PrivKit - Simple Beacon Object File That Detects Privilege Escalation Vulnerabilities Caused By Misconfigurations On Windows OS

PrivKit is a simple beacon object file that detects privilege escalation vulnerabilities caused by misconfigurations on Windows OS. PrivKit detects following misconfigurations Checks for Unquoted Service Paths Checks for Autologon Registry Keys Checks for Always Install Elevated Registry Keys...

SUSE CVE-2023-27706

Bitwarden Windows desktop application versions prior to v2023.4.0 store biometric keys in Windows Credential Manager, accessible to other local unprivileged processes...

CVE-2023-27706

Bitwarden Windows desktop application versions prior to v2023.4.0 store biometric keys in Windows Credential Manager, accessible to other local unprivileged processes...

CVE-2023-27706

Bitwarden Windows desktop application versions prior to v2023.4.0 store biometric keys in Windows Credential Manager, accessible to other local unprivileged processes...

Code injection

Bitwarden Windows desktop application versions prior to v2023.4.0 store biometric keys in Windows Credential Manager, accessible to other local unprivileged processes...

CVE-2023-27706

Bitwarden Windows desktop application versions prior to v2023.4.0 store biometric keys in Windows Credential Manager, accessible to other local unprivileged processes...

CVE-2023-27706

Bitwarden Windows desktop application versions prior to v2023.4.0 store biometric keys in Windows Credential Manager, accessible to other local unprivileged processes...

PT-2023-21302 · Bitwarden · Bitwarden Windows Desktop Application

Name of the Vulnerable Software and Affected Versions: Bitwarden Windows desktop application versions prior to v2023.4.0 Description: The issue concerns the storage of biometric keys in the Windows Credential Manager by the Bitwarden Windows desktop application, making them accessible to other...

CVE-2023-27706

Bitwarden Windows desktop application versions prior to v2023.4.0 store biometric keys in Windows Credential Manager, accessible to other local unprivileged processes...

Bitwarden: Biometric key is stored in Windows Credential Manager, accessible to other local unprivileged processes

A vulnerability in Bitwarden Desktop for Windows allowed a local attacker to access the biometric master key used for unlocking the vault through Windows Hello. The key was stored in plaintext in the Windows Credential Manager, accessible to any local unprivileged process. This allowed an attacke...

The vulnerability of the user interface of the Windows Credential Manager service allows a perpetrator to escalate their privileges.

The vulnerability of the Credential Manager user interface in Windows operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

CVE-2023-21726

Windows Credential Manager User Interface Elevation of Privilege Vulnerability...

CVE-2023-21726

Windows Credential Manager User Interface Elevation of Privilege Vulnerability...

CVE-2023-21726

Windows Credential Manager User Interface Elevation of Privilege Vulnerability...

Privilege escalation

Windows Credential Manager User Interface Elevation of Privilege Vulnerability...

Windows Credential Manager User Interface Elevation of Privilege Vulnerability

...

CVE-2023-21726 Windows Credential Manager User Interface Elevation of Privilege Vulnerability

...

CVE-2023-21726 Windows Credential Manager User Interface Elevation of Privilege Vulnerability

...

PT-2023-1141 · Microsoft · Windows Credential Manager +1

Name of the Vulnerable Software and Affected Versions: Windows Credential Manager versions affected versions not specified Description: An elevation-of-privilege vulnerability allows attackers to affect the system. The issue is related to the Windows Credential Manager user interface and is...

Microsoft Windows 安全漏洞

Microsoft Windows is a suite of operating systems for use on personal devices from the U.S.-based Microsoft Corporation Microsoft. A security vulnerability exists in Microsoft Windows Credential Manager. An attacker could exploit the vulnerability to elevate privileges...