The vulnerability of the cirrusfb_check_mclk() function in the drivers/video/fbdev/cirrusfb.c driver module allows a hacker to cause a service failure in Linux-based operating systems with kernel-level video buffer devices.

The vulnerability of the cirrusfbcheckmclk function in the drivers/video/fbdev/cirrusfb.c driver for supporting Core Image Buffer devices in the Linux operating system is related to insufficient validation of input data during division by zero. Exploiting this vulnerability could allow an attacke...

The vulnerability of the build_report() function in the net/xfrm/xfrm_user.c module of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the buildreport function in the net/xfrm/xfrmuser.c module of the Linux kernel is related to the use of an uninitialized resource. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the s32ton() function in the drivers/hid/hid-core.c file of the Linux kernel’s user interface subsystem allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the s32ton function in the drivers/hid/hid-core.c file of the Linux kernel’s input device subsystem driver is related to an incorrect bitwise shift of a integer value. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

The vulnerability of the x25_queue_rx_frame() function in the net/x25/x25_in.c module, a part of the Linux kernel’s networking functions, allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the x25queuerxframe function in the net/x25/x25in.c module, which is part of the Linux kernel’s networking functions, involves the multiple release of the same resource or descriptor. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality,...

The vulnerabilities of the functions batadv_bla_claim_dump_entry() and batadv_bla_backbone_dump() in the net/batman-adv/bridge_loop_avoidance.c module of the Linux kernel allow a hacker to trigger a service failure.

The vulnerability of the functions batadvblaclaimdumpentry and batadvblabackbonedump in the net/batman-adv/bridgeloopavoidance.c module of the Linux kernel is related to the use of pointers. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the me4000_xilinx_download() function in the drivers/comedi/drivers/me4000.c module, which supports devices for collecting data from Linux operating systems. This vulnerability allows an attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the me4000xilinxdownload function in the drivers/comedi/drivers/me4000.c module, which supports devices for Linux operating system data collection, is related to the copying of buffers without checking the size of the input data a classic buffer overflow attack. Exploiting th...

The vulnerability of the Win32K component – GRFX in Windows operating systems – allows attackers to enhance their privileges.

The vulnerability of the Win32K component in Windows operating systems is related to buffer overflows in dynamic memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...

The vulnerability of the client in remote desktop clients for Windows operating systems allows a perpetrator to disclose protected information.

The vulnerability of the Remote Desktop Client for Windows operating systems relates to the execution of operations beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to disclose sensitive information...

The vulnerability of Microsoft SharePoint Server and SharePoint Enterprise Server lies in improper external management of file names or paths, allowing attackers to perform spear-phishing attacks.

The vulnerability of Microsoft SharePoint Server and SharePoint Enterprise Server lies in improper external management of file names or file paths. Exploiting this vulnerability allows a malicious actor to perform spear-phishing attacks remotely...

The vulnerability of the `bh_getinode_and_lblk_num()` function in the `fs/crypto/inline_crypt.c` file of the Linux kernel file system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the bhgetinodeandlblknum function in the fs/crypto/inlinecrypt.c file of the Linux kernel file system relates to the distribution of resources without any restrictions or regulations. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality,...

The vulnerability of the usbnet_disconnect() function in the drivers/net/usb/usbnet.c module of the Linux kernel’s network adapter driver allows a hacker to cause a service failure.

The vulnerability of the usbnetdisconnect function in the drivers/net/usb/usbnet.c file of the Linux network adapter driver module is related to the use of a name with an incorrect reference. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the build_polexpire() function in the net/xfrm/xfrm_user.c module, which is part of the networking functions of the Linux kernel, allows a hacker to cause a service failure.

The vulnerability of the buildpolexpire function in the net/xfrm/xfrmuser.c module, which is part of the networking functions in the Linux kernel, relates to the use of uninitialized resources. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the i2cdev_attach_adapter() function in the drivers/i2c/i2c-dev.c file of the Linux kernel’s I2C driver module allows a hacker to cause a service failure.

The vulnerability of the i2cdevattachadapter function in the drivers/i2c/i2c-dev.c file of the Linux I2C driver module is related to the pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the DirectX Graphics Kernel component in Windows operating systems allows attackers to exploit their privileges.

