Ubuntu Security Notices
سهشنبه ۲۱ مهر ۱۴۰۵ · ۱۸:۳۹
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - S390 architecture; - IIO ADC drivers; - Multiple devices driver; - PCI subsystem; - VFIO drivers; - Network file system (NFS) server daemon; - Overlay file system; - IPv6 networking; - Netfilter; (CVE-2024-53194, CVE-2024-53214, CVE-2024-…
Ubuntu Security Notices
سهشنبه ۲۱ مهر ۱۴۰۵ · ۱۸:۲۴
It was discovered that some AMD processors did not properly perform Reverse Map Table (RMP) checks when the IOMMU accessed certain host buffers. A local attacker with hypervisor access could possibly use this to trigger an out-of-bounds condition and compromise the integrity of SEV-SNP guest memory. (CVE-2023-20585) Several security issues were discovered in the Linux kernel. An attacker could possibly use these to c…
Microsoft Security Response Center
سهشنبه ۲۱ مهر ۱۴۰۵ · ۱۷:۳۰
Incorrect permission assignment for critical resource in Windows Mobile Broadband allows an authorized attacker to elevate privileges locally.
Microsoft Security Response Center
سهشنبه ۲۱ مهر ۱۴۰۵ · ۱۷:۳۰
Missing authentication for critical function in Windows Health and Optimized Experiences Service allows an authorized attacker to disclose information locally.
Microsoft Security Response Center
سهشنبه ۲۱ مهر ۱۴۰۵ · ۱۷:۳۰
Out-of-bounds read in Windows Hyper-V allows an authorized attacker to disclose information locally.
Microsoft Security Response Center
سهشنبه ۲۱ مهر ۱۴۰۵ · ۱۷:۳۰
Out-of-bounds read in Active Directory Domain Services allows an authorized attacker to deny service over a network.
Microsoft Security Response Center
سهشنبه ۲۱ مهر ۱۴۰۵ · ۱۷:۳۰
Improper access control in Windows Error Reporting allows an authorized attacker to disclose information locally.
Microsoft Security Response Center
سهشنبه ۲۱ مهر ۱۴۰۵ · ۱۷:۳۰
Weak authentication in Windows Modern Device Management (MDM) allows an authorized attacker to perform tampering locally.
Microsoft Security Response Center
سهشنبه ۲۱ مهر ۱۴۰۵ · ۱۷:۳۰
Missing authentication for critical function in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally.
Microsoft Security Response Center
سهشنبه ۲۱ مهر ۱۴۰۵ · ۱۷:۳۰
Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally.
Microsoft Security Response Center
سهشنبه ۲۱ مهر ۱۴۰۵ · ۱۷:۳۰
Heap-based buffer overflow in Windows Media allows an authorized attacker to elevate privileges locally.
Microsoft Security Response Center
سهشنبه ۲۱ مهر ۱۴۰۵ · ۱۷:۳۰
Out-of-bounds read in Windows Local Security Authority Subsystem Service (LSASS) allows an authorized attacker to deny service over a network.
Microsoft Security Response Center
سهشنبه ۲۱ مهر ۱۴۰۵ · ۱۷:۳۰
Null pointer dereference in Active Directory Domain Services allows an authorized attacker to deny service over a network.
Microsoft Security Response Center
سهشنبه ۲۱ مهر ۱۴۰۵ · ۱۷:۳۰
Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally.
Microsoft Security Response Center
سهشنبه ۲۱ مهر ۱۴۰۵ · ۱۷:۳۰
Access of resource using incompatible type ('type confusion') in DNS Server allows an unauthorized attacker to execute code over a network.
Microsoft Security Response Center
سهشنبه ۲۱ مهر ۱۴۰۵ · ۱۷:۳۰
Heap-based buffer overflow in Windows Media allows an authorized attacker to elevate privileges locally.
Microsoft Security Response Center
سهشنبه ۲۱ مهر ۱۴۰۵ · ۱۷:۳۰
Use after free in Windows Smart Card allows an authorized attacker to elevate privileges locally.
Microsoft Security Response Center
سهشنبه ۲۱ مهر ۱۴۰۵ · ۱۷:۳۰
Improper access control in Windows Geotag Broker allows an authorized attacker to elevate privileges locally.
Microsoft Security Response Center
سهشنبه ۲۱ مهر ۱۴۰۵ · ۱۷:۳۰
Heap-based buffer overflow in Windows Client-Side Caching (CSC) Service allows an authorized attacker to elevate privileges locally.
Microsoft Security Response Center
سهشنبه ۲۱ مهر ۱۴۰۵ · ۱۷:۳۰
Integer underflow (wrap or wraparound) in Windows PowerShell allows an unauthorized attacker to execute code over a network.
Microsoft Security Response Center
سهشنبه ۲۱ مهر ۱۴۰۵ · ۱۷:۳۰
Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
Microsoft Security Response Center
سهشنبه ۲۱ مهر ۱۴۰۵ · ۱۷:۳۰
Null pointer dereference in Windows Audio Service allows an authorized attacker to disclose information locally.
Microsoft Security Response Center
سهشنبه ۲۱ مهر ۱۴۰۵ · ۱۷:۳۰
Out-of-bounds read in Windows IKE Extension allows an authorized attacker to disclose information over a network.
Microsoft Security Response Center
سهشنبه ۲۱ مهر ۱۴۰۵ · ۱۷:۳۰
Out-of-bounds read in Windows Local Security Authority Subsystem Service (LSASS) allows an unauthorized attacker to deny service over a network.
Microsoft Security Response Center
سهشنبه ۲۱ مهر ۱۴۰۵ · ۱۷:۳۰
Time-of-check time-of-use (toctou) race condition in Windows Setup Files Cleanup allows an authorized attacker to elevate privileges locally.
Microsoft Security Response Center
سهشنبه ۲۱ مهر ۱۴۰۵ · ۱۷:۳۰
Time-of-check time-of-use (toctou) race condition in Windows SmartScreen allows an authorized attacker to disclose information locally.
Microsoft Security Response Center
سهشنبه ۲۱ مهر ۱۴۰۵ · ۱۷:۳۰
Url redirection to untrusted site ('open redirect') in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack.
Microsoft Security Response Center
سهشنبه ۲۱ مهر ۱۴۰۵ · ۱۷:۳۰
Insufficient granularity of access control in Windows Server Update Service allows an authorized attacker to elevate privileges locally.
Microsoft Security Response Center
سهشنبه ۲۱ مهر ۱۴۰۵ · ۱۷:۳۰
Insufficient granularity of access control in Windows Server Update Service allows an authorized attacker to elevate privileges locally.
Microsoft Security Response Center
سهشنبه ۲۱ مهر ۱۴۰۵ · ۱۷:۳۰
Use of hard-coded credentials in Windows Update Orchestrator Service allows an authorized attacker to bypass a security feature locally.
