Alertes de sécurité

.NET and Visual Studio Denial of Service Vulnerability

.NET and Visual Studio Information Disclosure Vulnerability

Apache Portable Runtime (APR): Unexpected lax shared memory permissions

Azure Connected Machine Agent Elevation of Privilege Vulnerability

Azure Connected Machine Agent Elevation of Privilege Vulnerability

Azure CycleCloud Remote Code Execution Vulnerability

Azure Health Bot Elevation of Privilege Vulnerability

Azure IoT SDK Remote Code Execution Vulnerability

Azure IoT SDK Remote Code Execution Vulnerability

Azure Managed Instance for Apache Cassandra Elevation of Privilege Vulnerability

Azure Stack Hub Elevation of Privilege Vulnerability

Azure Stack Hub Spoofing Vulnerability

bna: adjust 'name' buf size of bna_tcb and bna_ccb structures

bpf: Fail bpf_timer_cancel when callback is being cancelled

Buffer Overflow vulnerability in the net/bootp.c in DENEX U-Boot from its initial commit in 2002 (3861aa5) up to today on any platform allows an attacker on the local network to leak memory from four up to 32 bytes of memory stored behind the packet to the network depending on the later use of DHCP-provided parameters via crafted DHCP responses.

Clipboard Virtual Channel Extension Remote Code Execution Vulnerability

closures: Change BUG_ON() to WARN_ON()

Double-free in libpcap before 1.10.5 with remote packet capture support.

drm/admgpu: fix dereferencing null pointer context

drm/amd/display: Add null checks for 'stream' and 'plane' before dereferencing

drm/amd/display: Fix null pointer deref in dcn20_resource.c

drm/amd/display: Fix NULL pointer dereference for DTN log in DCN401

drm/amd/display: Skip Recompute DSC Params if no Stream on Link

drm/amdgpu: Fixed bug on error when unloading amdgpu

drm/i915: Fix potential context UAFs

drm/i915/gt: Cleanup partial engine discovery failures

Expired Pointer Dereference in Wireshark

f2fs: assign CURSEG_ALL_DATA_ATGC if blkaddr is valid

f2fs: fix null reference error when checking end of zone

f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC

firmware: cs_dsp: Return error if block header overflows file

fou: remove warn in gue_gro_receive on unsupported protocol

gpio: pca953x: fix pca953x_irq_bus_sync_unlock race

gpio: prevent potential speculation leaks in gpio_device_get_desc()

HPACK table poisoning in gRPC C++, Python & Ruby

jfs: fix null ptr deref in dtInsertEntry

jfs: Fix shift-out-of-bounds in dbDiscardAG

Kernel Streaming Service Driver Elevation of Privilege Vulnerability

Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability

Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability

Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability

kvm: s390: Reject memory region operations for ucontrol VMs

lib: objagg: Fix general protection fault

libceph: fix race between delayed_work() and ceph_monc_stop()

mailbox: mtk-cmdq: Move devm_mbox_controller_register() after devm_pm_runtime_enable()

media: mediatek: vcodec: Handle invalid decoder vsi

media: xc2028: avoid use-after-free in load_firmware_cb()

Microsoft Copilot Studio Information Disclosure Vulnerability

Microsoft DWM Core Library Elevation of Privilege Vulnerability

Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability