24590 matches found
drm/amdkfd: svm range restore work deadlock when process exit
...
x86/mce: Work around an erratum on fast string copy instructions
...
futex: Prevent use-after-free during requeue-PI
...
Bluetooth: hci_event: Fix UAF in hci_acl_create_conn_sync
...
can: hi311x: populate ndo_change_mtu() to prevent buffer overflow
...
media: tuner: xc5000: Fix use-after-free in xc5000_release
...
nexthop: Forbid FDB status change while nexthop is in a group
...
scsi: target: target_core_configfs: Add length check to avoid buffer overflow
...
Bluetooth: MGMT: Fix possible UAFs
...
i40e: add validation for ring_len param
...
i40e: fix validation of VF state in get resources
...
i40e: fix idx validation in i40e_validate_queue_map
...
i40e: fix idx validation in config queues msg
...
can: mcba_usb: populate ndo_change_mtu() to prevent buffer overflow
...
i40e: fix input validation logic for action_meta
...
fbcon: fix integer overflow in fbcon_do_set_font
...
i40e: add max boundary check for VF filters
...
media: b2c2: Fix use-after-free causing by irq_check_work in flexcop_pci_remove
...
can: sun4i_can: populate ndo_change_mtu() to prevent buffer overflow
...
bpf: Check the helper function is valid in get_helper_proto
...
wifi: rtw89: fix use-after-free in rtw89_core_tx_kick_off_and_wait()
...
media: rc: fix races with imon_disconnect()
...
media: i2c: tc358743: Fix use-after-free bugs caused by orphan timer in probe
...
octeontx2-pf: Fix potential use after free in otx2_tc_add_flow()
...
can: etas_es58x: populate ndo_change_mtu() to prevent buffer overflow
...
drm/amd/display: Fix by adding FPU protection for dcn30_internal_validate_bw
...
crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg
...
xfrm: xfrm_alloc_spi shouldn't use 0 as SPI
...
Windows Authentication Elevation of Privilege Vulnerability
Improper validation of specified type of input in Windows Authentication Methods allows an authorized attacker to elevate privileges locally...
Windows Authentication Elevation of Privilege Vulnerability
Improper validation of specified type of input in Windows Authentication Methods allows an authorized attacker to elevate privileges locally...
Microsoft Office Denial of Service Vulnerability
Uncaught exception in Microsoft Office allows an unauthorized attacker to deny service locally...
Microsoft Excel Remote Code Execution Vulnerability
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally...
Windows MapUrlToZone Information Disclosure Vulnerability
Out-of-bounds read in Windows MapUrlToZone allows an unauthorized attacker to disclose information over a network...
Storport.sys Driver Elevation of Privilege Vulnerability
Buffer over-read in Storport.sys Driver allows an authorized attacker to elevate privileges locally...
Windows Local Session Manager (LSM) Denial of Service Vulnerability
Improper validation of specified type of input in Windows Local Session Manager LSM allows an authorized attacker to deny service over a network...
Remote Desktop Client Remote Code Execution Vulnerability
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network...
Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability
Use after free in Windows PrintWorkflowUserSvc allows an authorized attacker to elevate privileges locally...
Visual Studio Elevation of Privilege Vulnerability
Improper access control in Visual Studio allows an authorized attacker to elevate privileges locally...
Virtual Secure Mode Spoofing Vulnerability
Use of a key past its expiration date in Virtual Secure Mode allows an authorized attacker to perform spoofing locally...
Azure Compute Gallery Elevation of Privilege Vulnerability
External control of file name or path in Confidential Azure Container Instances allows an authorized attacker to elevate privileges locally...
Microsoft Excel Remote Code Execution Vulnerability
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally...
Microsoft DWM Core Library Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows DWM allows an authorized attacker to elevate privileges locally...
Configuration Manager Elevation of Privilege Vulnerability
Improper neutralization of special elements used in an sql command 'sql injection' in Microsoft Configuration Manager allows an authorized attacker to elevate privileges over an adjacent network...
ASP.NET Security Feature Bypass Vulnerability
Inconsistent interpretation of http requests 'http request/response smuggling' in ASP.NET Core allows an authorized attacker to bypass a security feature over a network...
NtQueryInformation Token function (ntifs.h) Elevation of Privilege Vulnerability
Time-of-check time-of-use toctou race condition in NtQueryInformation Token function ntifs.h allows an authorized attacker to elevate privileges locally...
Windows WLAN AutoConfig Service Information Disclosure Vulnerability
Out-of-bounds read in Windows WLAN Auto Config Service allows an authorized attacker to disclose information locally...
Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability
Use after free in Windows PrintWorkflowUserSvc allows an authorized attacker to elevate privileges locally...
Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability
Use after free in Windows PrintWorkflowUserSvc allows an authorized attacker to elevate privileges locally...
Windows Connected Devices Platform Service (Cdpsvc) Remote Code Execution Vulnerability
Use after free in Connected Devices Platform Service Cdpsvc allows an unauthorized attacker to execute code over a network...