CVE-2024-38127 Windows Hyper-V Elevation of Privilege Vulnerability

...

CVE-2024-38127

CVE-2024-38127 is a Windows Hyper-V Elevation of Privilege vulnerability. The initial description identifies it as a Windows Hyper-V EoP with local attack vector, low privileges required, no user interaction, and an impact of high confidentiality, integrity, and availability. The CVSS 3.1 vector ...

CVE-2023-38127

creationtimestamp| type| source ---|---|--- 2023-10-19 22:34:52+00:00| seen| https://t.me/cibsecurity/72610 2024-03-24 17:54:38+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/10206...

CVE-2023-38127

An integer overflow exists in the "HyperLinkFrame" stream parser of Ichitaro 2023 1.0.1.59372. A specially crafted document can cause the parser to make an under-sized allocation, which can later allow for memory corruption, potentially resulting in arbitrary code execution. An attacker can provi...

CVE-2023-38127

CVE-2023-38127 : An integer overflow in Ichitaro 2023 (version 1.0.1.59372) HyperLinkFrame stream parsing can cause an under-sized allocation, enabling memory corruption and potential arbitrary code execution via a crafted document. The vulnerability is exposed during parsing of the DocumentViewS...

SUSE: Security Advisory (SUSE-SU-2022:4277-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2022:4146-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2022-38127

creationtimestamp| type| source ---|---|--- 2022-09-02 00:38:21+00:00| seen| https://t.me/cibsecurity/49199...

CVE-2022-38127

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...

CVE-2022-38127

CVE-2022-38127 is associated with GNU Binutils (binutils) and specifically affects the read_and_display_attr_value() path in binutils/dwarf.c, where a NULL pointer dereference was reported. Publicly connected records tie the vulnerability to binutils versions older than 2.37-8, with mitigation by...

CVE-2022-38127

Removed by vendor...

CVE-2021-38127

Potential vulnerabilities have been identified in Micro Focus ArcSight Enterprise Security Manager, affecting versions 7.4.x and 7.5.x. The vulnerabilities could be remotely exploited resulting in Cross-Site Scripting XSS...

CVE-2021-38127

CVE-2021-38127 affects Micro Focus ArcSight Enterprise Security Manager (versions 7.4.x and 7.5.x). The connected sources indicate a remotely exploitable vulnerability leading to Cross-Site Scripting (XSS). The NVD entry and related records provide CVSS metrics: CVSS v3.1 base score 6.1 (NETWORK,...