Valentina Palmiotti

يحتوي برنامج تشغيل شاشة NVIDIA لنظام Linux على حالة تضارب قد تسمح لمهاجم محلي بتصعيد الامتيازات. قد يؤدي استغلال هذه الثغرة إلى تنفيذ التعليمات البرمجية، وتصعيد الامتيازات، وتزوير البيانات، وحجب الخدمة، وكشف المعلومات. تحدث حالة التنافس عندما تصل عدة عمليات أو خيوط إلى موارد مشتركة في وقت واحد، مما يؤدي إلى سلوك غير متوقع وانتهاكات أمنية محتملة.

The issue is related to a use-after-free vulnerability in the Microsoft Streaming Service of Windows operating systems, which can allow an attacker to elevate their privileges. This vulnerability can be exploited locally.

An elevation-of-privilege issue exists in the Microsoft Streaming Service Proxy for Windows operating systems. The flaw is caused by a memory buffer overflow, which occurs when an operation exceeds the allocated memory boundaries. A successful exploit could allow an attacker to increase their privilege level on the affected system.

The issue is related to the SPNEGO Extended Negotiation (NEGOEX) security mechanism in Microsoft Windows, which can lead to information disclosure. It allows remote attackers to execute arbitrary code and affect the system. The vulnerability can be exploited through various Windows application protocols that authenticate, such as RDP and SMB.

The issue is related to a buffer overflow in the loop rw iter function in the Linux kernel's io uring subsystem, allowing local users to gain privileges. This is due to an error in the implementation of the io uring interface, leading to access to already freed memory blocks. The vulnerability can be exploited to create a working exploit, allowing for privilege escalation.