Vulnerabilities (CVE)

Memory corruption while handling IOCTL call from user-space to set latency level.

Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability

An malicious BLE device can crash BLE victim device by sending malformed gatt packet

A buffer over-read in Ivanti Secure Access Client before 22.7R4 allows a local unauthenticated attacker to cause a denial of service.

Transient DOS while parsing a protected 802.11az Fine Time Measurement (FTM) frame.

Memory corruption while processing FIPS encryption or decryption validation functionality IOCTL call.

Memory corruption while processing FIPS encryption or decryption IOCTL call invoked from user-space.

Transient DOS can occur when GVM sends a specific message type to the Vdev-FastRPC backend.

Transient DOS while processing an improperly formatted 802.11az Fine Time Measurement protocol frame.

Transient DOS while processing channel information for speaker protection v2 module in ADSP.

Information Disclosure while processing IOCTL request in FastRPC.

Information Disclosure while invoking the mailbox write API when message received from user is larger than mailbox size.

Information disclosure while processing IOCTL call made for releasing a trusted VM process release or opening a channel without initializing the process.

information disclosure while invoking the mailbox read API.

Transient DOS while processing an improperly formatted Fine Time Measurement (FTM) management frame.

In multiple functions that process 802.11 frames, out-of-bounds reads can occur due to insufficient validation.

An unsigned integer underflow vulnerability in IPA driver result into a buffer over-read while reading NAT entry using debugfs command 'cat /sys/kernel/debug/ipa/ip4_nat'

Windows Remote Access Connection Manager Information Disclosure Vulnerability

Windows Remote Access Connection Manager Information Disclosure Vulnerability

Windows Remote Access Connection Manager Information Disclosure Vulnerability

Windows Remote Access Connection Manager Information Disclosure Vulnerability

Windows USB Print Driver Elevation of Privilege Vulnerability

Windows Common Log File System Driver Elevation of Privilege Vulnerability

Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability

Windows Kernel Information Disclosure Vulnerability

Microsoft Edge (Chromium-based) Tampering Vulnerability

Windows Cloud Files Mini Filter Driver Information Disclosure Vulnerability

Windows Kernel Elevation of Privilege Vulnerability

Transient DOS while handling PS event when Program Service name length offset value is set to 255.

Memory corruption when allocating and accessing an entry in an SMEM partition continuously.

Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability

Information disclosure as NPU firmware can send invalid IPC message to NPU driver as the driver doesn`t validate the IPC message received from the firmware.

Transient DOS while parsing the multiple MBSSID IEs from the beacon, when the tag length is non-zero value but with end of beacon.

Transient DOS when driver accesses the ML IE memory and offset value is incremented beyond ML IE length.

Transient DOS while parsing the MBSSID IE from the beacons, when the MBSSID IE length is zero.

Transient DOS during music playback of ALAC content.

Information disclosure while handling beacon probe frame during scan entry generation in client side.

Transient DOS while decoding attach reject message received by UE, when IEI is set to ESM_IEI.

FreeRTOS-Plus-TCP is a lightweight TCP/IP stack for FreeRTOS. FreeRTOS-Plus-TCP versions 4.0.0 through 4.1.0 contain a buffer over-read issue in the DNS Response Parser when parsing domain names in a DNS response. A carefully crafted DNS response with domain name length value greater than the actual domain name length, could cause the parser to read beyond the DNS response buffer. This issue affects applications using DNS functionality of the FreeRTOS-Plus-TCP stack. Applications that do not use ... FreeRTOS-Plus-TCP is a lightweight TCP/IP stack for FreeRTOS. FreeRTOS-Plus-TCP versions 4.0.0 through 4.1.0 contain a buffer over-read issue in the DNS Response Parser when parsing domain names in a DNS response. A carefully crafted DNS response with domain name length value greater than the actual domain name length, could cause the parser to read beyond the DNS response buffer. This issue affects applications using DNS functionality of the FreeRTOS-Plus-TCP stack. Applications that do not use DNS functionality are not affected, even when the DNS functionality is enabled. This vulnerability has been patched in version 4.1.1.

Show More