23144 matches found
net_sched: sch_sfq: don't allow 1 packet limit
...
iio: light: vcnl4035: fix information leak in triggered buffer
...
iio: adc: rockchip_saradc: fix information leak in triggered buffer
...
drm/mediatek: Set private->all_drm_private[i]->drm to NULL if mtk_drm_bind returns err
...
drm: adv7511: Fix use-after-free in adv7533_attach_dsi()
...
netfilter: IDLETIMER: Fix for possible ABBA deadlock
...
pinmux: Use sequential access to access desc->pinmux data
...
usb: gadget: f_fs: Remove WARN_ON in functionfs_bind
...
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
...
usb: xhci: Fix NULL pointer dereference on certain command aborts
...
irqchip/gic-v3-its: Don't enable interrupts in its_irq_set_vcpu_affinity()
...
netrc and default credential leak
...
iio: adc: ti-ads8688: fix information leak in triggered buffer
...
net/mlx5e: Skip restore TC rules for vport rep without loaded flag
...
netfilter: nf_tables: do not defer rule destruction via call_rcu
...
mm/mempolicy: fix migrate_to_node() assuming there is at least one VMA in a MM
...
net: defer final 'struct net' free in netns dismantle
...
Bluetooth: btmtk: avoid UAF in btmtk_process_coredump
...
Bluetooth: hci_event: Fix using rcu_read_(un)lock while iterating
...
net/smc: protect link down work from execute after lgr freed
...
ALSA: control: Avoid WARN() for symlink errors
...
net: stmmac: fix TSO DMA API usage causing oops
...
dlm: fix possible lkb_resource null dereference
...
media: uvcvideo: Fix double free in error path
...
Chromium: CVE-2025-2137 Out of bounds read in V8
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2025-2136 Use after free in Inspector
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2025-2135 Type Confusion in V8
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2025-1920 Type Confusion in V8
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2025-24201 Out of bounds write in GPU on Mac
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information. Google is aware of reports that an exploit for CVE-2025-24201 exists in the wild...
Azure Arc Installer Elevation of Privilege Vulnerability
Improper neutralization of special elements used in a command 'command injection' in Azure Arc allows an authorized attacker to elevate privileges locally...
Azure Promptflow Remote Code Execution Vulnerability
Improper isolation or compartmentalization in Azure PromptFlow allows an unauthorized attacker to execute code over a network...
WinDbg Remote Code Execution Vulnerability
Improper verification of cryptographic signature in .NET allows an authorized attacker to execute code over a network...
Azure Agent Installer for Backup and Site Recovery Elevation of Privilege Vulnerability
Improper privilege management in Azure Agent Installer allows an authorized attacker to elevate privileges locally...
Windows Server Elevation of Privilege Vulnerability
Improper link resolution before file access 'link following' in Microsoft Windows allows an authorized attacker to elevate privileges locally...
Visual Studio Elevation of Privilege Vulnerability
Uncontrolled search path element in Visual Studio allows an authorized attacker to elevate privileges locally...
Microsoft Office Remote Code Execution Vulnerability
Untrusted pointer dereference in Microsoft Office allows an unauthorized attacker to execute code locally...
Microsoft Word Remote Code Execution Vulnerability
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally...
ASP.NET Core and Visual Studio Elevation of Privilege Vulnerability
Weak authentication in ASP.NET Core & Visual Studio allows an unauthorized attacker to elevate privileges over a network...
Windows Remote Desktop Services Remote Code Execution Vulnerability
Sensitive data storage in improperly locked memory in Windows Remote Desktop Services allows an unauthorized attacker to execute code over a network...
Windows NTFS Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally...
Windows USB Video Class System Driver Elevation of Privilege Vulnerability
Out-of-bounds read in Windows USB Video Driver allows an authorized attacker to elevate privileges with a physical attack...
Microsoft Excel Remote Code Execution Vulnerability
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally...
Windows Core Messaging Elevation of Privileges Vulnerability
Heap-based buffer overflow in Windows Core Messaging allows an authorized attacker to elevate privileges over a network...
Remote Desktop Client Remote Code Execution Vulnerability
Relative path traversal in Remote Desktop Client allows an unauthorized attacker to execute code over a network...
Kernel Streaming Service Driver Elevation of Privilege Vulnerability
Heap-based buffer overflow in Microsoft Streaming Service allows an authorized attacker to elevate privileges locally...
NTLM Hash Disclosure Spoofing Vulnerability
External control of file name or path in Windows NTLM allows an unauthorized attacker to perform spoofing over a network...
Windows Hyper-V Elevation of Privilege Vulnerability
Heap-based buffer overflow in Role: Windows Hyper-V allows an authorized attacker to elevate privileges locally...
MapUrlToZone Security Feature Bypass Vulnerability
Improper resolution of path equivalence in Windows MapUrlToZone allows an unauthorized attacker to bypass a security feature over a network...