28859 matches found
.NET Spoofing Vulnerability
Improper neutralization of special elements in .NET allows an unauthorized attacker to perform spoofing over a network...
SQL Server Elevation of Privilege Vulnerability
Improper neutralization of special elements used in an sql command 'sql injection' in SQL Server allows an authorized attacker to elevate privileges locally...
Desktop Window Manager Elevation of Privilege Vulnerability
Use after free in Desktop Window Manager allows an authorized attacker to elevate privileges locally...
Desktop Window Manager Elevation of Privilege Vulnerability
Use after free in Desktop Window Manager allows an authorized attacker to elevate privileges locally...
Windows Function Discovery Service (fdwsd.dll) Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization 'race condition' in Function Discovery Service fdwsd.dll allows an authorized attacker to elevate privileges locally...
Windows Speech Brokered Api Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Speech Brokered Api allows an authorized attacker to elevate privileges locally...
Windows Function Discovery Service (fdwsd.dll) Elevation of Privilege Vulnerability
Heap-based buffer overflow in Function Discovery Service fdwsd.dll allows an authorized attacker to elevate privileges locally...
Remote Procedure Call Information Disclosure Vulnerability
Exposure of sensitive information to an unauthorized actor in Windows Remote Procedure Call allows an authorized attacker to disclose information locally...
Windows Local Security Authority Subsystem Service (LSASS) Denial of Service Vulnerability
Null pointer dereference in Windows Local Security Authority Subsystem Service LSASS allows an unauthorized attacker to deny service over a network...
Windows LUA File Virtualization Filter Driver Elevation of Privilege Vulnerability
Time-of-check time-of-use toctou race condition in Windows LUAFV allows an authorized attacker to elevate privileges locally...
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally...
Desktop Window Manager Elevation of Privilege Vulnerability
Use after free in Desktop Window Manager allows an authorized attacker to elevate privileges locally...
Windows WFP NDIS Lightweight Filter Driver (wfplwfs.sys) Elevation of Privilege Vulnerability
Use after free in Windows WFP NDIS Lightweight Filter Driver wfplwfs.sys allows an authorized attacker to elevate privileges locally...
Windows TDI Translation Driver (tdx.sys) Elevation of Privilege Vulnerability
Use after free in Windows TDI Translation Driver tdx.sys allows an authorized attacker to elevate privileges locally...
Windows Storage Spaces Controller Elevation of Privilege Vulnerability
Integer underflow wrap or wraparound in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally...
Windows Boot Manager Security Feature Bypass Vulnerability
Use of uninitialized resource in Windows Boot Manager allows an unauthorized attacker to bypass a security feature with a physical attack...
Windows Push Notifications Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Push Notifications allows an authorized attacker to elevate privileges locally...
Windows Shell Elevation of Privilege Vulnerability
Double free in Windows Shell allows an authorized attacker to elevate privileges locally...
Windows Sensor Data Service Elevation of Privilege Vulnerability
Untrusted pointer dereference in Windows Sensor Data Service allows an authorized attacker to elevate privileges locally...
Microsoft SharePoint Server Spoofing Vulnerability
Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network...
Microsoft Local Security Authority Subsystem Service Information Disclosure Vulnerability
...
Windows TDI Translation Driver (tdx.sys) Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows TCP/IP allows an authorized attacker to elevate privileges locally...
netfilter: ipset: drop logically empty buckets in mtype_del
...
netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD
...
net/sched: cls_fw: fix NULL pointer dereference on shared blocks
...
ACPI: EC: clean up handlers on probe failure in acpi_ec_setup()
...
netfilter: nf_conntrack_sip: fix use of uninitialized rtp_addr in process_sdp
...
netfilter: nf_conntrack_expect: use expect->helper
...
net/sched: cls_flow: fix NULL pointer dereference on shared blocks
...
net/x25: Fix overflow when accumulating packets
...
netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP
...
net/sched: sch_hfsc: fix divide-by-zero in rtsc_min()
...
netfilter: nfnetlink_log: account for netlink header size
...
In Mesa before 25.3.6 and 26 before 26.0.1, out-of-bounds memory access can occur in WebGPU because the amount of to-be-allocated data depends on an untrusted party, and is then used for alloca.
...
In libexif through 0.6.25, an unsigned 32bit integer overflow in Nikon MakerNote handling could be used by local attackers to cause crashes or information leaks. This only affects 32bit systems.
...
In libexif through 0.6.25, an integer underflow in size checking for Fuji and Olympus MakerNote decoding could be used by attackers to crash or leak information out of libexif-using programs.
...
osslsigncode has an Out-of-Bounds Read via Unvalidated Section Bounds in PE Page Hash Calculation
...
osslsigncode has an Integer Underflow in PE Page Hash Calculation Can Cause Out-of-Bounds Read
...
osslsigncode has a Stack Buffer Overflow via Unbounded Digest Copy During Signature Verification
...
In nspawn in systemd 233 through 259 before 260, an escape-to-host action can occur via a crafted optional config file.
...
LIBPNG has a yse-after-free in png_set_PLTE, png_set_tRNS and png_set_hIST leading to corrupted chunk data and potential heap information disclosure
...
Helm Chart extraction output directory collapse via `Chart.yaml` name dot-segment
...
Libcap: libcap: privilege escalation via toctou race condition in cap_set_file()
...
Case-sensitive excludedSubtrees name constraints cause Auth Bypass in crypto/x509
...
Code execution vulnerability in SWIG code generation in cmd/go
...
Missing bound checks can lead to memory corruption in safe Go in cmd/compile
...
TOCTOU permits root escape on Linux via Root.Chmod in os in internal/syscall/unix
...
Miscompilation allows memory corruption via CONVNOP-wrapped array copy in cmd/compile
...