The vulnerability of the DirectX Graphics Kernel component in Windows operating systems is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerability of the Windows Overlay File System Filter Driver (WOF), a driver for the operating system Windows, allows a hacker to increase their privileges.

The vulnerability of the Windows Overlay File System Filter Driver WOF in the Windows operating system is related to a potential overflow condition. Exploiting this vulnerability could allow an attacker to gain increased privileges...

The vulnerability of the Win32 kernel subsystem in Windows operating systems allows attackers to increase their privileges.

The vulnerability of the Win32 kernel subsystem in Windows operating systems is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerability of the Content Server component of the Oracle WebCenter Content user interaction platform allows a perpetrator to gain full control over the application.

The vulnerability of the Content Server component of the Oracle WebCenter Content user interaction platform relates to the absence of authentication for a critical function. Exploiting this vulnerability could allow an attacker to gain full control over the application using the HTTP network...

The vulnerability of Microsoft Word, the Microsoft SharePoint Server, Microsoft Office, and Microsoft 365 Apps for Enterprise text editors arises from improper validation of certain input types, allowing attackers to disclose protected information.

The vulnerability of Microsoft SharePoint Server and SharePoint Enterprise Server packages is related to improper validation of the specified type of input data. Exploiting this vulnerability can allow an attacker to disclose protected information...

The vulnerability of the smc_tcp_syn_recv_sock() function in the net/smc/af_smc.c module of the SMC protocol family implementation in Linux kernel allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the smctcpsynrecvsock function in the net/smc/afsmc.c module of the SMC protocol family implementation in Linux’s kernel relates to the reutilization of previously freed memory. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrit...

The vulnerability of the check_removing_space_info() function in the fs/btrfs/block-group.c module of the Btrfs file system in the Linux operating system allows a attacker to cause a service failure.

The vulnerability of the checkremovingspaceinfo function in the fs/btrfs/block-group.c file of the Btrfs file system in the Linux operating system is related to improper memory release „memory leak“. Exploiting this vulnerability may allow a remote attacker to cause service interruptions...

The vulnerabilities of the functions session_free(), hidp_session_remove(), and hidp_session_thread() in the net/bluetooth/hidp/core.c module of the Linux operating system’s Bluetooth subsystem allow a malicious actor to cause service failures.

The vulnerability of the functions sessionfree, hidpsessionRemove, and hidpSessionThread in the net/bluetooth/hidp/core.c module of the Linux kernel’s Bluetooth subsystem is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to cause a...

Vulnerability of Microsoft Excel, Microsoft Office, Microsoft 365 Apps for Enterprise, and Microsoft Office Online Server packages, related to buffer overflow in the stack, allows attackers to execute arbitrary code.

The vulnerability of Microsoft Excel, Microsoft Office, Microsoft 365 Apps for Enterprise, and Microsoft Office Online Server programs is related to buffer overflow in the stack. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

The vulnerability of the USB Audio Class driver for Windows operating systems allows attackers to disclose protected information.

The vulnerability of the USB Audio Class driver for Windows operating systems is related to reading data beyond the permitted range in memory. Exploiting this vulnerability can allow an attacker to disclose sensitive information that is protected by security measures...

The vulnerability of the Client Bundle component of the Oracle WebCenter Enterprise Capture software platform for automatic scanning, recognition, and digitization of documents allows a intruder to gain full control over the system.

The vulnerability of the Client Bundle component of the Oracle WebCenter Enterprise Capture software platform for automatic scanning, recognition, and digitization of documents is related to access control errors. Exploiting this vulnerability could allow a malicious actor to gain full control ov...

The vulnerability of the Core server component of Oracle WebLogic Server allows a hacker to gain full control over the application.

The vulnerability of the Core server component of Oracle WebLogic Server is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to gain full control over the application through the HTTP network protocol...

The vulnerability of the automatic update mechanism for PAK ViPNet Coordinator HW 4, ViPNet Coordinator IG 4, and ViPNet xFirewall 5 lies in the excessive capabilities for decompressing updates. This allows a malicious entity with pre-compromised network management centers (NMCs) to create specially modified update packages, distribute them to managed PAKs, and thereby compromise the integrity of their operating environments.

Vulnerability of the automatic update mechanism for PAK ViPNet Coordinator HW 4, ViPNet Coordinator IG 4, and ViPNet xFirewall 5, due to excessive capabilities for decompressing updates. Exploiting this vulnerability allows a malicious actor, operating from a pre-compromised network management...

