24590 matches found
net: fix geneve_opt length integer overflow
...
Bypass extraction filter to modify file metadata outside extraction directory
...
media: venus: hfi: add a check to handle OOB in sfr region
...
ALSA: ump: Fix buffer overflow at UMP SysEx message conversion
...
redis-check-aof may lead to stack overflow and potential RCE
...
wifi: cfg80211: fix out-of-bounds access during multi-link element defragmentation
...
undici Denial of Service attack via bad certificate data
...
vxlan: vnifilter: Fix unlocked deletion of default FDB entry
...
pds_core: make wait_context part of q_info
...
s390/sclp: Add check for get_zeroed_page()
...
soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe()
...
ksmbd: fix use-after-free in smb_break_all_levII_oplock()
...
drm/amd/pm: Prevent division by zero
...
drm/amd/pm/smu11: Prevent division by zero
...
drm/amd/pm: Prevent division by zero
...
bpf: check changes_pkt_data property for extension programs
...
PostgreSQL GB18030 encoding validation can read one byte past end of allocation for text that fails validation
...
net: dsa: mv88e6xxx: fix -ENOENT when deleting VLANs and MST is unsupported
...
fs/jfs: Prevent integer overflow in AG size calculation
...
ata: pata_pxa: Fix potential NULL pointer dereference in pxa_ata_probe()
...
media: venus: hfi: add check to handle incorrect queue size
...
media: venus: hfi_parser: add check to avoid out of bound access
...
misc: pci_endpoint_test: Avoid issue of interrupts remaining after request_irq error
...
PCI: Fix reference leak in pci_register_host_bridge()
...
LoongArch: Return NULL from huge_pte_offset() for invalid PMD
...
wifi: at76c50x: fix use after free access in at76_disconnect
...
net: dsa: clean up FDB, MDB, VLAN entries on unbind
...
drm/nouveau: Fix WARN_ON in nouveau_fence_context_kill()
...
backlight: led_bl: Hold led_access lock when calling led_sysfs_disable()
...
qibfs: fix _another_ leak
...
Ansible-core: ansible-core user may read/write unauthorized content
...
GNU Binutils objdump debug.c debug_type_samep memory corruption
...
Crossbeam-channel: crossbeam-channel vulnerable to double free on drop
...
GNU Binutils ld elflink.c elf_gc_sweep memory corruption
...
Windows Universal Plug and Play (UPnP) Device Host Elevation of Privilege Vulnerability
Sensitive data storage in improperly locked memory in Windows Universal Plug and Play UPnP Device Host allows an authorized attacker to elevate privileges over an adjacent network...
Windows Secure Kernel Mode Information Disclosure Vulnerability
Processor optimization removal or modification of security-critical code in Windows Kernel allows an authorized attacker to disclose information locally...
Windows BitLocker Security Feature Bypass Vulnerability
Time-of-check time-of-use toctou race condition in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack...
Microsoft Virtual Hard Disk Elevation of Privilege Vulnerability
Buffer over-read in Virtual Hard Disk VHDX allows an unauthorized attacker to elevate privileges locally...
Microsoft SQL Server Information Disclosure Vulnerability
Improper input validation in SQL Server allows an unauthorized attacker to disclose information over a network...
Microsoft PC Manager Elevation of Privilege Vulnerability
Improper access control in Microsoft PC Manager allows an authorized attacker to elevate privileges locally...
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows Routing and Remote Access Service RRAS allows an unauthorized attacker to execute code over a network...
Credential Security Support Provider Protocol (CredSSP) Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Cred SSProvider Protocol allows an authorized attacker to elevate privileges locally...
Windows Input Method Editor (IME) Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization 'race condition' in Microsoft Input Method Editor IME allows an authorized attacker to elevate privileges over a network...
Azure Service Fabric Runtime Elevation of Privilege Vulnerability
Improper link resolution before file access 'link following' in Service Fabric allows an authorized attacker to elevate privileges locally...
AMD: CVE-2024-36350 Transient Scheduler Attack in Store Queue
The vulnerability assigned to this CVE is in certain processor models offered by AMD. The mitigation for this vulnerability requires a Windows update. This CVE is being documented in the Security Update Guide to announce that the latest builds of Windows enable the mitigation and provide protecti...
Microsoft PC Manager Elevation of Privilege Vulnerability
Improper link resolution before file access 'link following' in Microsoft PC Manager allows an authorized attacker to elevate privileges locally...
Microsoft Windows QoS Scheduler Driver Elevation of Privilege Vulnerability
Time-of-check time-of-use toctou race condition in Microsoft Windows QoS scheduler allows an authorized attacker to elevate privileges locally...
Windows Notification Elevation of Privilege Vulnerability
Use after free in Windows Notification allows an authorized attacker to elevate privileges locally...