23105 matches found
Windows Routing and Remote Access Service (RRAS) Denial of Service Vulnerability
Improper link resolution before file access 'link following' in Windows Routing and Remote Access Service RRAS allows an authorized attacker to deny service locally...
Windows Speech Recognition Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Speech allows an authorized attacker to elevate privileges locally...
Windows Speech Runtime Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Speech allows an authorized attacker to elevate privileges locally...
Microsoft Visual Studio Code CoPilot Chat Extension Security Feature Bypass Vulnerability
Improper limitation of a pathname to a restricted directory 'path traversal' in Visual Studio Code CoPilot Chat Extension allows an authorized attacker to bypass a security feature locally...
Microsoft Excel Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally...
Microsoft Excel Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally...
DirectX Graphics Kernel Denial of Service Vulnerability
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows DirectX allows an authorized attacker to deny service over a network...
Windows Transport Driver Interface (TDI) Translation Driver Elevation of Privilege Vulnerability
Buffer over-read in Windows TDX.sys allows an authorized attacker to elevate privileges locally...
Windows Administrator Protection Elevation of Privilege Vulnerability
Untrusted search path in Windows Administrator Protection allows an authorized attacker to elevate privileges locally...
Windows Broadcast DVR User Service Elevation of Privilege Vulnerability
Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally...
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows Routing and Remote Access Service RRAS allows an authorized attacker to execute code over a network...
Microsoft Wireless Provisioning System Elevation of Privilege Vulnerability
Double free in Microsoft Wireless Provisioning System allows an authorized attacker to elevate privileges locally...
Microsoft Office Remote Code Execution Vulnerability
Use after free in Microsoft Office allows an unauthorized attacker to execute code locally...
Windows Broadcast DVR User Service Elevation of Privilege Vulnerability
Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally...
mruby array.c ary_fill_exec out-of-bounds write
...
Libxml2: namespace use-after-free in xmlsettreedoc() function of libxml2
...
crypto: rng - Ensure set_ent is always present
...
Chromium: CVE-2025-12729 Inappropriate implementation in Omnibox
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2025-12728 Inappropriate implementation in Omnibox
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
runc: LSM labels can be bypassed with malicious config using dummy procfs files
...
container escape due to /dev/console mount and related races
...
runc container escape via "masked path" abuse due to mount race conditions
...
KubeVirt Isolation Detection Flaw Allows Arbitrary File Permission Changes
...
KubeVirt VMI Denial-of-Service (DoS) Using Pod Impersonation
...
KubeVirt Arbitrary Container File Read
...
KubeVirt Improper TLS Certificate Management Handling Allows API Identity Spoofing
...
KubeVirt Affected by an Authentication Bypass in Kubernetes Aggregation Layer
...
KubeVirt Excessive Role Permissions Could Enable Unauthorized VMI Migrations Between Nodes
...
netfs: Fix missing xas_retry() calls in xarray iteration
...
netdevsim: Fix memory leak of nsim_dev->fa_cookie
...
containerd affected by a local privilege escalation via wide permissions on CRI directory
...
missing SFTP host verification with wolfSSH
...
containerd CRI server: Host memory exhaustion through Attach goroutine leak
...
smb: client: fix UAF in decryption with multichannel
...
netlink: Bounds-check struct nlmsgerr creation
...
bpf: Prevent bpf program recursion for raw tracepoint probes
...
iavf: fix hang on reboot with ice
...
net: Fix null-ptr-deref by sock_lock_init_class_and_name() and rmmod.
...
perf: Fix hang while freeing sigtrap event
...
Chromium: CVE-2025-12727 Inappropriate implementation in V8
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2025-12726 Inappropriate implementation in Views.
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2025-12725 Out of bounds write in WebGPU
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
drm/amdgpu: Replace Mutex with Spinlock for RLCG register access to avoid Priority Inversion in SRIOV
...
RISC-V: KVM: Teardown riscv specific bits after kvm_exit
...
wifi: ath11k: Clear affinity hint before calling ath11k_pcic_free_irq() in error path
...
Qemu-kvm: stack buffer overflow in e1000 device via short frames in loopback mode
...
Quadratic complexity in os.path.expandvars() with user-controlled template
...
FRRouting/frr from v2.0 through v10.4.1 was discovered to contain a NULL pointer dereference via the opaque_info_detail function at ospf_opaque.c. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted LS Update packet.
...