Security Warnings — Week: 2024-W50

tipc: Fix use-after-free of kernel socket in cleanup_bearer().

2024-12-10 CVE-2024-56642

highMicrosoft MSRC 2024-W50

ubifs: authentication: Fix use-after-free in ubifs_tnc_end_commit

2024-12-10 CVE-2024-53171

highMicrosoft MSRC 2024-W50

udmabuf: fix memory leak on last export_udmabuf() error path

2024-12-10 CVE-2024-56712

lowMicrosoft MSRC 2024-W50

Unbounded memory buffering in SelectorSocketTransport.writelines()

2024-12-10 CVE-2024-12254

highMicrosoft MSRC 2024-W50

usb: dwc3: gadget: Fix looping of queued SG entries

2024-12-10 CVE-2024-56698

mediumMicrosoft MSRC 2024-W50

usb: gadget: u_serial: Fix the issue that gs_start_io crashed due to accessing null pointer

2024-12-10 CVE-2024-56670

mediumMicrosoft MSRC 2024-W50

usb: typec: fix potential array underflow in ucsi_ccg_sync_control()

2024-12-10 CVE-2024-53203

highMicrosoft MSRC 2024-W50

vdpa: solidrun: Fix UB bug with devres

2024-12-10 CVE-2024-53126

highMicrosoft MSRC 2024-W50

virtio/vsock: Fix accept_queue memory leak

2024-12-10 CVE-2024-53119

mediumMicrosoft MSRC 2024-W50

virtiofs: use pages instead of pointer for kernel direct IO

2024-12-10 CVE-2024-53219

mediumMicrosoft MSRC 2024-W50

Vitess allows HTML injection in /debug/querylogz & /debug/env

2024-12-10 CVE-2024-53257

mediumMicrosoft MSRC 2024-W50

vp_vdpa: fix id_table array not null terminated error

2024-12-10 CVE-2024-53110

mediumMicrosoft MSRC 2024-W50

wifi: ath12k: fix crash when unbinding

2024-12-10 CVE-2024-53188

mediumMicrosoft MSRC 2024-W50

wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service()

2024-12-10 CVE-2024-53156

highMicrosoft MSRC 2024-W50

wifi: nl80211: fix NL80211_ATTR_MLO_LINK_ID off-by-one

2024-12-10 CVE-2024-56663

highMicrosoft MSRC 2024-W50

wifi: rtlwifi: Drastically reduce the attempts to read efuse in case of failures

2024-12-10 CVE-2024-53190

mediumMicrosoft MSRC 2024-W50

Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

2024-12-10 CVE-2024-49114

highMicrosoft MSRC 2024-W50

Windows Common Log File System Driver Elevation of Privilege Vulnerability

2024-12-10 CVE-2024-49088

highMicrosoft MSRC 2024-W50

Windows Common Log File System Driver Elevation of Privilege Vulnerability

2024-12-10 CVE-2024-49090

highMicrosoft MSRC 2024-W50

Windows Common Log File System Driver Elevation of Privilege Vulnerability

2024-12-10 CVE-2024-49138

highMicrosoft MSRC 2024-W50

Windows Defender Information Disclosure Vulnerability

2024-12-10 CVE-2024-49071

mediumMicrosoft MSRC 2024-W50

Windows Domain Name Service Remote Code Execution Vulnerability

2024-12-10 CVE-2024-49091

highMicrosoft MSRC 2024-W50

Windows File Explorer Information Disclosure Vulnerability

2024-12-10 CVE-2024-49082

mediumMicrosoft MSRC 2024-W50

Windows Hyper-V Remote Code Execution Vulnerability

2024-12-10 CVE-2024-49117

highMicrosoft MSRC 2024-W50

Windows IP Routing Management Snapin Remote Code Execution Vulnerability

2024-12-10 CVE-2024-49080

highMicrosoft MSRC 2024-W50

Windows Kernel Elevation of Privilege Vulnerability

2024-12-10 CVE-2024-49084

highMicrosoft MSRC 2024-W50

Windows Kernel-Mode Driver Elevation of Privilege Vulnerability

2024-12-10 CVE-2024-49074

highMicrosoft MSRC 2024-W50

Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability

2024-12-10 CVE-2024-49113

highMicrosoft MSRC 2024-W50

Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability

2024-12-10 CVE-2024-49121

highMicrosoft MSRC 2024-W50

Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability

2024-12-10 CVE-2024-49112

criticalMicrosoft MSRC 2024-W50

Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability

2024-12-10 CVE-2024-49127

highMicrosoft MSRC 2024-W50

Windows Local Security Authority Subsystem Service (LSASS) Remote Code Execution Vulnerability

