98239 matches found
input-remapper.service Injection
The vulnerability of the input-remapper.service service, a device management tool for input devices, is related to the lack of authentication. Exploiting this vulnerability allows an attacker to switch the service to a specified configuration directory and activate the mechanism for injecting...
NLTK Bypass Arbitrary File Read Write
The vulnerability of the application programming interface of the Natural Language Processing library NLTK is related to improper external management of file names or file paths. Exploiting this vulnerability can allow an attacker to bypass existing security mechanisms and gain read-write access ...
Wazuh update_master_files_in_worker RCE
The vulnerability of the updatemasterfilesinworker function on the platform for security monitoring and threat detection by Wazuh is related to an incorrect restriction on the path to the directory. Exploiting this vulnerability could allow a malicious actor to elevate their privileges to root an...
gix-pack apply Heap Overflow DoS
The vulnerability of the apply function in the gix-pack library is related to an error in handling exceptional states. Exploiting this vulnerability could allow a remote attacker to cause service failures...
Avast Sandbox Privilege Escalation
The vulnerability of the Avast Sandbox component of the Avast antivirus protection software is related to insecure management of privileges. Exploiting this vulnerability can allow a hacker to elevate their privileges to the SYSTEM level...
Cross Device Service Privilege Escalation
The vulnerability of the Cross Device Service for Windows operating systems is related to deficiencies in access control when processing the enabled parameter of the SeImpersonatePrivilege service token, as a result of loading the malicious CrossDeviceStreaming.Source.dll library. Exploiting this...
Device Health Attestation Code Execution
The vulnerability of the Device Health Attestation DHA status check function in Windows operating systems is related to a numerical overflow condition. Exploiting this vulnerability could allow an attacker who operates remotely to execute arbitrary code...
Windows Installer Privilege Escalation
The vulnerability of Windows operating system installers is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to increase their privileges...
Windows Telephony Service Privilege Escalation
The vulnerability of the Windows operating system’s Telephony Service is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to increase their privileges...
Device Health Attestation Code Execution
The vulnerability of the Device Health Attestation DHA status check function in Windows operating systems is related to synchronization errors when using a shared resource. Exploiting this vulnerability allows an attacker who operates remotely to execute arbitrary code...
iSCSI Target Service Code Execution
The vulnerability of the iSCSI Target Service for Windows operating systems is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
Remote Access API Privilege Escalation
The vulnerability of the Remote Access API interface for Windows operating systems is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow an attacker to increase their privileges...
Windows DNS Code Execution
The vulnerability of DNS servers on Windows operating systems relates to the execution of operations beyond the buffer in memory. Exploitation of this vulnerability can allow a remote attacker to execute arbitrary code...
Windows DNS Code Execution
The vulnerability of DNS servers for Windows operating systems is related to synchronization errors when using a shared resource. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
Active Directory Certificate Services Code Execution
The vulnerability of the Active Directory Certificate Services AD CS service, which manages distribution and usage of certificates on Windows operating systems, is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to execute arbitrary code...
Windows DNS Code Execution
The vulnerability of DNS servers on Windows operating systems relates to the execution of operations beyond the buffer in memory. Exploitation of this vulnerability can allow a remote attacker to execute arbitrary code...
Reliable Multicast Transport Driver Code Execution
The vulnerability of the Reliable Multicast Transport Driver RMCAST for Windows operating systems is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
Desktop Window Managers Privilege Escalation
The vulnerability of desktop window managers in Windows operating systems relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...
Ext4 Heap Buffer Overflow DoS
The vulnerability of the ext4mbscangroups function in the fs/ext4/mballoc.c module of the Ext4 file system in the Linux operating system is related to the execution of a loop with an unreachable exit condition an “infinite loop”. Exploitation of this vulnerability could allow an attacker to...
PDFium DoS
The vulnerability of the PDFium component in Google Chrome and Microsoft Edge browsers is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to cause a service failure through the use of a specially created PDF file...
Codecs Component Confidential Data Access
The vulnerability of the Codecs components in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to gain access to confidential data through a specially created HTML page...
Extensions Component Confidential Data Access
The vulnerability of the Extensions component in Google Chrome and Microsoft Edge relates to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow an attacker to gain access to confidential data...
MHTML Component Confidential Data Access
The vulnerability of the MHTML component in Google Chrome and Microsoft Edge is related to a lack of mechanisms for verifying the source of the data. Exploiting this vulnerability can allow an attacker to access confidential data through a specially created HTML page...
