312 matches found
Information disclosure
An information disclosure vulnerability exists in the way that the Windows Code Integrity Module handles objects in memory, aka 'Windows Code Integrity Module Information Disclosure Vulnerability'...
CVE-2019-1344
Technical details about CVE-2019-1344 are not publicly provided in the supplied documents. The Connected documents do not include affected products, root cause, impact, or fixes. Monitor for updates from official sources.
CVE-2019-1344
An information disclosure vulnerability exists in the way that the Windows Code Integrity Module handles objects in memory, aka 'Windows Code Integrity Module Information Disclosure Vulnerability'...
Windows Code Integrity Module Information Disclosure Vulnerability
An information disclosure vulnerability exists in the way that the Windows Code Integrity Module handles objects in memory. An attacker who successfully exploited this vulnerability could obtain information to further compromise the user’s system. To exploit the vulnerability, an attacker would...
PT-2019-5507 · Red Hat · Openshift
Name of the Vulnerable Software and Affected Versions: OpenShift versions 4.1 up to 4.3 OpenShift builds affected versions not specified, but includes versions that extract source from a container image Description: The issue is related to a lack of code integrity verification, allowing for...
CVE-2019-10943
CVE-2019-10943 affects Siemens SIMATIC devices including Drive Controller family, ET 200SP Open Controller CPUs 1515SP PC/PC2, S7-1200 CPUs, S7-1500 CPUs and related software/S7-PLCSIM Advanced. Root cause: missing integrity check allows an attacker with network access to port 102/tcp to modify t...
Authorization Bypass
powershell is vulnerable to authorization bypass. The vulnerability exists in Windows which will allow the attacker to bypass device guard where an attacker could circumvent a user mode code integrity policy on the machine...
The vulnerability of the Secure Boot function in Cisco microprogramming devices’ network devices relates to errors in code integrity checking. This vulnerability allows attackers to install malicious software onto these devices.
The vulnerability of the Secure Boot function in Cisco microprogramming devices relates to code integrity checks. Exploiting this vulnerability could allow attackers to install malicious software...
Windows Security Feature Bypass Vulnerability
A security feature bypass vulnerability exists in Windows which could allow an attacker to bypass Device Guard when Windows improperly handles calls to the LUAFV driver luafv.sys. An attacker who successfully exploited this vulnerability could circumvent a User Mode Code Integrity UMCI policy on...
The vulnerability of the Windows operating system, related to insecure management of privileges, allows a perpetrator to circumvent the User Mode Code Integrity Policy (UMCI) on the computer.
The vulnerability of the Windows operating system is related to the insecure management of privileges. Exploiting this vulnerability allows an attacker to circumvent the User Mode Code Integrity Policy UMCI by using a specially crafted application...
The vulnerability of the Windows operating system, related to insecure management of privileges, allows a perpetrator to circumvent the User Mode Code Integrity Policy (UMCI) on the computer.
The vulnerability of the Windows operating system is related to the insecure management of privileges. Exploiting this vulnerability allows an attacker to circumvent the User Mode Code Integrity Policy UMCI by using a specially crafted application...
The vulnerability of the Windows operating system, related to insecure management of privileges, allows a perpetrator to circumvent the User Mode Code Integrity Policy (UMCI).
The vulnerability of the Windows operating system is related to the insecure management of privileges. Exploiting this vulnerability can allow an attacker to bypass the User Mode Code Integrity Policy UMCI...
Windows Security Feature Bypass Vulnerability
A security feature bypass vulnerability exists in Windows which could allow an attacker to bypass Device Guard. An attacker who successfully exploited this vulnerability could circumvent a User Mode Code Integrity UMCI policy on the machine. To exploit the vulnerability, an attacker would first...
Windows Security Feature Bypass Vulnerability
A security feature bypass vulnerability exists in Windows which could allow an attacker to bypass Device Guard. An attacker who successfully exploited this vulnerability could circumvent a User Mode Code Integrity UMCI policy on the machine. To exploit the vulnerability, an attacker would first...
Injecting Code into Windows Protected Processes using COM - Part 2
Posted by James Forshaw, Project Zero In my previous blog I discussed a technique which combined numerous issues I’ve previously reported to Microsoft to inject arbitrary code into a PPL-WindowsTCB process. The techniques presented don’t work for exploiting the older, stronger Protected Processes...
Injecting Code into Windows Protected Processes using COM - Part 1
Posted by James Forshaw, Google Project Zero At Recon Montreal 2018 I presented “Unknown Known DLLs and other Code Integrity Trust Violations” with Alex Ionescu. We described the implementation of Microsoft Windows’ Code Integrity mechanisms and how Microsoft implemented Protected Processes PP. A...
Microsoft Windows Device Guard Local Security Bypass Vulnerability (CNVD-2018-20742)
Microsoft Windows is a series of operating systems released by Microsoft Corporation in the U.S. Device Guard is one of the device protection components. A local security bypass vulnerability exists in Microsoft Windows Device Guard. An attacker can exploit this vulnerability by accessing a local...
Device Guard Code Integrity Policy Security Feature Bypass Vulnerability
A security feature bypass vulnerability exists in Device Guard that could allow an attacker to inject malicious code into a Windows PowerShell session. An attacker who successfully exploited this vulnerability could inject code into a trusted PowerShell process to bypass the Device Guard Code...
Microsoft Device Guard Code Integrity Policy Security Feature Bypass (CVE-2018-8492)
A security bypass vulnerability exists in Microsoft Device Guard. Successful exploitation of this vulnerability would allow remote attackers to bypass security tests and protocols on the affected system...
Microsoft Windows: Turn On Virtualization Based Security (Require UEFI Memory Attributes Table)
This test checks the setting for policy OpenVAS Vulnerability Test $Id: winvbsrequireuefi.nasl 11381 2018-09-13 14:55:03Z emoss $ Check value for Turn On Virtualization Based Security: Require UEFI Memory Attributes Table Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH,...