Win32k.sys Privilege Escalation

The vulnerability of the Win32k.sys component of the Windows operating system is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...

Windows HTTP/2 DoS

The vulnerability of the HTTP/2 network protocol implementation in Windows operating systems is related to the unlimited distribution of resources. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

Windows Clipboard Server Privilege Escalation

The vulnerability of the clipboard management function in the terminal session of Windows Clipboard Server operating systems is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow attackers to increase their privileges...

Active Directory Federation Server DoS

The vulnerability of the Active Directory Federation Server operating system on Windows is related to the execution of a loop with an unavailable exit condition. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

DirectX Graphics Kernel Privilege Escalation

The vulnerability of the DirectX Graphics Kernel component in Windows operating systems is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...

Windows TCP/IP Privilege Escalation

The vulnerability of the TCP/IP protocol implementation in Windows operating systems is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...

DHCP DoS

The vulnerability of DHCP servers for Windows operating systems is related to uncontrolled resource consumption. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

Netty Decompression Bypass DoS

The vulnerability of the decompression mechanism used by frameworks for developing network applications, servers, and protocol clients related to Netty involves an uncontrolled consumption of resources. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

netty-codec-http Arbitrary HTTP Request Injection

The vulnerability of the netty-codec-http module in the framework for developing network applications, servers, and clients using the Netty protocol is related to deficiencies in HTTP request processing. Exploiting this vulnerability allows a malicious actor to inject arbitrary HTTP requests...

Vim Code Execution

The vulnerability of the Vim text editor is related to improper handling of code generation. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

Vim Command Injection

The vulnerability of the Vim text editor is related to the lack of measures taken to neutralize special elements used in operating system commands. Exploiting this vulnerability allows an attacker to execute arbitrary commands...

USB Hub Driver Windows Privilege Escalation

The vulnerability of the USB Hub Driver for Windows operating systems is related to the use of an untrusted pointer. Exploiting this vulnerability can allow attackers to gain increased privileges...

Remote Desktop Client Code Execution

The vulnerability of the Remote Desktop Client for Windows operating systems relates to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

USB Print Driver Privilege Escalation

The vulnerability of the USB Print Driver driver for Windows operating systems is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...

Qualcomm Embedded Software Disclosure

The vulnerability of embedded software in Qualcomm products stems from the competitive situation. Exploiting this vulnerability can allow a hacker to disclose protected information...

Windows WLAN Host system Data Compromise

The vulnerability of the Windows WLAN Host microprogramming software in embedded Qualcomm devices relates to reading beyond the buffer boundaries. Exploiting this vulnerability can allow attackers to compromise the confidentiality, integrity, and accessibility of protected information...

Qualcomm Heap Buffer Overflow

The vulnerability of the BTM Action Frame Handler component in Qualcomm’s embedded software lies in the fact that the operation data is written outside of the memory buffer. Exploiting this vulnerability allows a remote attacker to read and manipulate the data...

Windows Microsoft PC Manager Symbolic Link Privilege Escalation

The vulnerability of the Windows Microsoft PC Manager software for maintenance, cleaning, and security operations is related to an incorrect definition of symbolic links before accessing files. Exploiting this vulnerability can allow attackers to increase their privileges...

Adobe After Effects Heap Buffer Overflow

The vulnerability of Adobe After Effects’ video and dynamic image editing software relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

Adobe After Effects Heap Buffer Overflow

The vulnerability of Adobe After Effects’ video and dynamic image editing software relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

Routing and Remote Access Service Privilege Escalation

The vulnerability of the Routing and Remote Access Service RRAS in Windows operating systems is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to increase their privileges...

SyncFabric Privilege Escalation

The vulnerability of the SyncFabric cloud service for synchronizing Microsoft Entra Provisioning Services is related to insufficient validation of requests on the server side. Exploiting this vulnerability can allow a malicious actor to increase their privileges remotely...

LibreDWG Heap Buffer Overflow DoS

The vulnerability of the dwgbmp function in the src/dwg.c file of the LibreDWG library, which handles DWG format files, is related to buffer overflow in dynamic memory. Exploiting this vulnerability could allow an attacker to cause a system failure...

Graphic Editor Adobe Creative Cloud Desktop Application Privilege Escalation

The vulnerability of the Adobe Creative Cloud Desktop Application is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to gain increased privileges...

cURL Certificate Validation Unauthorized Access

The vulnerability of the software for interacting with servers via cURL is related to errors in the certificate validation process. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

libcurl SSRF

The vulnerability of the libcurl library in software applications for interacting with servers via cURL is related to insufficient validation of requests at the server side. Exploiting this vulnerability allows a remote attacker to execute a SSRF attack...

libcurl Unauthorized Access

The vulnerability of the libcurl library in software applications for interacting with servers via cURL is related to the use of files and directories accessible from external parties. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to protected...

