Sicherheitswarnungen

ALSA: firewire-motu: add bounds check in put_user loop for DSP events

ASoC: stm32: sai: fix OF node leak on probe

Azure Connected Machine Agent Elevation of Privilege Vulnerability

Azure Core shared client library for Python Remote Code Execution Vulnerability

Azure Data Explorer Information Disclosure Vulnerability

Azure Logic Apps Elevation of Privilege Vulnerability

block: Use RCU in blk_mq_[un]quiesce_tagset() instead of set->tag_list_lock

Bluetooth: btusb: revert use of devm_kzalloc in btusb

Capability Access Management Service (camsvc) Elevation of Privilege Vulnerability

Capability Access Management Service (camsvc) Elevation of Privilege Vulnerability

Capability Access Management Service (camsvc) Elevation of Privilege Vulnerability

clk: samsung: exynos-clkout: Assign .num before accessing .hws

Copilot Studio Information Disclosure Vulnerability

CoreDNS gRPC/HTTPS/HTTP3 servers lack resource limits, enabling DoS via unbounded connections and oversized messages

Crypt::Sodium::XS module versions prior to 0.000042, for Perl, include a vulnerable version of libsodium

Denial of Service in Keras via Excessive Memory Allocation in HDF5 Metadata

Desktop Window Manager Elevation of Privilege Vulnerability

DirectX Graphics Kernel Elevation of Privilege Vulnerability

DirectX Graphics Kernel Elevation of Privilege Vulnerability

drm/i915/gem: Zero-initialize the eb.vma array in i915_gem_do_execbuffer

e1000: fix OOB in e1000_tbi_should_accept()

ethtool: Avoid overflowing userspace buffer on stats query

f2fs: use global inline_xattr_slab instead of per-sb slab cache

Host Process for Windows Tasks Elevation of Privilege Vulnerability

iavf: fix off-by-one issues in iavf_config_rss_reg()

In MIT Kerberos 5 (aka krb5) before 1.22 (with incremental propagation), there is an integer overflow for a large update size to resize() in kdb_log.c. An authenticated attacker can cause an out-of-bounds write and kadmind daemon crash.

In the eap-mschapv2 plugin (client-side) in strongSwan before 6.0.3, a malicious EAP-MSCHAPv2 server can send a crafted message of size 6 through 8, and cause an integer underflow that potentially results in a heap-based buffer overflow.

Inbox COM Objects (Global Memory) Remote Code Execution Vulnerability

Integer overflow in memalign leads to heap corruption

iommu: disable SVA when CONFIG_X86 is set

iommufd/selftest: Check for overflow in IOMMU_TEST_OP_ADD_RESERVED

irqchip/mchp-eic: Fix error code in mchp_eic_domain_alloc()

ksmbd: fix use-after-free in ksmbd_tree_connect_put under concurrency

ksmbd: skip lock-range check on equal size to avoid size==0 underflow

Libsoup: signed to unsigned conversion error leading to stack-based buffer overflow in libsoup ntlm authentication

media: vidtv: initialize local pointers upon transfer of memory ownership

Microsoft DWM Core Library Elevation of Privilege Vulnerability

Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability

Microsoft Excel Remote Code Execution Vulnerability

Microsoft Excel Remote Code Execution Vulnerability

Microsoft Excel Remote Code Execution Vulnerability

Microsoft Excel Remote Code Execution Vulnerability

Microsoft Excel Remote Code Execution Vulnerability

Microsoft Excel Security Feature Bypass Vulnerability

Microsoft Office Click-To-Run Remote Code Execution Vulnerability

Microsoft Office Remote Code Execution Vulnerability

Microsoft Office Remote Code Execution Vulnerability

Microsoft Office Security Feature Bypass Vulnerability

Microsoft SharePoint Remote Code Execution Vulnerability

Microsoft SharePoint Server Remote Code Execution Vulnerability