CVE-2022-30212: Concurrent Execution using Shared Resource with Improper Synchronization

Windows Connected Devices Platform Service Information Disclosure Vulnerability...

Microsoft Windows Connected Devices Platform Service 竞争条件问题漏洞

Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft Corporation USA. A competitive conditions issue vulnerability exists in Microsoft Windows Connected Devices Platform Service. The following products and editions are affected:Windows 10 Version 1809 for...

Platform Update: Build the Future on Akamai

Today, technology is infused into nearly everything we do. The data behind personalized recommendations, connected devices, and wearables has changed how we engage with the world around us — whether we’re driving to a new destination, purchasing from a new retailer, or monitoring our health...

PT-2022-15533

Name of the Vulnerable Software and Affected Versions UniFi Door Access Reader Lite versions 3.8.28.24 and earlier Description A buffer overflow issue allows a malicious actor who has gained access to a network to control all connected devices. Recommendations For versions 3.8.28.24 and earlier,...

Ubiquiti UniFi Door Access Reader Lite 安全漏洞

The Ubiquiti UniFi Door Access Reader Lite Ubiquiti UA Lite is a modern NFC and Bluetooth reader from Ubiquiti USA. A security vulnerability exists in UniFi Door Access Reader Lite UA Lite firmware version 3.8.28.24 and earlier, which originates from a vulnerability that allows a malicious actor...

CVE-2021-1033

In createGeneralSlice of ConnectedDevicesSliceProvider.java.java, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

CVE-2021-1033

In createGeneralSlice of ConnectedDevicesSliceProvider.java.java, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

Code injection

In createGeneralSlice of ConnectedDevicesSliceProvider.java.java, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

Google Android 安全漏洞

Google Android is a Linux-based open source operating system from Google, Inc. An elevation of privilege vulnerability exists in Google Android, which originates in the ConnectedDevicesSliceProvider.java createBluetoothDeviceSlice, the PendingIntent bypasses privileges and can be exploited to cau...

Google Android 安全漏洞

Google Android is a Linux-based open source operating system from Google, Inc. An elevation of privilege vulnerability exists in Google Android, which stems from a vulnerability in ConnectedDevicesSliceProvider.java.java's createGeneralSlice, PendingIntent bypasses privileges and can be exploited...

CVE-2022-21865

Connected Devices Platform Service Elevation of Privilege Vulnerability...

CVE-2022-21865

Connected Devices Platform Service Elevation of Privilege Vulnerability...

CVE-2022-21865

Connected Devices Platform Service Elevation of Privilege Vulnerability...

Privilege escalation

Connected Devices Platform Service Elevation of Privilege Vulnerability...

CVE-2022-21865 Connected Devices Platform Service Elevation of Privilege Vulnerability

...

CVE-2022-21865

CVE-2022-21865 is described by the NVD as a Connected Devices Platform Service Elevation of Privilege vulnerability in Microsoft Windows. The OpenVAS entry for KB5009545 lists CVE-2022-21865 under Windows vulnerabilities with the impact “Obtain increased privileges,” and notes this vulnerability ...

Connected Devices Platform Service Elevation of Privilege Vulnerability

...

CVE-2022-21865: Undefined Security Weakness

Connected Devices Platform Service Elevation of Privilege Vulnerability...

Microsoft Windows 权限许可和访问控制问题漏洞

Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft Corporation USA. A vulnerability exists in Microsoft Windows Connected Devices Platform Service with privilege permission and access control issues. The following products and editions are affected: Windo...

CVE-2021-20145

Gryphon Tower routers contain an unprotected openvpn configuration file which can grant attackers access to the Gryphon homebound VPN network which exposes the LAN interfaces of other users' devices connected to the same service. An attacker could leverage this to make configuration changes to, o...