Microsoft Windows ALPC 竞争条件问题漏洞

Microsoft Windows ALPC is an inter-process communication tool for high-speed messaging from Microsoft Corporation USA. A vulnerability exists in Microsoft Windows ALPC due to a competitive condition issue. The following products and editions are affected:Windows 10 Version 21H1 for ARM64-based...

Azure RTOS FileX 数字错误漏洞

Azure RTOS FileX is an open source FAT-compatible file system for Azure RTOS. A security vulnerability exists in Azure RTOS FileX versions prior to 6.2.0, which stems from fault-tolerance features including integer underflow and overflow, and can be exploited to implement a buffer overflow and...

PT-2022-24913 · Microsoft · Azure Rtos Filex

Name of the Vulnerable Software and Affected Versions: Azure RTOS FileX versions prior to 6.2.0 Description: The Fault Tolerant feature of Azure RTOS FileX includes integer under and overflows which may be exploited to achieve buffer overflow and modify memory contents. When a valid log file with...

KB5019081: Windows Server 2022 / Azure Stack HCI 21H2 / 22H2 Security Update (November 2022)

The remote Windows host is missing security update 5019081. It is, therefore, affected by multiple vulnerabilities - AMD: CVE-2022-23824 IBPB and Return Address Predictor Interactions CVE-2022-23824 - Windows Kerberos RC4-HMAC Elevation of Privilege Vulnerability CVE-2022-37966 - Windows Kerberos...

CVE-2022-39343 Azure RTOS FileX vulnerable to Buffer Offerflow

Azure RTOS FileX is a FAT-compatible file system that’s fully integrated with Azure RTOS ThreadX. In versions before 6.2.0, the Fault Tolerant feature of Azure RTOS FileX includes integer under and overflows which may be exploited to achieve buffer overflow and modify memory contents. When a vali...

November 8, 2022 Servicing stack update (KB5020804 )

None None...

Microsoft Windows 安全漏洞

Microsoft Windows is a suite of operating systems for use on personal devices from the U.S.-based Microsoft Corporation Microsoft. A security vulnerability exists in Microsoft Windows Extensible File Allocation. The following products and versions are affected:Windows 10 Version 1809 for 32-bit...

PT-2022-5508 · Microsoft · Azure Iot Edge For Linux On Windows +1

Name of the Vulnerable Software and Affected Versions: Windows Subsystem for Linux WSL2 affected versions not specified Azure IoT Edge for Linux on Windows EFLOW affected versions not specified Description: The issue is related to synchronization errors when using a shared resource in the kernel...

Microsoft Windows 竞争条件问题漏洞

Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft Corporation USA. A competitive conditions issue vulnerability exists in Microsoft Windows Advanced Local Procedure Call. The following products and versions are affected:Windows 10 Version 1607 for...

Microsoft Azure 安全漏洞

Microsoft Azure is a suite of open, enterprise-grade cloud computing platforms from the U.S.-based Microsoft Corporation Microsoft. A security vulnerability exists in Microsoft Azure. An attacker can exploit the vulnerability to elevate privileges. The following products and versions are...

CVE-2022-39343 Azure RTOS FileX vulnerable to Buffer Offerflow

Azure RTOS FileX is a FAT-compatible file system that’s fully integrated with Azure RTOS ThreadX. In versions before 6.2.0, the Fault Tolerant feature of Azure RTOS FileX includes integer under and overflows which may be exploited to achieve buffer overflow and modify memory contents. When a vali...

CVE-2022-39343

Azure RTOS FileX (FAT file system in Azure RTOS ThreadX) prior to version 6.2.0 is affected by an integer underflow/overflow in the Fault Tolerant feature, enabling a potential buffer overflow and memory modification when processing fault-tolerant logs. Specifically, a log entry with FX_FAULT_TOL...

November 8, 2022 Security update (KB5019962)

None None...

Microsoft Windows 竞争条件问题漏洞

Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft Corporation USA. A competitive conditions issue exists in the Microsoft Windows Group Policy Preference Client vulnerability. The following products and editions are affected: Windows 10 Version 22H2 for...

Microsoft Windows 安全漏洞

Microsoft Windows is a suite of operating systems for use on personal devices from the U.S.-based Microsoft Corporation. A security vulnerability exists in Microsoft Windows Mark of the Web MOTW. The following products and versions are affected:Windows 10 Version 1809 for 32-bit Systems,Windows 1...

KLA20046 Multiple vulnerabilities in Microsoft Azure

Multiple vulnerabilities were found in Microsoft Azure. Malicious users can exploit these vulnerabilities to execute arbitrary code, gain privileges. Below is a complete list of vulnerabilities: 1. A remote code execution vulnerability in Azure RTOS GUIX Studio can be exploited remotely to execut...

PT-2022-5640 · Microsoft · Azure Rtos Guix Studio

Name of the Vulnerable Software and Affected Versions: Azure RTOS GUIX Studio affected versions not specified Description: The issue exists due to insufficient input validation in the Azure RTOS GUIX Studio development environment. Exploitation of this issue may allow an attacker to execute...

Microsoft Azure Real Time Operating System 安全漏洞

Microsoft Azure Real Time Operating System Azure RTOS is an embedded development kit from Microsoft Corporation USA that includes a small but powerful operating system that delivers reliable, ultra-fast performance for resource-constrained devices. A security vulnerability exists in Microsoft Azu...

PT-2022-5511 · Microsoft · Azure Cyclecloud

Name of the Vulnerable Software and Affected Versions: Azure CycleCloud affected versions not specified Description: The issue is related to insufficient access controls in Azure CycleCloud, a tool for organizing and managing high-performance computing HPC environments. This can allow a remote...

Vulnerabilities fixed in Microsoft Azure

Vulnerabilities have been fixed in Microsoft Azure. The vulnerabilities allow a malicious party to obtain elevated privileges obtain or to execute arbitrary code under the privileges of the user. The vulnerabilities marked CVE-2022-3602 and CVE-2022-3786 are located in OpenSSL and were previously...