24507 matches found
io_uring: fix filename leak in __io_openat_prep()
...
mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats
...
svcrdma: bound check rq_pages index in inline path
...
ALSA: usb-mixer: us16x08: validate meter packet indices
...
drm/ttm: Avoid NULL pointer deref for evicted BOs
...
mlxsw: spectrum_router: Fix neighbour use-after-free
...
scsi: target: Reset t_task_cdb pointer in error case
...
inet: frags: flush pending skbs in fqdir_pre_exit()
...
perf/x86/amd: Check event before enable to avoid GPF
...
RDMA/core: Check for the presence of LS_NLA_TYPE_DGID correctly
...
btrfs: don't log conflicting inode if it's a dir moved in the current transaction
...
media: vidtv: initialize local pointers upon transfer of memory ownership
...
Bluetooth: btusb: revert use of devm_kzalloc in btusb
...
net: nfc: fix deadlock between nfc_unregister_device and rfkill_fop_write
...
net: openvswitch: fix middle attribute validation in push_nsh() action
...
e1000: fix OOB in e1000_tbi_should_accept()
...
iommu: disable SVA when CONFIG_X86 is set
...
caif: fix integer underflow in cffrml_receive()
...
iavf: fix off-by-one issues in iavf_config_rss_reg()
...
hwmon: (ibmpex) fix use-after-free in high/low store
...
usb: phy: fsl-usb: Fix use-after-free in delayed work during device removal
...
hfsplus: Verify inode mode when loading from disk
...
ksmbd: fix buffer validation by including null terminator size in EA length
...
powerpc/64s/slb: Fix SLB multihit issue during SLB preload
...
f2fs: fix to avoid updating zero-sized extent in extent cache
...
net: stmmac: fix the crash issue for zero copy XDP_TX action
...
NFSD: NFSv4 file creation neglects setting ACL
...
Avahi has a reachable assertion in lookup_start
...
Avahi has a reachable assertion in lookup_multicast_callback
...
Avahi has a reachable assertion in avahi_wide_area_scan_cache
...
LIBPNG has a heap buffer over-read in png_image_read_direct_scaled (regression from CVE-2025-65018 fix)
...
LIBPNG has an integer truncation causing heap buffer over-read in png_image_write_*
...
Host Process for Windows Tasks Elevation of Privilege Vulnerability
Improper link resolution before file access 'link following' in Host Process for Windows Tasks allows an authorized attacker to elevate privileges locally...
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows Routing and Remote Access Service RRAS allows an unauthorized attacker to execute code over a network...
Win32k Elevation of Privilege Vulnerability
Double free in Windows Win32K - ICOMP allows an authorized attacker to elevate privileges locally...
Windows SMB Server Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows SMB Server allows an authorized attacker to elevate privileges over a network...
Windows Kernel-Mode Driver Elevation of Privilege Vulnerability
Use after free in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally...
MITRE: CVE-2023-31096 Windows Agere Soft Modem Driver Elevation of Privilege Vulnerability
Microsoft is aware of vulnerabilities in the third party Agere Soft Modem drivers that ship natively with supported Windows operating systems. This is an announcement of the removal of agrsm64.sys and agrsm.sys drivers. The drivers have been removed in the January 2026 cumulative update. Soft mod...
DirectX Graphics Kernel Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization 'race condition' in Graphics Kernel allows an authorized attacker to elevate privileges locally...
Tablet Windows User Interface (TWINUI) Subsystem Information Disclosure Vulnerability
Exposure of sensitive information to an unauthorized actor in Tablet Windows User Interface TWINUI Subsystem allows an authorized attacker to disclose information locally...
Windows File Explorer Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization 'race condition' in Printer Association Object allows an authorized attacker to elevate privileges locally...
Windows Admin Center Elevation of Privilege Vulnerability
Improper verification of cryptographic signature in Windows Admin Center allows an authorized attacker to elevate privileges locally...
Windows NDIS Information Disclosure Vulnerability
Out-of-bounds read in Windows NDIS allows an authorized attacker to disclose information with a physical attack...
Windows Motorola Soft Modem Driver Elevation of Privilege Vulnerability
Microsoft is aware of vulnerabilities in the third party Motorola Soft Modem drivers that ships natively with supported Windows operating systems. This is an announcement of the upcoming removal of smserl64.sys and smserial.sys drivers. The drivers have been removed in the January cumulative...
Desktop Window Manager Elevation of Privilege Vulnerability
Use after free in Desktop Windows Manager allows an authorized attacker to elevate privileges locally...
Windows WalletService Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows WalletService allows an unauthorized attacker to elevate privileges locally...
Microsoft Excel Remote Code Execution Vulnerability
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally...
Microsoft Word Remote Code Execution Vulnerability
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to execute code locally...
Windows File Explorer Information Disclosure Vulnerability
Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an authorized attacker to disclose information locally...