Microsoft Windows HEVC Video Extension from Device Manufacturer RCE (August 2023)

The Windows 'HEVC from Device Manufacturer' app installed on the remote host is affected by a remote code execution vulnerability. An attacker who successfully exploits this vulnerability could execute arbitrary code. Exploitation of the vulnerability requires that a program process a specially...

CVE-2023-38170

creationtimestamp| type| source ---|---|--- 2023-08-08 22:20:28+00:00| seen| https://t.me/cibsecurity/68051...

CVE-2023-38170

HEVC Video Extensions Remote Code Execution Vulnerability...

CVE-2023-38170 HEVC Video Extensions Remote Code Execution Vulnerability

...

CVE-2023-38170

CVE-2023-38170 concerns the HEVC Video Extensions component on Windows. The vulnerability is a remote code execution issue tied to the HEVC Video Extensions, with the CVSSv3.1 vector indicating a local attack requiring user interaction and potential for arbitrary code execution with high impact (...

CVE-2023-38170 HEVC Video Extensions Remote Code Execution Vulnerability

...

KLA51710 Multiple vulnerabilities in Microsoft Windows

Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to gain privileges, execute arbitrary code, obtain sensitive information, bypass security restrictions, cause denial of service. Below is a complete list of vulnerabilities: 1. An elevation...