Resilient File System Code Execution

The vulnerability of the Resilient File System ReFS in Windows operating systems is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

Microsoft Office Buffer Overflow Code Execution

The vulnerability of Microsoft Office packages is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Microsoft Dynamics NAV Privilege Escalation

The vulnerability of the integrated Microsoft Dynamics NAV enterprise management system is related to incorrect restrictions on the path name to the restricted access catalog. Exploiting this vulnerability can allow an attacker to increase their privileges remotely...

Microsoft SharePoint Server Privilege Escalation

The vulnerability of the Microsoft SharePoint Server Subscription Edition web platform for collaborative work and document management is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to increase their privileges remotely...

Microsoft Visual Studio Code Editor Code Execution

The vulnerability of Microsoft Visual Studio Code’s editor is related to incorrect encoding or escaping of output data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

Microsoft Visual Studio Code Editor Security Decisioning

The vulnerability of Microsoft Visual Studio Code’s editor is related to the use of unreliable input data when making security decisions. Exploiting this vulnerability can allow a malicious actor to bypass security restrictions remotely...

Azure Event Grid Broker Spoofing

The vulnerability of Azure Event Grid brokers is related to deficiencies in the authentication process. Exploiting this vulnerability could allow attackers to carry out spoofing attacks remotely...

Linux scmi_power_name_get() function Heap Buffer Overflow

The vulnerability of the scmipowernameget function in the drivers/firmware/armscmi/power.c file of the Linux kernel is related to access control deficiencies. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of protected...

Linux cs42l43_mcu_load_firmware Buffer Overflow

The vulnerability of the cs42l43mculoadfirmware function in the drivers/mfd/cs42l43.c file of the Linux kernel is related to insufficient resource control during its existence. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of...

Linux Heap Buffer Overflow DoS

The vulnerability of the imspcugetcdcuniondesc function in the drivers/input/misc/ims-pcu.c component of the Linux operating system is related to the improper implementation of thread management. Exploiting this vulnerability could allow an attacker to cause a service failure...

Microsoft SharePoint Server Privilege Escalation

The vulnerability of the Microsoft SharePoint Server Subscription Edition web platform for collaborative work and document management is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor to increase their privileges remotely...

FreeRDP SCARD_IOCTL Disconnection

The vulnerabilities of the SCARDIOCTLDISCONNECT and SCARDIOCTL TRANSMIT functions in the RDP client FreeRDP are related to synchronization errors when using a shared resource. Exploiting these vulnerabilities can allow an attacker to cause service failures. source-iocs-preserved...

freerdp-proxy RDP DoS

The vulnerability of the DynvcTrackerHandleCreateBack function in the freerdp-proxy RDP client FreeRDP component is related to reading data beyond the allowed range of memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux drivers/char/tlclk.c Heap Buffer Overflow DoS

The vulnerability of the tlclkcleanup function in the drivers/char/tlclk.c component of the Linux operating system is related to the improper implementation of the control flow. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility o...

Microsoft SQL Server Privilege Escalation

The vulnerability of the Microsoft SQL Server database management system is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow an attacker to increase their privileges remotely...

Skia Graphic Library DoS

The vulnerability of the Skia graphic library used by Google Chrome and Microsoft Edge is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created HTML page...

Microsoft Partner Center Privilege Escalation

The vulnerability of the Microsoft Partner Center cloud platform is related to errors in the certificate validation process. Exploiting this vulnerability could allow an attacker to gain increased privileges remotely...

Azure API Center Information Disclosure

The vulnerability of the cloud service for centralized tracking, detection, and management of all Azure API Center programming interfaces is related to insufficient protection of operational data. Exploiting this vulnerability could allow a malicious actor to disclose sensitive information...

AI-based Tools Cross-Site Request Falsification Privilege Escalation

The vulnerability of the AI-based tool for automatic analysis of root causes and effective response to incidents in Azure SRE Agents is related to the manipulation of cross-site requests. Exploiting this vulnerability can allow attackers who operate remotely to enhance their privileges...

Linux Kernel Heap Buffer Overflow DoS

The vulnerability of the maarreswalk function in the arch/mips/mm/init.c component of the Linux operating system’s kernel is related to insufficient resource control during its existence. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

Linux kernel module daemonize() Buffer Overflow

The vulnerability of the daemonize function in the tools/power/x86/intel-speed-select/isst-daemon.c component of the Linux kernel is related to insufficient resource control during its existence. Exploiting this vulnerability could allow an attacker to compromise the integrity and accessibility o...

Navigation section DoS

The vulnerability of the Navigation section in Microsoft Edge and Google Chrome browsers is related to insecure management of privileges. Exploiting this vulnerability can allow a malicious actor to cause service interruptions through a specially created HTML page...

Microsoft Visual Studio Code Editor Path Traversal

The vulnerability of Microsoft Visual Studio Code’s editor is related to incorrect path name restrictions for restricted access directories. Exploiting this vulnerability could allow a malicious actor to disclose protected information remotely...

Windows Security App Memory Use After Free Privilege Escalation

The vulnerability of the Windows Security App antivirus program is related to the use of memory after it is released. Exploiting this vulnerability can allow an attacker to increase their privileges...

Microsoft Bookings Authentication Bypass Privilege Escalation

The vulnerability of the Microsoft Bookings application for scheduling, online customer records, and meetings involves exploiting authentication using a user-controlled key. Exploiting this vulnerability could allow an attacker to increase their privileges remotely...

