17066 matches found
Microsoft Windows Print Spooler Components Elevation of Privilege Vulnerability (CNVD-2022-70056)
An elevation of privilege vulnerability exists in Microsoft Windows Print Spooler Components, a print backend processor component of Microsoft Corporation USA. The vulnerability stems from an incorrect program call to a high-level native procedure. An attacker could exploit this vulnerability to...
PT-2022-9738
Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided descriptions. Description A malicious or compromised UApp or ABL may be used by an attacker to issue a malformed system call, which results in mapping sensitive System Management...
CVE-2021-26369: Improper Restriction of Operations within the Bounds of a Memory Buffer
A malicious or compromised UApp or ABL may be used by an attacker to send a malformed system call to the bootloader, resulting in out-of-bounds memory accesses...
DuplicateDump - Dumping LSASS With A Duplicated Handle From Custom LSA Plugin
DuplicateDump is a fork of MirrorDump with following modifications: DInovke implementation LSA plugin DLL written in C++ which could be clean up after dumping LSASS. MirrorDump compile LSA plugin as .NET assembly which would not be unloaded by LSASS process. That's why MirrorDump failed to delete...
Design/Logic Flaw
Due to an insecure direct object reference vulnerability in Gitlab EE/CE affecting all versions from 11.0 prior to 14.8.6, 14.9 prior to 14.9.4, and 14.10 prior to 14.10.1, an endpoint may reveal the issue title to a user who crafted an API call with the ID of the issue from a public project that...
CVE-2022-1352
Removed by vendor...
CVE-2022-1352
GitLab EE/CE is affected by CVE-2022-1352 due to an insecure direct object reference. Versions affected: 11.0 and newer up to but excluding 14.8.6 (i.e., 11.0–14.8.5), 14.9 until before 14.9.4 (i.e., 14.9.0–14.9.3), and 14.10 until before 14.10.1 (i.e., 14.10.0). The vulnerability allows an endpo...
Arbitrage Bots Could Extract Value From Buyer of Call Options
Lines of code Vulnerability details Impact Arbitrage bots could monitor the Cally contract and the price of the underlying asset being auctioned for all vaults that have outstanding call options, and whenever the underlying asset price rises above the strike price of the outstanding call option,...
Google Go Permission Licensing and Access Control Vulnerabilities
Google Go is a static strongly typed, compiled, concatenated, and garbage-collected programming language from Google, Inc. Google go suffers from a privilege-permission and access-control issue vulnerability that stems from a checking error in accessat in a system call...
CVE-2022-22019
Remote Procedure Call Runtime Remote Code Execution Vulnerability...
CVE-2022-22019
Remote Procedure Call Runtime Remote Code Execution Vulnerability...
CVE-2022-23279
Windows ALPC Elevation of Privilege Vulnerability...
CVE-2022-22019
Remote Procedure Call Runtime Remote Code Execution Vulnerability...
Remote code execution
Remote Procedure Call Runtime Remote Code Execution Vulnerability...
CVE-2022-22019
Technical details for CVE-2022-22019 are not provided in the connected documents. Public details (affected products, exploit info, impact, remediation) are not present here. Monitor for official updates.
CVE-2022-20116
In onEntryUpdated of OngoingCallController.kt, it is possible to launch non-exported activities due to intent redirection. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12...
CVE-2022-20114
In placeCall of TelecomManager.java, there is a possible way for an application to keep itself running with foreground service importance due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed fo...
CVE-2021-26369
A malicious or compromised UApp or ABL may be used by an attacker to send a malformed system call to the bootloader, resulting in out-of-bounds memory accesses...
CVE-2021-26362
A malicious or compromised UApp or ABL may be used by an attacker to issue a malformed system call which results in mapping sensitive System Management Network SMN registers leading to a loss of integrity and availability...