24507 matches found
Microsoft Purview eDiscovery Elevation of Privilege Vulnerability
Server-side request forgery ssrf in Microsoft Purview allows an unauthorized attacker to elevate privileges over a network...
Microsoft Partner Center Elevation of Privilege Vulnerability
Improper access control in Microsoft Partner Center allows an authorized attacker to elevate privileges over a network...
Microsoft Bing Remote Code Execution Vulnerability
Deserialization of untrusted data in Microsoft Bing allows an unauthorized attacker to execute code over a network...
Microsoft 365 Copilot Elevation of Privilege Vulnerability
Url redirection to untrusted site 'open redirect' in M365 Copilot allows an unauthorized attacker to elevate privileges over a network...
Denial of Service (DoS) vulnerability exists in the Protobuf PHP library during the parsing of untrusted input
...
module: Fix kernel panic when a symbol st_shndx is out of bounds
...
media: mc, v4l2: serialize REINIT and REQBUFS with req_queue_mutex
...
ext4: publish jinode after initialization
...
net: macb: use the current queue number for stats
...
Bluetooth: L2CAP: Validate PDU length before reading SDU length in l2cap_ecred_data_rcv()
...
RDMA/irdma: Initialize free_qp completion before using it
...
erofs: add GFP_NOIO in the bio completion if needed
...
bpf: Fix undefined behavior in interpreter sdiv/smod for INT_MIN
...
xfs: avoid dereferencing log items after push callbacks
...
Bluetooth: L2CAP: Fix ERTM re-init and zero pdu_len infinite loop
...
udp: Fix wildcard bind conflict check when using hash2
...
tracing: Fix potential deadlock in cpu hotplug with osnoise
...
perf: Make sure to use pmu_ctx->pmu for groups
...
ext4: replace BUG_ON with proper error handling in ext4_read_inline_folio
...
nfc: nci: fix circular locking dependency in nci_close_device
...
ksmbd: fix memory leaks and NULL deref in smb2_lock()
...
ksmbd: replace hardcoded hdr2_len with offsetof() in smb2_calc_max_out_buf_len()
...
HID: magicmouse: avoid memory leak in magicmouse_report_fixup()
...
ksmbd: fix use-after-free and NULL deref in smb_grant_oplock()
...
ext4: reject mount if bigalloc with s_first_data_block != 0
...
Bluetooth: btintel: serialize btintel_hw_error() with hci_req_sync_lock
...
dmaengine: xilinx: xdma: Fix regmap init error handling
...
net/smc: fix double-free of smc_spd_priv when tee() duplicates splice pipe buffer
...
ext4: avoid infinite loops caused by residual data
...
s390/syscalls: Add spectre boundary for syscall dispatch table
...
netfilter: ctnetlink: use netlink policy range checks
...
spi: spi-fsl-lpspi: fix teardown order issue (UAF)
...
ksmbd: fix potencial OOB in get_file_all_info() for compound requests
...
btrfs: set BTRFS_ROOT_ORPHAN_CLEANUP during subvol create
...
HID: apple: avoid memory leak in apple_report_fixup()
...
ext4: fix use-after-free in update_super_work when racing with umount
...
esp: fix skb leak with espintcp and async crypto
...
s390/entry: Scrub r12 register on kernel entry
...
xfs: save ailp before dropping the AIL lock in push callbacks
...
Bluetooth: L2CAP: Fix null-ptr-deref on l2cap_sock_ready_cb
...
virtio_net: Fix UAF on dst_ops when IFF_XMIT_DST_RELEASE is cleared and napi_tx is false
...
dmaengine: idxd: Fix memory leak when a wq is reset
...
scsi: ibmvfc: Fix OOB access in ibmvfc_discover_targets_done()
...
crypto: algif_aead - Revert to operating out-of-place
...
Bluetooth: btusb: clamp SCO altsetting table indices
...
nvme-pci: ensure we're polling a polled queue
...
net: fix fanout UAF in packet_release() via NETDEV_UP race
...
mm/damon/sysfs: check contexts->nr before accessing contexts_arr[0]
...