Znajdź podatności, zrozum powód priorytetu i sprawdź informacje u źródła.
Pełny dostępny katalog: publikacje z ostatnich 365 dni oraz całe dostępne KEV. Dopasowanie kategorii lub producenta nie potwierdza podatności konkretnej wersji produktu.
In the Linux kernel, the following vulnerability has been resolved:
Revert "thermal/drivers/hwmon: Cleanup coding style a bit"
Revert commit 030a48b0f6ce ("thermal/drivers/hwmon: Cleanup coding style
a bit") that introduced a use-after-free into the error path of
thermal_add_hwmon_sysfs() by…
Opis źródłowy NVD · ENCVSS 8,4 · EPSS 0,14 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
bpf, sockmap: Fix sk_redir use-after-free in send verdict
sk_psock_msg_verdict() takes a socket reference for psock->sk_redir.
tcp_bpf_send_verdict() copies that pointer while holding the source socket
lock, but does not take a…
Opis źródłowy NVD · ENCVSS 8,4 · EPSS 0,14 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
i2c: imx: Cancel hrtimer before clearing slave pointer
In i2c_imx_unreg_slave(), the slave pointer is set to NULL after
disabling interrupts. However, a pending interrupt might already
have started the hrtimer…
Opis źródłowy NVD · ENCVSS 8,4 · EPSS 0,14 % · rekomendacja wg zapisanej polityki
Incorrect default permissions in some firmware for the Intel(R) Arc(TM) B-series GPUs within Ring 1: Device Drivers may allow an escalation of privilege. System software adversary with a privileged user combined with a low complexity attack may enable escalation of privilege. This result may…
Opis źródłowy NVD · ENCVSS 8,4 · EPSS 0,14 % · rekomendacja wg zapisanej polityki
DigitalCanion has discovered a path traversal vulnerability that allows to view or download sensitive system files over the portal https://<ip>:8443 via menus Administration -> View Logs
Opis źródłowy NVD · ENCVSS 8,4 · EPSS 0,14 % · rekomendacja wg zapisanej polityki
OP-TEE OS through 4.10.0, fixed in commit 8794043, contains a use-after-free vulnerability in the Trusted Application loader that allows attackers with the ability to load a signed Trusted Application to corrupt secure-world kernel memory by setting the TA_FLAG_CONCURRENT flag in a user TA signed…
Opis źródłowy NVD · ENCVSS 8,4 · EPSS 0,14 % · rekomendacja wg zapisanej polityki
An incorrect permission assignment for critical resource vulnerability has been reported to affect Download Station. If a local attacker gains an administrator account, they can then exploit the vulnerability to compromise the security of the system.
We have already fixed the vulnerability in the…
Opis źródłowy NVD · ENCVSS 8,4 · EPSS 0,13 % · rekomendacja wg zapisanej polityki
In apu, there is a possible memory corruption due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS11249004; Issue ID: MSV-9170.
Opis źródłowy NVD · ENCVSS 8,4 · EPSS 0,13 % · rekomendacja wg zapisanej polityki
In Video HAL, there is a possible escalation of privilege due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS11375674; Issue ID: MSV-9571.
Opis źródłowy NVD · ENCVSS 8,4 · EPSS 0,13 % · rekomendacja wg zapisanej polityki
In neuropilot, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS11249050; Issue ID: MSV-9172.
Opis źródłowy NVD · ENCVSS 8,4 · EPSS 0,13 % · rekomendacja wg zapisanej polityki
In neuropilot, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS11249062; Issue ID: MSV-9171.
Opis źródłowy NVD · ENCVSS 8,4 · EPSS 0,13 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
of: reserved_mem: prevent OOB when too many dynamic regions are defined
On boot, fdt_scan_reserved_mem() saves each dynamically-placed
/reserved-memory subnode into a local array of size
MAX_RESERVED_REGIONS.
