Vulnerability of the Windows operating system, allowing a perpetrator to execute arbitrary code

The vulnerability of the Windows operating system is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially crafted image...

httpd: ap_some_auth_required() does not properly indicate authenticated request in 2.4

It was discovered that in httpd 2.4, the internal API function apsomeauthrequired could incorrectly indicate that a request was authenticated even when no authentication was used. An httpd module using this API function could consequently allow access that should have been denied...

The vulnerability of the Microsoft Office software package, which allows a hacker to trigger a service failure

The vulnerability of the Microsoft Office suite is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service interruptions through the use of specially crafted documents...

The vulnerability of the Windows operating system, which allows a perpetrator to bypass the security mechanisms for secure downloads

The vulnerability of the Windows operating system is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to bypass security mechanisms for safe loading by using a specific loading policy...

The vulnerability of the Windows operating system, which allows a hacker to increase their privileges

The vulnerability of the Windows operating system’s kernel mode driver is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor, operating locally, to enhance their privileges through a specially created application...

389-ds-base: Information disclosure via repeated use of LDAP ADD operation

An information disclosure flaw was found in 389 Directory Server. A user with no access to objects in certain LDAP sub-tree could send LDAP ADD operations with a specific object name. The error message returned to the user was different based on whether the target object existed or not...

The vulnerability of the Firefox browser, which allows a hacker to trigger a service failure or execute arbitrary code.

The vulnerability of Firefox browsers is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause a service failure or execute arbitrary code using JavaScript code, which can redirect the user to another page...

The vulnerability of the Linux operating system, which allows a hacker to send signals to privileged processes

The vulnerability of the Linux operating system’s system call clone kernel function is related to deficiencies in access control. Exploiting this vulnerability allows an attacker, operating locally, to send signals to privileged parent processes from unprivileged child processes by creating a new...

The vulnerability of the Windows operating system, which allows a hacker to increase their privileges

The vulnerability of the Windows operating system’s kernel mode driver is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor, operating locally, to enhance their privileges through a specially created application...

The vulnerability of the Android operating system, which allows a hacker to increase their privileges

The vulnerability of NVIDIA’s Android operating system media driver is related to deficiencies in access control. Exploiting this vulnerability could allow a local attacker to enhance their privileges through a specially created application...

The vulnerability of the Android operating system, which allows a hacker to increase their privileges

The vulnerability of the drivers/char/diag/diagdci.c file in Qualcomm’s Android operating system is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to enhance their privileges through a specially crafted application that sends short request packet...

The vulnerability of the Windows operating system, which allows a perpetrator to bypass the authentication process

The vulnerability of the Windows operating system is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to bypass authentication procedures by manipulating the system’s recovery mechanism, thereby enabling them to check the authenticity of the NTLM...

The vulnerability of the Windows operating system allows a hacker to intercept network traffic or bypass the Enhanced Protected Mode (EPM) or application’s security mechanisms. As a result, unauthorized content can be displayed in the browser.

The vulnerability of the Windows operating system is related to lack of access control. Exploiting this vulnerability allows a malicious actor to intercept network traffic or bypass the Enhanced Protected Mode EPM or application security mechanisms. As a result, unauthorized content can be...

Vulnerability of Microsoft Edge browser and Windows operating system, allowing a hacker to execute arbitrary code

The vulnerability of the Microsoft Edge browser’s PDF library and the Windows operating system is related to access control deficiencies. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially created PDF file...

The vulnerability of the Windows operating system, which allows a perpetrator to bypass the security mechanisms for secure downloads

The vulnerability of the Windows operating system is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to bypass the security mechanisms for secure loading by using administrative or physical access to install a specially crafted loader...

The vulnerability of the Windows operating system, which allows a hacker to increase their privileges

The vulnerability of the Windows operating system’s kernel mode driver is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor, operating locally, to enhance their privileges through a specially created application...

The vulnerability in Microsoft Edge’s browser allows a hacker to bypass the Anti-Spyware Protection Mechanism (ASLR).

The vulnerability of Microsoft Edge is related to access control deficiencies. Exploiting this vulnerability allows a malicious actor to bypass the ASLR protection mechanism by using a specially crafted web page...

The vulnerabilities of browsers Internet Explorer and Microsoft Edge allow a perpetrator to perform content substitution.

The vulnerability of browsers Internet Explorer and Microsoft Edge is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to replace content using a specially crafted URL...

The vulnerability of the Windows operating system, which allows a hacker to increase their privileges

The vulnerability of the Windows operating system’s kernel mode driver is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor, operating locally, to enhance their privileges through a specially created application...

The vulnerability of the Windows operating system, which allows a hacker to increase their privileges

The vulnerability of the Windows operating system’s kernel mode driver is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor, operating locally, to enhance their privileges through a specially created application...