2024-12-10 CVE-2024-49126

highMicrosoft MSRC 2024-W50

Windows Mobile Broadband Driver Elevation of Privilege Vulnerability

2024-12-10 CVE-2024-49073

mediumMicrosoft MSRC 2024-W50

Windows Mobile Broadband Driver Elevation of Privilege Vulnerability

2024-12-10 CVE-2024-49077

mediumMicrosoft MSRC 2024-W50

Windows Mobile Broadband Driver Elevation of Privilege Vulnerability

2024-12-10 CVE-2024-49078

mediumMicrosoft MSRC 2024-W50

Windows Mobile Broadband Driver Elevation of Privilege Vulnerability

2024-12-10 CVE-2024-49083

mediumMicrosoft MSRC 2024-W50

Windows Mobile Broadband Driver Elevation of Privilege Vulnerability

2024-12-10 CVE-2024-49092

mediumMicrosoft MSRC 2024-W50

Windows Mobile Broadband Driver Elevation of Privilege Vulnerability

2024-12-10 CVE-2024-49110

mediumMicrosoft MSRC 2024-W50

Windows Mobile Broadband Driver Information Disclosure Vulnerability

2024-12-10 CVE-2024-49087

mediumMicrosoft MSRC 2024-W50

Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability

2024-12-10 CVE-2024-49095

highMicrosoft MSRC 2024-W50

Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability

2024-12-10 CVE-2024-49097

highMicrosoft MSRC 2024-W50

Windows Remote Desktop Gateway (RD Gateway) Denial of Service Vulnerability

2024-12-10 CVE-2024-49129

highMicrosoft MSRC 2024-W50

Windows Remote Desktop Services Denial of Service Vulnerability

2024-12-10 CVE-2024-49075

highMicrosoft MSRC 2024-W50

Windows Remote Desktop Services Remote Code Execution Vulnerability

2024-12-10 CVE-2024-49106

highMicrosoft MSRC 2024-W50

Windows Remote Desktop Services Remote Code Execution Vulnerability

2024-12-10 CVE-2024-49108

highMicrosoft MSRC 2024-W50

Windows Remote Desktop Services Remote Code Execution Vulnerability

2024-12-10 CVE-2024-49115

highMicrosoft MSRC 2024-W50

Windows Remote Desktop Services Remote Code Execution Vulnerability

2024-12-10 CVE-2024-49116

highMicrosoft MSRC 2024-W50

Windows Remote Desktop Services Remote Code Execution Vulnerability

2024-12-10 CVE-2024-49119

highMicrosoft MSRC 2024-W50

Windows Remote Desktop Services Remote Code Execution Vulnerability

2024-12-10 CVE-2024-49120

highMicrosoft MSRC 2024-W50

Windows Remote Desktop Services Remote Code Execution Vulnerability

2024-12-10 CVE-2024-49123

highMicrosoft MSRC 2024-W50

Windows Remote Desktop Services Remote Code Execution Vulnerability

2024-12-10 CVE-2024-49128

highMicrosoft MSRC 2024-W50

Windows Remote Desktop Services Remote Code Execution Vulnerability

2024-12-10 CVE-2024-49132

highMicrosoft MSRC 2024-W50

Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability

2024-12-10 CVE-2024-49093

highMicrosoft MSRC 2024-W50

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

2024-12-10 CVE-2024-49085

highMicrosoft MSRC 2024-W50

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

2024-12-10 CVE-2024-49086

highMicrosoft MSRC 2024-W50

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

2024-12-10 CVE-2024-49089

highMicrosoft MSRC 2024-W50

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

2024-12-10 CVE-2024-49102

highMicrosoft MSRC 2024-W50

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

2024-12-10 CVE-2024-49104

highMicrosoft MSRC 2024-W50

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

2024-12-10 CVE-2024-49125

highMicrosoft MSRC 2024-W50

Windows Task Scheduler Elevation of Privilege Vulnerability

2024-12-10 CVE-2024-49072

highMicrosoft MSRC 2024-W50