If the device tree…
Opis źródłowy NVD · ENCVSS 8,4 · EPSS 0,13 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
Input: focaltech - fix array out-of-bounds in focaltech_process_rel_packet
Make finger2 (and also finger1) unsigned, so that if the finger index in
the packet is 0 then subtracting 1 creates an array index which overflows
above…
Opis źródłowy NVD · ENCVSS 8,4 · EPSS 0,13 % · rekomendacja wg zapisanej polityki
SumatraPDF is a multi-format reader for Windows. In 3.6.1 and earlier, untrusted document paths and PDF link targets are interpolated into notification text that ParseTip() interprets as trusted tip markup. When a user clicks an injected link, ExecuteTipLink() dispatches its CmdExec command and…
Opis źródłowy NVD · ENCVSS 8,4 · EPSS 0,13 % · rekomendacja wg zapisanej polityki
Vulnerability in the Oracle Solaris product of Oracle Systems (component: Utility). Supported versions that are affected are 11.3 and 11.4. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle Solaris executes to compromise Oracle…
Opis źródłowy NVD · ENCVSS 8,4 · EPSS 0,13 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
Revert "thermal/drivers/hwmon: Cleanup coding style a bit"
Revert commit 030a48b0f6ce ("thermal/drivers/hwmon: Cleanup coding style
a bit") that introduced a use-after-free into the error path of
thermal_add_hwmon_sysfs() by…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,4 · EPSS 0,14 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
bpf, sockmap: Fix sk_redir use-after-free in send verdict
sk_psock_msg_verdict() takes a socket reference for psock->sk_redir.
tcp_bpf_send_verdict() copies that pointer while holding the source socket
lock, but does not take a…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,4 · EPSS 0,14 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
i2c: imx: Cancel hrtimer before clearing slave pointer
In i2c_imx_unreg_slave(), the slave pointer is set to NULL after
disabling interrupts. However, a pending interrupt might already
have started the hrtimer…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,4 · EPSS 0,14 % · rekomendacja wg zapisanej polityki
Incorrect default permissions in some firmware for the Intel(R) Arc(TM) B-series GPUs within Ring 1: Device Drivers may allow an escalation of privilege. System software adversary with a privileged user combined with a low complexity attack may enable escalation of privilege. This result may…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,4 · EPSS 0,14 % · rekomendacja wg zapisanej polityki
DigitalCanion has discovered a path traversal vulnerability that allows to view or download sensitive system files over the portal https://<ip>:8443 via menus Administration -> View Logs
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,4 · EPSS 0,14 % · rekomendacja wg zapisanej polityki
OP-TEE OS through 4.10.0, fixed in commit 8794043, contains a use-after-free vulnerability in the Trusted Application loader that allows attackers with the ability to load a signed Trusted Application to corrupt secure-world kernel memory by setting the TA_FLAG_CONCURRENT flag in a user TA signed…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,4 · EPSS 0,14 % · rekomendacja wg zapisanej polityki
An incorrect permission assignment for critical resource vulnerability has been reported to affect Download Station. If a local attacker gains an administrator account, they can then exploit the vulnerability to compromise the security of the system.
We have already fixed the vulnerability in the…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,4 · EPSS 0,13 % · rekomendacja wg zapisanej polityki
In apu, there is a possible memory corruption due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS11249004; Issue ID: MSV-9170.
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,4 · EPSS 0,13 % · rekomendacja wg zapisanej polityki
In Video HAL, there is a possible escalation of privilege due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS11375674; Issue ID: MSV-9571.
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,4 · EPSS 0,13 % · rekomendacja wg zapisanej polityki
In neuropilot, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS11249050; Issue ID: MSV-9172.
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,4 · EPSS 0,13 % · rekomendacja wg zapisanej polityki
In neuropilot, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS11249062; Issue ID: MSV-9171.
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,4 · EPSS 0,13 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
of: reserved_mem: prevent OOB when too many dynamic regions are defined
On boot, fdt_scan_reserved_mem() saves each dynamically-placed
/reserved-memory subnode into a local array of size
MAX_RESERVED_REGIONS.
If the device tree…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,4 · EPSS 0,13 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
Input: focaltech - fix array out-of-bounds in focaltech_process_rel_packet
Make finger2 (and also finger1) unsigned, so that if the finger index in
the packet is 0 then subtracting 1 creates an array index which overflows
above…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,4 · EPSS 0,13 % · rekomendacja wg zapisanej polityki
SumatraPDF is a multi-format reader for Windows. In 3.6.1 and earlier, untrusted document paths and PDF link targets are interpolated into notification text that ParseTip() interprets as trusted tip markup. When a user clicks an injected link, ExecuteTipLink() dispatches its CmdExec command and…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,4 · EPSS 0,13 % · rekomendacja wg zapisanej polityki
Vulnerability in the Oracle Solaris product of Oracle Systems (component: Utility). Supported versions that are affected are 11.3 and 11.4. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle Solaris executes to compromise Oracle…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,4 · EPSS 0,13 % · rekomendacja wg zapisanej polityki