Intel Arc Security Vulnerability

Intel Arc is a line of graphics cards from Intel Corporation USA. A security vulnerability exists in Intel Arc that stems from improper access control. An attacker could exploit the vulnerability to cause a denial of service on the system...

Intel Arc Security Vulnerability

Intel Arc is a series of graphics cards from Intel Corporation USA. A security vulnerability exists in Intel Arc, which originates from a faulty protection mechanism. An attacker could exploit this vulnerability to cause a denial of service...

PT-2023-14053 · Intel · Intel Arc Graphics Cards

Name of the Vulnerable Software and Affected Versions: IntelR ArcTM graphics cards A770 and A750 Limited Edition affected versions not specified Description: The issue is related to a protection mechanism failure in some IntelR ArcTM graphics cards, which may allow a privileged user to potentiall...

PT-2023-13668 · Intel · Intel Arc A750 +1

Name of the Vulnerable Software and Affected Versions: IntelR ArcTM graphics cards A770 and A750 Limited Edition versions sold between October 2022 and December 2022 Description: The issue is related to improper access control, which may allow an authenticated user to potentially enable denial of...

CVE-2023-38176

Azure Arc-Enabled Servers Elevation of Privilege Vulnerability...

CVE-2023-38176

Azure Arc-Enabled Servers Elevation of Privilege Vulnerability...

CVE-2023-38176

Azure Arc-Enabled Servers Elevation of Privilege Vulnerability...

Privilege escalation

Azure Arc-Enabled Servers Elevation of Privilege Vulnerability...

CVE-2023-38176

CVE-2023-38176 is an elevation-of-privilege vulnerability in Azure Arc-Enabled Servers. Multiple sources (NVD, CNVD, MSRC advisories, and NCSc) confirm it allows an attacker to gain elevated privileges within the affected Arc environment (Azure Arc-Enabled Servers). The issue is categorized as an...

CVE-2023-38176 Azure Arc-Enabled Servers Elevation of Privilege Vulnerability

...

Azure Arc-Enabled Servers Elevation of Privilege Vulnerability

...

PT-2023-26323 · Microsoft · Azure Arc-Enabled Servers

Name of the Vulnerable Software and Affected Versions: Azure Arc-Enabled Servers affected versions not specified Description: The issue is related to an elevation of privilege vulnerability. There is no information provided about the estimated number of potentially affected devices worldwide or...

Vulnerabilities fixed in Microsoft Azure

Microsoft has fixed vulnerabilities in several Azure components. A malicious party could exploit the vulnerabilities to impersonate another user, potentially gaining access gain access to sensitive data in the victim's context, or execute code with the victim's privileges. Successful exploitation...

Microsoft Azure Arc 安全漏洞

Microsoft Azure is a set of open, enterprise-grade cloud computing platforms from the U.S.-based Microsoft. A privilege full vulnerability exists in Microsoft Azure Arc. An attacker can exploit this vulnerability to gain elevated privileges on the system...

arc-c.ca Cross Site Scripting vulnerability OBB-3549582

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

AZL-26876 CVE-2023-31147 affecting package python-gevent for versions less than 21.1.2-3

c-ares is an asynchronous resolver library. When /dev/urandom or RtlGenRandom are unavailable, c-ares uses rand to generate random numbers used for DNS query ids. This is not a CSPRNG, and it is also not seeded by srand so will generate predictable output. Input from the random number generator i...

CVE-2022-35798

Azure Arc Jumpstart Information Disclosure Vulnerability...

CVE-2022-35798

Azure Arc Jumpstart Information Disclosure Vulnerability...

Information disclosure

Azure Arc Jumpstart Information Disclosure Vulnerability...

CVE-2022-35798

CVE-2022-35798 concerns Azure Arc Jumpstart. In the connected PT-2022-4401 entry, the issue is described as an information-disclosure vulnerability through registration files, potentially allowing an attacker to gain unauthorized access to protected information. Exploitation details, affected ver...