Linux kernel fs/crypto/inline_crypt Heap Buffer Overflow DoS

The vulnerability of the bhgetinodeandlblknum function in the fs/crypto/inlinecrypt.c file of the Linux kernel file system relates to the distribution of resources without any restrictions or regulations. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality,...

Win32k.sys Privilege Escalation

The vulnerability of the Win32k.sys component in Windows operating systems is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to gain increased privileges...

Linux kernel Memory Management Heap Buffer Overflow DoS

The vulnerability of the addstackrecordtolist function in the mm/pageowner.c file of the Linux kernel’s memory management subsystem is related to the execution of a loop with an unreachable exit condition „Infinite loop“. Exploiting this vulnerability could allow an attacker to compromise the...

cirrusfb_check_mclk Heap Buffer Overflow DoS

The vulnerability of the cirrusfbcheckmclk function in the drivers/video/fbdev/cirrusfb.c driver for supporting Core Image Buffer devices in the Linux operating system is related to insufficient validation of input data during division by zero. Exploiting this vulnerability could allow an attacke...

Smb subsystem Heap Buffer Overflow DoS

The vulnerability of the smblazyparentleasebreakclose function in the fs/smb/server/oplock.c module of the Smb subsystem of the Linux operating system is related to the reutilization of previously freed memory due to concurrent access to resources. Exploiting this vulnerability could allow a remo...

Linux kernel Bluetooth L2CAP Buffer Overflow DoS

The vulnerability of the functions l2capregisteruser and l2capunregisteruser in the net/bluetooth/l2capcore.c module of the Linux kernel’s Bluetooth subsystem is related to synchronization errors when using shared resources. Exploiting this vulnerability could allow a attacker to cause service...

Linux Kernel MPTCP Subflow Init Buffer Overflow

The vulnerability of the mptcpsubflowinit function in the net/mptcp/protocol.c module of the Linux kernel relates to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected...

Linux seg6_build_state Heap Buffer Overflow DoS

The vulnerability of the seg6buildstate function in the net/ipv6/seg6iptunnel.c module of the Linux kernel is related to synchronization errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

Linux kernel Loopback Check Format

The vulnerability of the loopbackcheckformat function in the sound/drivers/aloop.c module of the Linux kernel’s audio subsystem is related to the repeated use of previously freed memory due to concurrent access to resources. Exploiting this vulnerability could allow an attacker to gain access to...

me4000_xilinx_download Heap Buffer Overflow DoS

The vulnerability of the me4000xilinxdownload function in the drivers/comedi/drivers/me4000.c module, which supports devices for Linux operating system data collection, is related to the copying of buffers without checking the size of the input data a classic buffer overflow attack. Exploiting th...

Microsoft Excel Buffer Overflow

The vulnerability of Microsoft Excel, Microsoft Office, Microsoft 365 Apps for Enterprise, and Microsoft Office Online Server programs is related to buffer overflow in the stack. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

DHCP Server Windows Code Execution

The vulnerability of DHCP servers for Windows operating systems is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Resilient File System Code Execution

The vulnerability of the Resilient File System ReFS in Windows operating systems is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

Secure Boot Bypass

The vulnerability of the Secure Boot implementation for Windows operating systems is related to errors in the implementation of security checks for standard elements. Exploiting this vulnerability can allow attackers to circumvent security restrictions...

Windows Network Connections Service Privilege Escalation

The vulnerability of the Windows Network Connections Service on Windows operating systems is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...

Oracle WebCenter Enterprise Capture Client Bundle Full Control

The vulnerability of the Client Bundle component of the Oracle WebCenter Enterprise Capture software platform for automatic scanning, recognition, and digitization of documents is related to the lack of authentication for a critical function. Exploiting this vulnerability could allow an attacker...

Oracle WebCenter Content Full Control

The vulnerability of the Content Server component of the Oracle WebCenter Content user interaction platform relates to the absence of authentication for a critical function. Exploiting this vulnerability could allow an attacker to gain full control over the application using the HTTP network...

