28400 matches found
Microsoft Container Registry Elevation of Privilege Vulnerability
Authorization bypass through user-controlled key in Microsoft Container Registry allows an unauthorized attacker to elevate privileges over a network...
Azure Portal Spoofing Vulnerability
Improper neutralization of input during web page generation 'cross-site scripting' in Azure Portal allows an unauthorized attacker to perform spoofing over a network...
Azure AI Foundry Elevation of Privilege Vulnerability
Missing authentication for critical function in Azure AI Foundry allows an unauthorized attacker to elevate privileges over a network...
Azure Logic Apps Elevation of Privilege Vulnerability
Improper access control in Azure Logic Apps allows an unauthorized attacker to elevate privileges over a network...
Azure Arc Elevation of Privilege Vulnerability
Improper limitation of a pathname to a restricted directory 'path traversal' in Azure Arc allows an unauthorized attacker to elevate privileges over a network...
Microsoft 365 Copilot Business Chat Information Disclosure Vulnerability
Improper neutralization of special elements used in a command 'command injection' in Microsoft 365 Copilot's Business Chat allows an unauthorized attacker to disclose information over a network...
Azure Cosmos DB Elevation of Privilege Vulnerability
Improper neutralization of special elements in output used by a downstream component 'injection' in Azure Cosmos DB allows an authorized attacker to elevate privileges over a network...
Microsoft Dataverse Elevation of Privilege Vulnerability
Authentication bypass by spoofing in Microsoft Dataverse allows an unauthorized attacker to elevate privileges over a network...
'serve-expired' can bypass Unbound 'wait-limit'
...
scsi: qla2xxx: Zero SFP DMA buffer in FRU/I2C bsg handlers
...
Use-after-free in DoH stream cleanup code path
...
Heap buffer overflow and possible Remote Code Execution when digesting DNSKEY
...
scsi: qla2xxx: Fix cs84xx use-after-free on host teardown
...
Retrap: Novel Vulnerabilities to launch Algorithmic Complexity Attacks on DNSSEC
...
net: skbuff: don't skb_tx_error() the source skb in skb_zerocopy()
...
Use-after-free in DoQ stream output buffer on reset re-transmission
...
gtp: add synchronize_net() in gtp_newlink() error path to prevent use-after-free
...
CNAME synthesis could lead to heap corruption
...
batman-adv: bla: fix freeing of claims on meshif deletion
...
ftrace: Take trace_array reference before accessing its ftrace_ops
...
drm/amdkfd: Add TLB flush after MES queue eviction/suspension
...
USB: gadget: fix NULL pointer dereference in gadget_dev_ioctl()
...
media: go7007: defer the ALSA v4l2 put until card release
...
powerpc/kexec_file: Prevent kexec range truncation
...
scsi: qla2xxx: Reject non-SCSI SRB on status IOCB fast path
...
f2fs: fix to avoid potential deadloop in f2fs_fsync_node_pages()
...
staging: rtl8723bs: fix OOB read / stack overflow in rtw_get_wps_attr()
...
scsi: qla2xxx: Don't query firmware state while chip is down
...
perf/x86/intel: Fix kernel address leakages in LBR stack
...
media: video-i2c: fix kthread error pointer left in kthread_vid_cap on failure
...
scsi: qla2xxx: Avoid req_q_map double-read in qla2x00_error_entry()
...
usb: gadget: f_midi2: fix use-after-free in string attribute show path
...
usb: typec: qcom-pmic-typec: disable cc_debounce_dwork on stop
...
KVM: s390: Fix memory corruption by not reinjecting CK machine checks
...
drm/nouveau/uvmm: fix premature region free on failed OP_UNMAP_SPARSE
...
scsi: qla2xxx: Clamp MSI-X derived queue counts to avoid truncation
...
iio: light: ltrf216a: fix runtime PM reference leak in error path
...
media: i2c: ov02a10: fix endpoint parsing use-after-free
...
isofs: fix out-of-bounds page array access on empty zisofs block
...
dma-direct: return struct page from dma_direct_alloc_from_pool()
...
scsi: qla2xxx: Avoid double completion in async IOCB timeout
...
nvme-fabrics: fix DHCHAP secret leak on parse failure
...
media: cec: Serialize exclusive follower delivery
...
NFSD: Prevent client use-after-free during close_lru reaping
...
fs/ntfs3: fix out-of-bounds read of INDEX_ROOT in reparse/objid init
...
bpf: Disable preemption in bpf_get_stackid
...
scsi: qla2xxx: Hold vport reference in qla24xx_report_id_acquisition()
...
scsi: qla2xxx: Bound image count in qla2x00_update_fru_versions()
...