GnuTLS Buffer Overflow Info Disclosure

The vulnerability of the GnuTLS cryptographic library relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to disclose the protected information...

libcurl Unauthorized Access

The vulnerability of the libcurl library in software applications for interacting with servers via cURL is related to insufficient protection of operational data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

Microsoft Office Memory Use After Free

The vulnerability of Microsoft Office and Microsoft 365 Apps for Enterprise applications is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

Active Directory Domain Services Code Execution

The vulnerability of Active Directory Domain Services AD DS on Windows operating systems is related to overflow of a buffer in dynamic memory. Exploiting this vulnerability allows an attacker to execute arbitrary code by sending specially crafted data...

nfs-utils Privilege Escalation

The vulnerability of the nfs-utils package is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...

virtualenv Synchronization DoS

The vulnerability of the tool for creating isolated virtual environments in Python virtualenv is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to cause a service failure...

Netty QpackDecoder DoS

The vulnerability of the io.netty.handler.codec.http3.QpackDecoder component in the Netty framework, which is used for developing network applications, servers, and clients, involves an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service...

Windows SMB Information Disclosure

The vulnerability of the SMB network protocol implementation in Windows operating systems is related to the use of an uninitialized resource. Exploiting this vulnerability can allow a perpetrator to disclose sensitive information that is protected by security measures...

Python pip Code Execution

The vulnerability of the Python programming language’s pip module is related to the inclusion of functions from an unverified and uncontrolled area. Exploiting this vulnerability can allow a perpetrator to execute arbitrary code...

Apache HTTP Server mod_proxy_html DoS

The vulnerability of the modproxyhtml module in the Apache HTTP Server is related to buffer overflows in dynamic memory. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

Apache HTTP Server Buffer Overflow DoS

The vulnerability of the Apache HTTP Server is related to a violation of the buffer limit. Exploiting this vulnerability can allow an attacker, operating remotely, to cause service interruptions...

Apache HTTP Server modheaders mod_mime Data Compromise

The vulnerability of the modheaders and modmime modules in the Apache HTTP Server relates to reading data beyond the permitted range of memory. Exploiting this vulnerability can allow an attacker to compromise the confidentiality and integrity of the protected information...

Apache HTTP Server mod_proxy_ftp DoS

The vulnerability of the modproxyftp module in the Apache HTTP Server is related to the execution of a loop with an unreachable exit condition. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

Apache HTTP Server mod_xml2enc DoS

The vulnerability of the modxml2enc module in the Apache HTTP Server is related to buffer overflows in dynamic memory. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

Apache HTTP Server mod_lda Module RCE

The vulnerability of the modlda module in the Apache HTTP Server is related to the ability to utilize memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code or cause a denial-of-service attack...

Apache HTTP Server OCSP DoS

The vulnerability of the OCSP protocol implementation in the Apache HTTP Server is related to reading data beyond the permitted range of memory. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

Python base64 decode Data Compromise

The vulnerability of the base64.b64decode function in the Python programming language interpreter CPython is related to insufficient validation of data authenticity. Exploiting this vulnerability could allow an attacker to compromise the integrity of protected information...

Linux IPv6 DoS

The vulnerability of the net/ipv6/ip6output.c component in the Linux operating system is related to errors in processing parameter lengths. Exploiting this vulnerability can allow an attacker to cause a service failure...

GitHub Copilot for JetBrains Code Execution

The vulnerability of GitHub Copilot for Jetbrains relates to incorrect restrictions on file names and other resources. Exploiting this vulnerability could allow a hacker to execute arbitrary code...

SonicWall SMA SRF

The vulnerability of the Appliance Work Place microprogramming software for SonicWall’s SMA 1000 series network interface controllers is related to insufficient checking of requests on the server side. Exploiting this vulnerability can allow a remote attacker to execute an SSRF attack...

WinRAR RAR5 Executable Code

The vulnerability of the RAR5 file archiver WinRAR’s volume recovery processing system, as well as the UnRAR decompression tool, is related to unvalidated array indexing. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

Moby Container Isolation DoS

The vulnerability of the Moby container isolation system creation software is related to synchronization errors when using a shared resource “Race Conditions”. Exploiting this vulnerability can allow an attacker to cause a service failure...

NTFS File System Code Execution

The vulnerability of the NTFS file system in Windows operating systems is related to integer overflow. Exploiting this vulnerability can allow an attacker to execute arbitrary code...