

Windows Device Association Service Privilege Escalation

The vulnerability of the Windows Device Association Service on Windows operating systems is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...

DWM Core Library Privilege Escalation

The vulnerability of the DWM Core Library in Windows operating systems is related to overflowing buffers in dynamic memory. Exploiting this vulnerability can allow an attacker to increase their privileges...

Microsoft Teams Authentication Privilege Escalation

The vulnerability of the corporate platform Microsoft Teams is related to the lack of authentication. Exploiting this vulnerability can allow a malicious actor to increase their privileges remotely...

Microsoft Teams Cryptographic Signature Verification

The vulnerability of the corporate platform Microsoft Teams is related to errors in verifying the cryptographic signature. Exploiting this vulnerability could allow a malicious actor to carry out spear-phishing attacks remotely...

Azure Active Directory Privilege Escalation

The vulnerability of the Azure Active Directory identity management and protection platform is related to modifications of assumed data. Exploiting this vulnerability can allow a malicious actor to increase their privileges remotely...

Azure Confidential Ledger Code Execution

The vulnerability of cloud services for storing confidential records and logs in Azure Confidential Ledger is related to the use of dangerous methods or functions. Exploiting these vulnerabilities could allow a malicious actor to execute arbitrary code...

Azure Service Bus Deserialization RCE

The vulnerability of Azure Service Bus, a cloud-based asynchronous messaging platform, is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability could allow an attacker operating remotely to execute arbitrary code...

Web Portal Cloud Services Privilege Escalation

The vulnerability of the web portal for managing cloud services, accounts, subscriptions, and the security of the Microsoft 365 Admin Center is related to errors in verifying cryptographic signatures. Exploiting this vulnerability could allow a malicious actor to increase their privileges remotel...

Microsoft 365 Apps for Enterprise Buffer Overflow Code Execution

The vulnerability of Microsoft 365 Apps for Enterprise, Microsoft Office, and the Microsoft Access database management system is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

FreeBSD Largepage Privilege Escalation

The vulnerability of the implementation of shared memory objects in FreeBSD’s large-page cores relates to the use of memory after it has been freed. Exploiting this vulnerability can allow an attacker to enhance their privileges...

FreeBSD Largepage Privilege Escalation

The vulnerability of the implementation of shared memory objects in FreeBSD’s large-page cores is related to insufficient checking of input data. Exploiting this vulnerability can allow an attacker to enhance their privileges...

SveService Component Code Execution

The vulnerability of the SveService component in the Android operating system of Samsung mobile devices is related to writing beyond the buffer boundaries of memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

Loki Query Engine DoS

The vulnerability of the Query Engine component of the Loki logging aggregation and storage system is related to the unlimited distribution of resources. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

VK WorkMail URL Redirection Phishing

The vulnerability in the validation of URL addresses of the corporate email service VK WorkMail involves redirecting URLs to an unreliable website. Exploiting this vulnerability allows a malicious actor to carry out phishing attacks remotely...

VK WorkMail API-endpoint Command Execution

The vulnerability of the API-endpoint component of VK WorkMail’s corporate email service is related to the lack of measures taken to neutralize special elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

VK WorkMail Blind SSRF

The vulnerability of corporate email for VK WorkMail is related to insufficient validation of requests on the server side when integration with document editing services is enabled. Exploiting this vulnerability could allow a malicious actor to execute a Blind SSRF attack remotely...

Neo4j Cypher MCP Server Code Execution

The vulnerability of the Neo4j Cypher MCP server is related to a data source verification error. Exploiting this vulnerability allows an attacker to bypass existing security restrictions and execute arbitrary code...

Go OpenTelemetry Memory Exhaustion

The vulnerability of adding additional tools and integration libraries for the Go language with OpenTelemetry is related to uncontrolled memory allocation. Exploiting this vulnerability can allow a remote attacker to cause memory exhaustion...

Openvswitch Kernel Module Buffer Overflow DoS

The vulnerability of the queuegsopackets and queueuserspacepacket functions in the openvswitch kernel module of Linux operating systems is related to a single-byte offset error. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

Linux kernel Resource Release DoS

The vulnerability of the Linux operating system’s kernel is related to errors during resource release. Exploiting this vulnerability can allow an attacker to cause service failures...

Windows GDI+ Code Execution

The vulnerability of the Windows GDI+ interface on Windows operating systems is related to integer overflow. Exploiting this vulnerability allows a remote attacker to execute arbitrary code by sending a specially crafted file...

fs/ntfs3 Component DoS

The vulnerability of the fs/ntfs3 component in the Linux operating system is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause a service failure...

Python interpreter Path Traversal

The vulnerability of the Python programming language interpreter is related to deficiencies in pathname restrictions for directories. Exploiting this vulnerability can allow attackers to compromise data integrity...

Windows (Positives) (No. 1 from 2026.08.11 10:13:23)

...

Firewalld Improper Execution Permissions Data Compromise

The vulnerability of the Firewalld firewall configuration program is related to improper execution permissions. Exploiting this vulnerability could allow an attacker to compromise data integrity...

Underscore _flatten _isEqual DoS

The vulnerability of the flatten and isEqual functions in the JavaScript library for working with arrays, Underscore, is related to the allocation of unlimited memory. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

Little CMS CubeSize Function Confidential Data Access DoS

The vulnerability of the CubeSize function in the cmslut.c component of the Little CMS color management library is related to the improper execution of certain operations. Exploiting this vulnerability could allow an attacker to access confidential data and also cause service interruptions...

BusyBox data_extract_all.c DoS

The vulnerability of the dataextractall.c component of the UNIX utility set in BusyBox is related to external control via a filename or file path. Exploiting this vulnerability can allow an attacker to cause a service failure...

Systemd Service Privilege Management

The vulnerability in the Systemd service initialization and management subsystem is related to insecure handling of privileges. Exploiting this vulnerability could allow an attacker to cause a service failure...