Oracle WebCenter Enterprise Capture Client Bundle Full Control

The vulnerability of the Client Bundle component of the Oracle WebCenter Enterprise Capture software platform for automatic scanning, recognition, and digitization of documents is related to access control errors. Exploiting this vulnerability could allow an attacker to gain full control over the...

Microsoft Word SharePoint Server Office 365 Apps for Enterprise Disclosure

The vulnerability of Microsoft SharePoint Server and SharePoint Enterprise Server packages is related to improper validation of the specified type of input data. Exploiting this vulnerability can allow an attacker to disclose protected information...

Microsoft SharePoint Server Structure Protection Failure

The vulnerability of Microsoft SharePoint Server and SharePoint Enterprise Server lies in the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform spear-phishing attacks remotely...

PT Application Inspector Path Traversal

The vulnerability of the PT Application Inspector’s software for detecting vulnerabilities and errors is related to incorrect restrictions on the path to the catalog. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

Linux usbnet_disconnect() DoS

The vulnerability of the usbnetdisconnect function in the drivers/net/usb/usbnet.c file of the Linux network adapter driver module is related to the use of a name with an incorrect reference. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux kernel DRI Heap Buffer Overflow DoS

The vulnerability of the i915vmapinww function in the drivers/gpu/drm/i915/i915vma.c file of the Direct Rendering Infrastructure DRI driver in the Linux operating system is related to the occurrence of mutual locking. Exploiting this vulnerability can allow an attacker to cause a service failure...

CloudAttestation Security Bypass

The vulnerability of the CloudAttestation security mechanism for operating systems such as macOS, iOS, iPadOS, tvOS, watchOS, and visionOS is related to insufficient validation of input data. Exploiting this vulnerability could allow attackers to bypass existing security mechanisms...

FAB Authentication Manager Apache Airflow Privilege Escalation

The vulnerability of the authentication manager of the Apache Airflow network software, Flask App Builder, is related to errors in verifying the cryptographic signature. Exploiting this vulnerability can allow an attacker to increase their privileges and gain unauthorized access to protected...

libvips Code Execution

The vulnerability of the libvips image processing library, a component of the Active Storage framework in the Ruby on Rails software platform, relates to insecure resource initialization. Exploiting this vulnerability could allow an attacker to execute arbitrary code remotely and gain unauthorize...

Linux Kernel Heap Buffer Overflow DoS

The vulnerability of the buildpolexpire function in the net/xfrm/xfrmuser.c module, which is part of the networking functions in the Linux kernel, relates to the use of uninitialized resources. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux Kernel RxRPC DoS

The vulnerability of the rxrpcserverkeyring function in the net/rxrpc/serverkey.c module, which supports RxRPC session sockets in Linux operating systems, is related to errors during the update of the reference counter. Exploiting this vulnerability could allow an attacker to cause a service...

Linux kernel I2C driver Heap Buffer Overflow DoS

The vulnerability of the i2cdevattachadapter function in the drivers/i2c/i2c-dev.c file of the Linux I2C driver module is related to the pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux kernel x25_queue_rx_frame Heap Buffer Overflow DoS

The vulnerability of the x25queuerxframe function in the net/x25/x25in.c module, which is part of the Linux kernel’s networking functions, involves the multiple release of the same resource or descriptor. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality,...

Linux kernel Bridge Loop Avoidance DoS

The vulnerability of the functions batadvblaclaimdumpentry and batadvblabackbonedump in the net/batman-adv/bridgeloopavoidance.c module of the Linux kernel is related to the use of pointers. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux kernel Heap Buffer Overflow DoS

The vulnerability of the ptiommux8664unmappages function in the drivers/iommu/genericpt/iommupt.h header of the Linux kernel is related to incomplete cleanup of temporary or auxiliary resources. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, an...

ADFS DoS

The vulnerability of the Active Directory Federation Services ADFS for Windows operating systems is related to the execution of a loop with an unavailable exit condition. Exploiting this vulnerability could allow a malicious actor to cause service failures...