The vulnerability of the Windows operating system’s kernel allows attackers to disclose sensitive information that is protected by security measures.

The vulnerability of the Windows operating system’s kernel is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to disclose sensitive information that is protected by security measures...

The vulnerability of the Client Bundle component of the Oracle WebCenter Enterprise Capture software platform for automatic scanning, recognition, and digitization of documents allows a intruder to gain full control over the system.

The vulnerability of the Client Bundle component of the Oracle WebCenter Enterprise Capture software platform for automatic scanning, recognition, and digitization of documents is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to gain full...

The vulnerability of Microsoft SharePoint Server and SharePoint Enterprise Server lies in the lack of measures taken to protect the structure of web pages, allowing attackers to perform spear-phishing attacks.

The vulnerability of Microsoft SharePoint Server and SharePoint Enterprise Server lies in the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform spear-phishing attacks remotely...

The vulnerability of Microsoft SharePoint Server and SharePoint Enterprise Server lies in the lack of measures taken to protect the structure of web pages, allowing attackers to perform spear-phishing attacks.

The vulnerability of Microsoft SharePoint Server and SharePoint Enterprise Server lies in the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform spear-phishing attacks remotely...

The vulnerability of Microsoft Office packages, Microsoft SharePoint Server, and Microsoft 365 Apps for Enterprise, related to reading data outside of the allowed range in memory, allows attackers to disclose sensitive information.

The vulnerability of Microsoft Office packages, Microsoft SharePoint Server, and Microsoft 365 Apps for Enterprise involves reading data beyond the allowed range in memory. Exploiting this vulnerability can allow an attacker to disclose sensitive information...

The vulnerability of the mlxbf_pmc_init_perftype_counter() function in the drivers/platform/mellanox/mlxbf-pmc.c kernel module of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the mlxbfpmcinitperftypecounter function in the drivers/platform/mellanox/mlxbf-pmc.c module of the Linux kernel is related to incorrect initialization of resources. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and...

The vulnerability of the i915_vma_pin_ww() function in the driver/gpu/drm/i915/i915_vma.c file of the Direct Rendering Infrastructure (DRI) kernel driver of the Linux operating system allows a attacker to cause a service failure.

The vulnerability of the i915vmapinww function in the drivers/gpu/drm/i915/i915vma.c file of the Direct Rendering Infrastructure DRI driver in the Linux operating system is related to the occurrence of mutual locking. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the automatic update mechanism of PC ViPNet administrators, related to deficiencies in handling relative paths, allows a perpetrator from a neighboring trusted network to compromise the integrity of the operating environment of the target node by using a specially crafted update package, delivered from a compromised trusted node with the role of Network Management Center (NMC).

The vulnerability of the automatic update mechanism of PC ViPNet Administrator is related to deficiencies in the processing of relative paths. Exploiting this vulnerability can allow a perpetrator operating from a neighboring trusted network to compromise the integrity of the operating environmen...

The vulnerability of the __arch_prepare_bpf_trampoline() function in the arch/loongarch/net/bpf_jit.c module of the LoongArch architecture support for the Linux operating system allows a malicious actor to gain unauthorized access to protected information.

The vulnerability of the archpreparebpftrampoline function in the arch/loongarch/net/bpfjit.c module of the LoongArch architecture support for the Linux operating system involves exposing confidential information. Exploiting this vulnerability could allow an attacker, acting remotely, to gain...

The vulnerability of the alps_rawevent() function in the drivers/hid/hid-alps.c module of the Linux kernel’s device subsystem allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the alpsrawevent function in the drivers/hid/hid-alps.c module of the Linux kernel subsystem for user interface devices relates to the pointer manipulation. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility o...

The vulnerability of the packet_do_bind() function in the net/packet/af_packet.c module of the Linux operating system allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the packetdobind function in the net/packet/afpacket.c module of the Linux operating system is related to the reutilization of previously freed memory due to concurrent access to resources. Exploiting this vulnerability could allow an attacker to compromise the confidentialit...

The vulnerability of the rxrpc_server_keyring() function in the net/rxrpc/server_key.c module, which supports RxRPC session sockets in Linux kernel, allows a attacker to cause a service failure.