Linux kernel Heap Buffer Overflow DoS

The vulnerability of the fbconnewmodelist function in the drivers/video/fbdev/core/fbcon.c file of the Linux kernel is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

batadv_gw_out_of_range() Function Heap Buffer Overflow

The vulnerability of the batadvgwoutofrange function in the net/batman-adv/gatewayclient.c component of the Linux kernel is related to the pointer being dereferenced after its expiration. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

Linux kernel Heap Buffer Overflow DoS

The vulnerability of the sevioctldopdhexport function in the drivers/crypto/ccp/sev-dev.c component of the Linux kernel is related to insufficient resource management during its existence. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux kernel Heap Buffer Overflow DoS

The vulnerability of the vmuqueryblocks function in the drivers/mtd/maps/vmu-flash.c component of the Linux kernel is related to pointer dereferencing. Exploiting this vulnerability could allow an attacker to cause a system failure...

Microsoft SharePoint Server Subscription Edition Spear Phishing

The vulnerability in the Microsoft SharePoint Server Subscription Edition web platform for collaborative work and document management is related to the lack of protective measures for the website structure. Exploiting this vulnerability allows a malicious actor to carry out spear-phishing attacks...

Google Chrome Microsoft Edge DoS

The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers is related to insecure management of privileges. Exploiting this vulnerability can allow a malicious actor to cause service failures...

Linux kernel Heap Buffer Overflow DoS

The vulnerability of the amdgpuamdkfdgpuvmfreememoryofgpu function in the drivers/gpu/drm/amd/amdgpu/amdgpuamdkfdgpuvm.c file of the Linux kernel is related to the implementation of incorrect flow control. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

Google Chrome Microsoft Edge DoS

The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers is related to the simultaneous execution using a shared resource with incorrect synchronization. Exploiting this vulnerability can allow an attacker to cause service interruptions through a specially...

Linux afs_get_tree Heap Buffer Overflow DoS

The vulnerability of the afsgettree function in the fs/afs/super.c component of the Linux operating system is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux sch_fq_codel Buffer Overflow DoS

The vulnerability of the net/sched/schfqcodel.c component in the Linux operating system is related to the implementation of an incorrect control flow. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality, integrity, and accessibility of the protected...

Navigation Section Microsoft Edge Google Chrome Data Compromise

The vulnerability of the Navigation section in Microsoft Edge and Google Chrome is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to compromise the integrity of protected information through a specially created HTML page...

Google Chrome Microsoft Edge DoS

The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers is related to type conversion errors. Exploiting this vulnerability can allow a malicious actor to cause service interruptions through a specially crafted HTML page...

Skia Graphic Library Access Information Disclosure

The vulnerability of the Skia graphic library used by Google Chrome and Microsoft Edge is related to a lack of mechanisms for verifying the source of the data. Exploiting this vulnerability could allow an attacker to gain access to protected information through a specially created HTML page...

Google Chrome Microsoft Edge DoS

The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers is related to the simultaneous execution using a shared resource with incorrect synchronization. Exploiting this vulnerability can allow an attacker to cause service interruptions through a specially...

Navigation section Microsoft Edge Google Chrome Protected Information Access

The vulnerability of the Navigation section in Microsoft Edge and Google Chrome is related to insufficient protection of service data. Exploiting this vulnerability can allow a malicious actor to gain access to protected information through a specially created HTML page...

Skia Graphic Library DoS

The vulnerability of the Skia graphic library used by Google Chrome and Microsoft Edge is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created HTML page...

Google Chrome Microsoft Edge DoS

The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers relates to the use of memory after it is freed. Exploiting this vulnerability can allow a malicious actor to cause service interruptions through a specially created HTML page...

Google Chrome Microsoft Edge DoS

The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers relates to the use of memory after it is freed. Exploiting this vulnerability can allow a malicious actor to cause service interruptions through a specially created HTML page...

Skia Graphic Library DoS

The vulnerability of the Skia graphic library in Google Chrome and Microsoft Edge relates to writing beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to cause a service failure through a specially crafted HTML page...

Google Chrome Microsoft Edge DoS

The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers is related to type conversion errors. Exploiting this vulnerability can allow a malicious actor to cause service interruptions through a specially crafted HTML page...

Google Chrome Microsoft Edge DoS

The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers is related to the use of uninitialized resources. Exploiting this vulnerability can allow a malicious actor to cause service interruptions through a specially created HTML page...

Linux IPv4 Kernel skbchecksum_help() Unauthenticated Access

The vulnerability of the skbchecksumhelp function in the IPv4 protocol implementation of the Linux operating system is related to writing beyond the valid memory range. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

Linux kernel MSI DoS

The vulnerability of the msixcapabilityinit function in the drivers/pci/msi/msi.c component of the Linux kernel is related to insufficient resource control during its existence. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux kernel Distributed ARP Table Buffer Overflow DoS

The vulnerability of the batadvdatsnoopincomingdhcpack function in the net/batman-adv/distributed-arp-table.c component of the Linux kernel is related to the improper implementation of control flow. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity...

Linux Distributed ARP Table Buffer Overflow DoS

The vulnerability of the net/batman-adv/distributed-arp-table.c component in the Linux operating system is related to the operation of moving beyond buffer boundaries. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality and accessibility of protected...