GPU components DoS
The vulnerability of the GPU components in Google Chrome and Microsoft Edge browsers is related to buffer overflows in the stack. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created HTML page...
Media Component DoS
The vulnerability of the Media component in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created HTML page...
Viz Component DoS
The vulnerability of the Viz component in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to cause a service failure through a specially created HTML page...
Dawn Component DoS
The vulnerability of the Dawn component in Google Chrome and Microsoft Edge relates to reading data beyond the allowed buffer size. Exploiting this vulnerability could allow a malicious actor to cause service interruptions through a specially created HTML page...
WebRTC DoS
The vulnerability of the WebRTC component in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to cause a service failure through a specially created HTML page...
Media Component DoS
The vulnerability of the Media component in Google Chrome and Microsoft Edge relates to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause service interruptions through a specially created HTML page...
Actor Component DoS
The vulnerability of the Actor component in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability can allow a malicious actor to cause service interruptions through a specially created HTML page...
AI assistant Gemini DoS
The vulnerability of the AI assistant Gemini previously known as GLIC Gemini Live in Chrome in Google Chrome and Microsoft Edge is related to the use of memory after it is freed. Exploiting this vulnerability can allow a malicious actor to cause service interruptions through a specially created...
Media Component DoS
The vulnerability of the Media component in Google Chrome and Microsoft Edge is related to data type conversion errors. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created HTML page...
Codecs Component DoS
The vulnerability of the Codecs components in Google Chrome and Microsoft Edge relates to errors during initialization of variables. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created HTML page...
DevTools DoS
The vulnerability of the DevTools component in Google Chrome and Microsoft Edge is related to errors in handling HTTP requests. Exploiting this vulnerability can allow a malicious actor to cause service interruptions through a specially created HTML page...
InterestGroups Component DoS
The vulnerability of the InterestGroups component in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created HTML page...
Extensions Component DoS
The vulnerability of the Extensions component in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created HTML page...
Dawn Component Confidential Data Access
The vulnerability of the Dawn component in Google Chrome and Microsoft Edge is related to errors during initialization of variables. Exploiting this vulnerability can allow an attacker to gain access to confidential data through a specially created HTML page...
ANGLE DoS
The vulnerability of the ANGLE component in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially crafted HTML page...
WebRTC DoS
The vulnerability of the WebRTC component in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to cause a service failure through a specially created HTML page...
Dawn Component DoS
The vulnerability of the Dawn component in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created HTML page...
WebXR interfaces DoS
The vulnerability of the WebXR interfaces of Google Chrome and Microsoft Edge is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created HTML page...
Google Chrome Microsoft Edge DoS
The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers is related to errors in handling HTTP requests. Exploiting this vulnerability can allow a malicious actor to cause service interruptions through a specially created HTML page...
Google Chrome Microsoft Edge DoS
The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers relates to the use of memory after it is freed. Exploiting this vulnerability can allow a malicious actor to cause service interruptions through a specially created HTML page...
Animation Component Confidential Data Access
The vulnerability of the Animation component in Google Chrome and Microsoft Edge relates to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain access to confidential data through a specially created HTML page...
Skia Graphic Library Confidential Data Access
The vulnerability of the Skia graphic library in Google Chrome and Microsoft Edge relates to operations that go beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to gain access to confidential data through a specially created HTML page...
TabStrip Component DoS
The vulnerability of the TabStrip component in Google Chrome and Microsoft Edge relates to the execution of operations beyond the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause a service failure through a specially created HTML page...
Media component Confidential Data Access
The vulnerability of the Media component in Google Chrome and Microsoft Edge browsers is related to reading data beyond the allowed buffer size. Exploiting this vulnerability can allow an attacker to access confidential data...
Extensions Component Data Compromise
The vulnerability of the Extensions component in Google Chrome and Microsoft Edge is related to the improper assignment of permissions for critical resources. Exploiting this vulnerability can allow a remote attacker to compromise data integrity...
WebAppInstalls Component Confidential Data Access
The vulnerability of the WebAppInstalls component in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain access to confidential data through a specially created HTML page...
Codecs Component DoS
The vulnerability of the Codecs components in Google Chrome and Microsoft Edge relates to writing beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker to cause a service failure using a specially created video file...