23105 matches found
DirectX Graphics Kernel Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization 'race condition' in Graphics Kernel allows an authorized attacker to elevate privileges locally...
Microsoft SQL Server Elevation of Privilege Vulnerability
Missing authentication for critical function in SQL Server allows an authorized attacker to elevate privileges over a network...
Secure Boot Certificate Expiration Security Feature Bypass Vulnerability
Windows Secure Boot stores Microsoft certificates in the UEFI KEK and DB. These original certificates are approaching expiration, and devices containing affected certificate versions must update them to maintain Secure Boot functionality and avoid compromising security by losing security fixes...
Host Process for Windows Tasks Elevation of Privilege Vulnerability
Improper link resolution before file access 'link following' in Host Process for Windows Tasks allows an authorized attacker to elevate privileges locally...
Windows Motorola Soft Modem Driver Elevation of Privilege Vulnerability
Microsoft is aware of vulnerabilities in the third party Motorola Soft Modem drivers that ships natively with supported Windows operating systems. This is an announcement of the upcoming removal of smserl64.sys and smserial.sys drivers. The drivers have been removed in the January cumulative...
Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability
Use after free in Windows Win32K - ICOMP allows an authorized attacker to elevate privileges locally...
Win32k Elevation of Privilege Vulnerability
Double free in Windows Win32K - ICOMP allows an authorized attacker to elevate privileges locally...
Microsoft SharePoint Server Remote Code Execution Vulnerability
Improper neutralization of special elements used in an sql command 'sql injection' in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...
Microsoft Excel Remote Code Execution Vulnerability
Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code locally...
Microsoft Excel Remote Code Execution Vulnerability
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally...
Windows Management Services Elevation of Privilege Vulnerability
Use after free in Windows Management Services allows an authorized attacker to elevate privileges locally...
Capability Access Management Service (camsvc) Information Disclosure Vulnerability
Out-of-bounds read in Capability Access Management Service camsvc allows an unauthorized attacker to disclose information locally...
Windows Client-Side Caching (CSC) Service Information Disclosure Vulnerability
Improper access control in Windows Client-Side Caching CSC Service allows an authorized attacker to disclose information locally...
Windows Remote Assistance Security Feature Bypass Vulnerability
Protection mechanism failure in Windows Remote Assistance allows an unauthorized attacker to bypass a security feature locally...
Windows Virtualization-Based Security (VBS) Information Disclosure Vulnerability
Untrusted pointer dereference in Windows Virtualization-Based Security VBS Enclave allows an authorized attacker to disclose information locally...
Capability Access Management Service (camsvc) Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization 'race condition' in Capability Access Management Service camsvc allows an authorized attacker to elevate privileges locally...
filelock Time-of-Check-Time-of-Use (TOCTOU) Symlink Vulnerability in SoftFileLock
...
virtualenv Has TOCTOU Vulnerabilities in Directory Creation
...
mptcp: Initialise rcv_mss before calling tcp_send_active_reset() in mptcp_do_fastclose().
...
Null Pointer Dereference in SubtableUnicodesCache::create leading to DoS
...
media: dvb-frontends: w7090p: fix null-ptr-deref in w7090p_tuner_write_serpar and w7090p_tuner_read_serpar
...
Wget2: gnu wget2: memory corruption and crash via filename sanitization logic with attacker-controlled urls
...
Wget2: arbitrary file write via metalink path traversal in gnu wget2
...
CoreDNS gRPC/HTTPS/HTTP3 servers lack resource limits, enabling DoS via unbounded connections and oversized messages
...
hv_netvsc: Fix panic during namespace deletion with VF
...
benet: fix BUG when creating VFs
...
Chromium: CVE-2026-0628 Insufficient policy enforcement in WebView tag
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Crypt::Sodium::XS module versions prior to 0.000042, for Perl, include a vulnerable version of libsodium
...
urllib3 vulnerable to decompression-bomb safeguard bypass when following HTTP redirects (streaming API)
...
bearer token leak on cross-protocol redirect
...
broken TLS options for threaded LDAPS
...
CVE-2025-13151
...
smb: client: fix use-after-free in crypt_message when using async crypto
...
Microsoft Edge (Chromium-based) for Android Spoofing Vulnerability
User interface ui misrepresentation of critical information in Microsoft Edge for Android allows an authorized attacker to perform spoofing over a network...
block: Use RCU in blk_mq_[un]quiesce_tagset() instead of set->tag_list_lock
...
backlight: led-bl: Add devlink to supplier LEDs
...
drm/vgem-fence: Fix potential deadlock on release
...
crypto: starfive - Correctly handle return of sg_nents_for_len
...
irqchip/mchp-eic: Fix error code in mchp_eic_domain_alloc()
...
wifi: rtl818x: Fix potential memory leaks in rtl8180_init_rx_ring()
...
ALSA: firewire-motu: add bounds check in put_user loop for DSP events
...
mt76: mt7615: Fix memory leak in mt7615_mcu_wtbl_sta_add()
...
staging: most: remove broken i2c driver
...
NFS: Automounted filesystems should inherit ro,noexec,nodev,sync flags
...
URI Credential Leakage Bypass over CVE-2025-27221
...
libsodium before ad3004e, in atypical use cases involving certain custom cryptography or untrusted data to crypto_core_ed25519_is_valid_point, mishandles checks for whether an elliptic curve point is valid because it sometimes allows points that aren't in the main cryptographic group.
...
OOBW in utf_16le_to_utf_8_truncated() in libpcap
...
OOBR and OOBW in pcap_ether_aton() in libpcap
...
Tracing logging user input may result in poisoning logs with ANSI escape sequences
...
In GnuPG through 2.4.8, armor_filter in g10/armor.c has two increments of an index variable where one is intended, leading to an out-of-bounds write for crafted input. (For ExtendedLTS, 2.2.51 and later are fixed versions.)
...