Amazon Linux 2 : python38 (ALASPYTHON3.8-2023-009)

The version of python38 installed on the remote host is prior to 3.8.5-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2PYTHON3.8-2023-009 advisory. The CryptProtectMemory function in cng.sys aka the Cryptography Next Generation driver in the kernel- mode driver...

Medium: python38

Issue Overview: The CryptProtectMemory function in cng.sys aka the Cryptography Next Generation driver in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, an...

CVE-2023-35340

Windows CNG Key Isolation Service Elevation of Privilege Vulnerability...

Privilege escalation

Windows CNG Key Isolation Service Elevation of Privilege Vulnerability...

CVE-2023-35340 Windows CNG Key Isolation Service Elevation of Privilege Vulnerability

...

CVE-2023-35340

Microsoft Windows CVE-2023-35340 affects the CNG Key Isolation Service and is a local elevation-of-privilege vulnerability. It has a CVSS v3.1 base score of 7.8 (AV:L, AC:H, PR:L, UI:N, S:C, C:H, I:H, A:H). The provided documents identify the affected component and impact but do not include explo...

CVE-2023-35340: Sensitive Data Storage in Improperly Locked Memory

Windows CNG Key Isolation Service Elevation of Privilege Vulnerability...

CVE-2023-28229

Windows CNG Key Isolation Service Elevation of Privilege Vulnerability...

Privilege escalation

Windows CNG Key Isolation Service Elevation of Privilege Vulnerability...

CVE-2023-28229

CVE-2023-28229 is a Windows vulnerability in the Cryptographic Next Generation (CNG) Key Isolation Service described as a privilege-escalation flaw. The CVE entry is linked to active exploitation in practice (CISA KEV) and is categorized with a high impact vector (local access, total impact on co...

Microsoft Windows CNG Key Isolation Service 安全漏洞

Microsoft Windows is a suite of operating systems for personal devices from Microsoft Corporation USA. A security vulnerability exists in the Microsoft Windows CNG Key Isolation Service. The following products and editions are affected: Windows 10 Version 20H2 for ARM64-based Systems,Windows 11...

PT-2023-2465

Name of the Vulnerable Software and Affected Versions Microsoft Windows affected versions not specified Description The issue is related to an elevation-of-privilege vulnerability in the Windows CNG Key Isolation Service. This vulnerability is caused by synchronization errors when using a shared...

CVE-2023-28229: Sensitive Data Storage in Improperly Locked Memory

Windows CNG Key Isolation Service Elevation of Privilege Vulnerability...

CVE-2022-41125 Windows CNG Key Isolation Service Elevation of Privilege Vulnerability

...

CVE-2022-41125

CVE-2022-41125 affects Windows CNG Key Isolation Service (Windows Cryptographic Next Generation). The underlying issue is an Elevation of Privilege in that service, enabling an authenticated attacker to gain SYSTEM privileges. Patch guidance is to install the Microsoft updates for this CVE (per M...

CVE-2022-41125 Windows CNG Key Isolation Service Elevation of Privilege Vulnerability

...

CVE-2022-41125: Out-of-bounds Write

Windows CNG Key Isolation Service Elevation of Privilege Vulnerability...

Windows CNG Key Isolation Service Elevation of Privilege Vulnerability

...

Microsoft Windows CNG Key Isolation Service Privilege Escalation Vulnerability

Microsoft Windows Cryptographic Next Generation CNG Key Isolation Service contains an unspecified vulnerability that allows an attacker to gain SYSTEM-level privileges...

Microsoft Windows CNG Key Isolation Service Elevation of Privilege (CVE-2022-41125)

An elevation of privilege vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...