DirectX Graphics Kernel Privilege Escalation

The vulnerability of the DirectX Graphics Kernel component in Windows operating systems is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...

Windows Overlay File System Filter Driver Privilege Escalation

The vulnerability of the Windows Overlay File System Filter Driver WOF in the Windows operating system is related to a potential overflow condition. Exploiting this vulnerability could allow an attacker to gain increased privileges...

Windows Kernel Information Disclosure

The vulnerability of the Windows operating system’s kernel is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to disclose sensitive information that is protected by security measures...

Windows kernel Privilege Escalation

The vulnerability of Windows operating system kernels is related to the use of memory after it has been freed. Exploiting this vulnerability can allow an attacker to increase their privileges...

Microsoft Office SharePoint Server Information Disclosure

The vulnerability of Microsoft Office packages, Microsoft SharePoint Server, and Microsoft 365 Apps for Enterprise involves reading data beyond the allowed range in memory. Exploiting this vulnerability can allow an attacker to disclose sensitive information...

Microsoft SharePoint Server External Path Management Spear Phishing

The vulnerability of Microsoft SharePoint Server and SharePoint Enterprise Server lies in improper external management of file names or file paths. Exploiting this vulnerability allows a malicious actor to perform spear-phishing attacks remotely...

PC ViPNet Automatic Update Relative Path Data Compromise

The vulnerability of the automatic update mechanism of PC ViPNet Administrator is related to deficiencies in the processing of relative paths. Exploiting this vulnerability can allow a perpetrator operating from a neighboring trusted network to compromise the integrity of the operating environmen...

Linux NFS Client Buffer Overflow DoS

The vulnerability of the nfsmatchclient function in the fs/nfs/client.c module, which is part of the NFS client support in Linux kernel, is related to authentication errors. Exploiting this vulnerability could allow an attacker to cause service failures...

LoongArch Linux BPF JIT Unauthorized Access

The vulnerability of the archpreparebpftrampoline function in the arch/loongarch/net/bpfjit.c module of the LoongArch architecture support for the Linux operating system involves exposing confidential information. Exploiting this vulnerability could allow an attacker, acting remotely, to gain...

RISCV Linux Kernel Walk Stackframe Heap Buffer Overflow DoS

The vulnerability of the walkstackframe function in the arch/riscv/kernel/stacktrace.c file, a subsystem for module management on the RISCV architecture of the Linux operating system’s kernel, relates to reading beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker,...

cJSON ApplyPatches DoS

The vulnerabilities of the functions cJSONUtilsApplyPatches and cJSONUtilsApplyPatchesCaseSensitive in the C language JSON object handling library are related to uncontrolled recursion. Exploiting these vulnerabilities could allow an attacker to cause service failures...

MediaWiki unserialize RCE

The vulnerability of the unserialize function in the MediaWiki software, which is used to implement the hypertext environment, is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

Linux PowerPC Change Page Attribute DoS

The vulnerability of the changepageattr function in the arch/powerpc/mm/pageattr.c module of the PowerPC platform in the Linux operating system is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

Linux kernel s32ton() Heap Buffer Overflow

The vulnerability of the s32ton function in the drivers/hid/hid-core.c file of the Linux kernel’s input device subsystem driver is related to an incorrect bitwise shift of a integer value. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

Linux kernel amd.c init_amd_zen1 function Privilege Escalation

The vulnerability of the initamdzen1 function in the arch/x86/kernel/cpu/amd.c module, which is part of the Linux operating system’s kernel support for x86 platforms, is related to incorrect inter-process boundary removal of critical data. Exploiting this vulnerability could allow an attacker to...

Linux kernel Memory Management Buffer Overflow DoS

The vulnerability of the foliounmapinvalidate function in the mm/truncate.c module of the Linux kernel’s memory management subsystem is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to trigger a service failure...

SMC Protocol Heap Buffer Overflow DoS

The vulnerability of the smctcpsynrecvsock function in the net/smc/afsmc.c module of the SMC protocol family implementation in Linux’s kernel relates to the reutilization of previously freed memory. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrit...