UDP Vulnerability in Windows Deployment Services Allows 0-Click System Crashes

May 6, 2025

UDP Vulnerability in Windows Deployment Services Allows 0-Click System Crashes

A newly discovered vulnerability in Microsoft’s Windows Deployment Services (WDS) allows attackers to remotely crash servers with zero user interaction or authentication.
The flaw, which targets the U …

Published Date:
May 06, 2025 (4 hours, 39 minutes ago)

Vulnerabilities has been mentioned in this article.

CVE-2019-0603

Source: Read More

Previous ArticleOpenAI to Retain Non-Profit Structure, Focus on Societal Impact

Next Article Apache Parquet Java Vulnerability CVE-2025-46762 Exposes Systems to Remote Code Execution Attacks

Highlights

CVE-2025-37777 – KSMbd Use-After-Free Vuln

May 1, 2025

CVE ID : CVE-2025-37777

Published : May 1, 2025, 2:15 p.m. | 1 hour, 10 minutes ago

Description : In the Linux kernel, the following vulnerability has been resolved:

ksmbd: fix use-after-free in __smb2_lease_break_noti()

Move tcp_transport free to ksmbd_conn_free. If ksmbd connection is
referenced when ksmbd server thread terminates, It will not be freed,
but conn->tcp_transport is freed. __smb2_lease_break_noti can be performed
asynchronously when the connection is disconnected. __smb2_lease_break_noti
calls ksmbd_conn_write, which can cause use-after-free
when conn->ksmbd_transport is already freed.

Severity: 0.0 | NA

Visit the link for more details, such as CVSS details, affected products, timeline, and more…

CodeSOD: A Unique Way to Primary Key

BrowserStack launches Figma plugin for detecting accessibility issues in design phase

Parasoft brings agentic AI to service virtualization in latest release

Node.js vs. Python for Backend: 7 Reasons C-Level Leaders Choose Node.js Talent

The best CRM software with email marketing in 2025: Expert tested and reviewed

This multi-port car charger can power 4 gadgets at once – and it’s surprisingly cheap

I’m a wearables editor and here are the 7 Pixel Watch 4 rumors I’m most curious about

8 ways I quickly leveled up my Linux skills – and you can too

The Intersection of Agile and Accessibility – A Series on Designing for Everyone

The Intersection of Agile and Accessibility – A Series on Designing for Everyone

Zero Trust & Cybersecurity Mesh: Your Org’s Survival Guide

Execute Ping Commands and Get Back Structured Data in PHP

A Tomb Raider composer has been jailed — His legacy overshadowed by $75k+ in loan fraud

A Tomb Raider composer has been jailed — His legacy overshadowed by $75k+ in loan fraud

“I don’t think I changed his mind” — NVIDIA CEO comments on H20 AI GPU sales resuming in China following a meeting with President Trump

Galaxy Z Fold 7 review: Six years later — Samsung finally cracks the foldable code

UDP Vulnerability in Windows Deployment Services Allows 0-Click System Crashes

UDP Vulnerability in Windows Deployment Services Allows 0-Click System Crashes

CVE-2025-44658 – Netgear RAX30 PHP-FPM Misconfigured Extension Bypass Vulnerability

CVE-2025-7393 – Drupal Mail Login Authentication Bypass

CVE-2025-1908 – GitLab Information Disclosure and Session Hijacking Vulnerability

CVE-2025-52579 – Emerson ValveLink Information Disclosure

CVE-2025-1991 – IBM Informix Dynamic Server Denial of Service Buffer Overflow

You can now mirror Android’s screen to Windows 11 from the Start menu

CVE-2025-37777 – KSMbd Use-After-Free Vuln

CVE-2025-6948 – GitLab Cross-Site Scripting (XSS) Vulnerability

Commvault says recent breach didn’t impact customer backup data

CVE-2025-5373 – PHPGurukul Online Birth Certificate System SQL Injection Vulnerability

UDP Vulnerability in Windows Deployment Services Allows 0-Click System Crashes

UDP Vulnerability in Windows Deployment Services Allows 0-Click System Crashes

Related Posts