In GED driver, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution pri…
In TEEI driver, there is a possible type confusion due to a race condition. This could lead to local escalation of privilege with System execution pr…
In TEEI driver, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution pr…
In TEEI driver, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution pr…
In MDP, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges…
In GPU, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with no additional execution pri…
Dradis Professional Edition before 4.3.0 allows attackers to change an account password via reusing a password reset token.
Versions of the Amazon AWS Apache Log4j hotpatch package before log4j-cve-2021-44228-hotpatch-1.3.5 are affected by a race condition that could lead …
Windows Hyper-V Remote Code Execution Vulnerability
In ip_check_mc_rcu of igmp.c, there is a possible use after free due to improper locking. This could lead to local escalation of privilege when openi…
In TBD of TBD, there is a possible use-after-free due to a race condition. This could lead to local escalation of privilege in the kernel with System…
In lock_sock_nested of sock.c, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with Syst…
In ipu_core_jqs_msg_transport_kernel_write_sync of ipu-core-jqs-msg-transport.c, there is a possible use-after-free due to a race condition. This cou…
Use after free in graphics fence due to a race condition while closing fence file descriptor and destroy graphics timeline simultaneously in Snapdrag…
x86 pv: Race condition in typeref acquisition Xen maintains a type reference count for pages, in addition to a regular reference count. This scheme i…
An out-of-bounds read flaw was found in the Linux kernel’s TeleTYpe subsystem. The issue occurs in how a user triggers a race condition using ioctls …
Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
Waitress is a Web Server Gateway Interface server for Python 2 and 3. Waitress versions 2.1.0 and 2.1.1 may terminate early due to a thread closing a…
A race condition was addressed with improved locking. This issue is fixed in tvOS 15.5, macOS Monterey 12.4, iOS 15.5 and iPadOS 15.5. An application…
A flaw was found in undertow. The HTTP2SourceChannel fails to write the final frame under some circumstances, resulting in a denial of service. The h…
A race condition vulnerability was reported in IMController, a software component of Lenovo System Interface Foundation, prior to version 1.1.20.3 th…
Windows Digital Media Receiver Elevation of Privilege Vulnerability
In ion_ioctl and related functions of ion.c, there is a possible use after free due to a race condition. This could lead to local escalation of privi…
In several functions of KeyguardServiceWrapper.java and related files,, there is a possible way to briefly view what's under the lockscreen due to a …
In startActivityForAttachedApplicationIfNeeded of RootWindowContainer.java, there is a possible way to overlay an app that believes it's still in the…
In aee driver, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution pri…
In aee driver, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution pri…
A flaw was found in the QXL display device emulation in QEMU. A double fetch of guest controlled values `cursor->header.width` and `cursor->header.he…
A use-after-free flaw was found in the Linux kernel’s sound subsystem in the way a user triggers concurrent calls of PCM hw_params. The hw_free ioctl…