The vulnerability of the rxrpcserverkeyring function in the net/rxrpc/serverkey.c module, which supports RxRPC session sockets in Linux operating systems, is related to errors during the update of the reference counter. Exploiting this vulnerability could allow an attacker to cause a service...

The vulnerability of the `init_amd_zen1()` function in the `arch/x86/kernel/cpu/amd.c` module, which is part of the Linux operating system’s kernel support for x86 platforms, allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the initamdzen1 function in the arch/x86/kernel/cpu/amd.c module, which is part of the Linux operating system’s kernel support for x86 platforms, is related to incorrect inter-process boundary removal of critical data. Exploiting this vulnerability could allow an attacker to...

The vulnerability of the folio_unmap_invalidate() function, located in the mm/truncate.c module of the Linux kernel’s memory management subsystem, allows a attacker to trigger a service failure.

The vulnerability of the foliounmapinvalidate function in the mm/truncate.c module of the Linux kernel’s memory management subsystem is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to trigger a service failure...

The vulnerability of the smb_lazy_parent_lease_break_close() function in the fs/smb/server/oplock.c module of the Smb subsystem of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the smblazyparentleasebreakclose function in the fs/smb/server/oplock.c module of the Smb subsystem of the Linux operating system is related to the reutilization of previously freed memory due to concurrent access to resources. Exploiting this vulnerability could allow a remo...

The vulnerability of the tcf_csum_act() function in the net/sched/act_csum.c module of the network/sched subsystem of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the tcfcsumact function in the net/sched/actcsum.c module of the network/sched subsystem of the Linux operating system is related to the improper checking of the specified index, position, or offset in the input data. Exploiting this vulnerability may allow a remote attacker ...

The vulnerabilities of the functions l2cap_register_user() and l2cap_unregister_user() in the net/bluetooth/l2cap_core.c module of the Linux kernel’s Bluetooth subsystem allow a malicious actor to cause service failures.

The vulnerability of the functions l2capregisteruser and l2capunregisteruser in the net/bluetooth/l2capcore.c module of the Linux kernel’s Bluetooth subsystem is related to synchronization errors when using shared resources. Exploiting this vulnerability could allow a attacker to cause service...

The vulnerability of the mptcp_subflow_init() function in the kernel’s net/mptcp/protocol.c file in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the mptcpsubflowinit function in the net/mptcp/protocol.c module of the Linux kernel relates to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected...

The vulnerability of the xe_pagefault_service() function in the drivers/gpu/drm/xe/xe_pagefault.c file of the DRI driver for the Linux operating system’s kernel allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the xepagefaultservice function in the drivers/gpu/drm/xe/xepagefault.c file of the Direct Rendering Infrastructure DRI driver in the Linux operating system is related to the execution of operations outside the memory buffer. Exploiting this vulnerability could allow a remote...

The vulnerability of the pt_iommu_x86_64_unmap_pages() function in the drivers/iommu/generic_pt/iommu_pt.h header of the Linux kernel allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the ptiommux8664unmappages function in the drivers/iommu/genericpt/iommupt.h header of the Linux kernel is related to incomplete cleanup of temporary or auxiliary resources. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, an...

The vulnerability of the Windows operating system’s kernel allows attackers to enhance their privileges.

The vulnerability of Windows operating system kernels is related to the use of memory after it has been freed. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerability of the print spooler driver in Windows operating systems allows attackers to disclose sensitive information that is protected by this driver.

The vulnerability of the Windows Print Spooler in operating systems related to print queues is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to disclose sensitive information that is protected by security measure...

The vulnerability of the Client Bundle component of the Oracle WebCenter Enterprise Capture software platform for automatic scanning, recognition, and digitization of documents allows a intruder to gain full control over the system.

The vulnerability of the Client Bundle component of the Oracle WebCenter Enterprise Capture software platform for automatic scanning, recognition, and digitization of documents is related to access control errors. Exploiting this vulnerability could allow a malicious actor to gain full control ov...

The vulnerability of the Content Server component of the Oracle WebCenter Content user interaction platform allows a perpetrator to gain full control over the application.

The vulnerability of the Content Server component of the Oracle WebCenter Content user interaction platform lies in the lack of authentication for a critical function. Exploiting this vulnerability could allow an attacker to gain full control over the application using the HTTP network protocol...