Allgemein – Seite 408

CVE-2022-49610 KVM: VMX: Prevent RSB underflow before vmenter

Information published.

CVE-2022-49562 KVM: x86: Use __try_cmpxchg_user() to update guest PTE A/D bits

Information published.

CVE-2025-59287 Windows Server Update Service (WSUS) Remote Code Execution Vulnerability

To comprehensively address CVE-2025-59287, Microsoft has released an out of band security update for the following supported versions of Windows Server: Windows Server 2012, Windows Server 2012 R2, Windows Server 2016, Windows Server 2019, Windows Server 2022, Windows Server 2022, 23H2 Edition (Server Core installation), and Windows Server 2025. Note that a reboot will be…
Weiterlesen

CVE-2025-59503 Azure Compute Resource Provider Elevation of Privilege Vulnerability

Server-side request forgery (ssrf) in Azure Compute Gallery allows an authorized attacker to elevate privileges over a network.

CVE-2025-59500 Azure Notification Service Elevation of Privilege Vulnerability

Improper access control in Azure Notification Service allows an authorized attacker to elevate privileges over a network.

CVE-2025-59273 Azure Event Grid System Elevation of Privilege Vulnerability

Improper access control in Azure Event Grid allows an unauthorized attacker to elevate privileges over a network.

CVE-2025-55676 Windows USB Video Class System Driver Information Disclosure Vulnerability

Updated acknowledgment. This is an informational change only.

CVE-2025-59295 Windows URL Parsing Remote Code Execution Vulnerability

Added an acknowledgement. This is an informational change only.

Sicherheitslücken: GitLab-Entwickler raten zu zügigem Update

Die Softwareentwicklungsplattform GitLab ist attackierbar. Angreifer können unter anderem DoS-Attacken ausführen.

[UPDATE] [mittel] Red Hat Virtualization Engine: Mehrere Schwachstellen

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in der Red Hat Virtualization Engine ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen, beliebigen Code auszuführen, einen Denial of Service Zustand auszulösen und kryptographische Maßnahmen zu umgehen.

Kategorie: Allgemein