24590 matches found
drm/amdkfd: svm range restore work deadlock when process exit
...
x86/mce: Work around an erratum on fast string copy instructions
...
futex: Prevent use-after-free during requeue-PI
...
Bluetooth: hci_event: Fix UAF in hci_acl_create_conn_sync
...
can: hi311x: populate ndo_change_mtu() to prevent buffer overflow
...
media: tuner: xc5000: Fix use-after-free in xc5000_release
...
nexthop: Forbid FDB status change while nexthop is in a group
...
scsi: target: target_core_configfs: Add length check to avoid buffer overflow
...
Bluetooth: MGMT: Fix possible UAFs
...
i40e: add validation for ring_len param
...
i40e: fix validation of VF state in get resources
...
i40e: fix idx validation in i40e_validate_queue_map
...
i40e: fix idx validation in config queues msg
...
can: mcba_usb: populate ndo_change_mtu() to prevent buffer overflow
...
i40e: fix input validation logic for action_meta
...
fbcon: fix integer overflow in fbcon_do_set_font
...
i40e: add max boundary check for VF filters
...
media: b2c2: Fix use-after-free causing by irq_check_work in flexcop_pci_remove
...
can: sun4i_can: populate ndo_change_mtu() to prevent buffer overflow
...
bpf: Check the helper function is valid in get_helper_proto
...
wifi: rtw89: fix use-after-free in rtw89_core_tx_kick_off_and_wait()
...
media: rc: fix races with imon_disconnect()
...
media: i2c: tc358743: Fix use-after-free bugs caused by orphan timer in probe
...
octeontx2-pf: Fix potential use after free in otx2_tc_add_flow()
...
can: etas_es58x: populate ndo_change_mtu() to prevent buffer overflow
...
drm/amd/display: Fix by adding FPU protection for dcn30_internal_validate_bw
...
crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg
...
xfrm: xfrm_alloc_spi shouldn't use 0 as SPI
...
Windows Authentication Elevation of Privilege Vulnerability
Improper validation of specified type of input in Windows Authentication Methods allows an authorized attacker to elevate privileges locally...
Windows Authentication Elevation of Privilege Vulnerability
Improper validation of specified type of input in Windows Authentication Methods allows an authorized attacker to elevate privileges locally...
Microsoft Exchange Server Spoofing Vulnerability
Improper input validation in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network...
Microsoft Office Denial of Service Vulnerability
Uncaught exception in Microsoft Office allows an unauthorized attacker to deny service locally...
Windows Push Notification Information Disclosure Vulnerability
Exposure of sensitive information to an unauthorized actor in Windows Push Notification Core allows an authorized attacker to disclose information locally...
Windows Graphics Component Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization 'race condition' in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally...
Microsoft Failover Cluster Information Disclosure Vulnerability
Exposure of sensitive information to an unauthorized actor in Windows Failover Cluster allows an authorized attacker to disclose information locally...
Inbox COM Objects (Global Memory) Remote Code Execution Vulnerability
Use after free in Inbox COM Objects allows an unauthorized attacker to execute code locally...
Windows COM+ Event System Service Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows COM allows an authorized attacker to elevate privileges locally...
Windows Cryptographic Services Information Disclosure Vulnerability
Use of a cryptographic primitive with a risky implementation in Windows Cryptographic Services allows an authorized attacker to disclose information locally...
Remote Desktop Client Remote Code Execution Vulnerability
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network...
NtQueryInformation Token function (ntifs.h) Elevation of Privilege Vulnerability
Time-of-check time-of-use toctou race condition in NtQueryInformation Token function ntifs.h allows an authorized attacker to elevate privileges locally...
Windows WLAN AutoConfig Service Information Disclosure Vulnerability
Out-of-bounds read in Windows WLAN Auto Config Service allows an authorized attacker to disclose information locally...
MITRE CVE-2025-54957: Integer overflow in Dolby Digital Plus audio decoder
Deserialization of untrusted data in Microsoft Windows Codecs Library allows an unauthorized attacker to execute code locally...
Microsoft Excel Remote Code Execution Vulnerability
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally...
Microsoft Excel Remote Code Execution Vulnerability
Access of resource using incompatible type 'type confusion' in Microsoft Office Excel allows an unauthorized attacker to execute code locally...
Windows Speech Runtime Elevation of Privilege Vulnerability
Integer overflow or wraparound in Microsoft Windows Speech allows an authorized attacker to elevate privileges locally...
Microsoft PowerPoint Remote Code Execution Vulnerability
Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code locally...
Microsoft Office Remote Code Execution Vulnerability
Use after free in Microsoft Office allows an unauthorized attacker to execute code locally...
Windows MapUrlToZone Information Disclosure Vulnerability
Out-of-bounds read in Windows MapUrlToZone allows an unauthorized attacker to disclose information over a network...