CVE-2023-47113 DLL Search Order Hijacking vulnerability in BleachBit for Windows

BleachBit cleans files to free disk space and to maintain privacy. BleachBit for Windows up to version 4.4.2 is vulnerable to a DLL Hijacking vulnerability. By placing a DLL in the Folder c:\DLLs, an attacker can run arbitrary code on every execution of BleachBit for Windows. This issue has been...

CVE-2023-47113 DLL Search Order Hijacking vulnerability in BleachBit for Windows

BleachBit cleans files to free disk space and to maintain privacy. BleachBit for Windows up to version 4.4.2 is vulnerable to a DLL Hijacking vulnerability. By placing a DLL in the Folder c:\DLLs, an attacker can run arbitrary code on every execution of BleachBit for Windows. This issue has been...

CVE-2023-47113

CVE-2023-47113 affects BleachBit for Windows up to version 4.4.2, due to a DLL search order hijacking vulnerability: placing a malicious DLL in c:\DLLs allows code execution on each run. The issue has been fixed in version 4.5.0. Affected builds and advisories are documented by NVD, Red Hat, SUSE...

PT-2023-30318 · Bleachbit · Bleachbit

Name of the Vulnerable Software and Affected Versions: BleachBit for Windows versions 4.4.2 and earlier Description: BleachBit for Windows is vulnerable to a DLL Hijacking issue. This allows an attacker to run arbitrary code on every execution of BleachBit for Windows by placing a DLL in a specif...

CVE-2023-37243

The C:\Windows\Temp\Agent.Package.Availability\Agent.Package.Availability.exe file is automatically launched as SYSTEM when the system reboots. Since the C:\Windows\Temp\Agent.Package.Availability folder inherits permissions from C:\Windows\Temp and Agent.Package.Availability.exe is susceptible t...

CVE-2023-37243

The C:\Windows\Temp\Agent.Package.Availability\Agent.Package.Availability.exe file is automatically launched as SYSTEM when the system reboots. Since the C:\Windows\Temp\Agent.Package.Availability folder inherits permissions from C:\Windows\Temp and Agent.Package.Availability.exe is susceptible t...

Code injection

The C:\Windows\Temp\Agent.Package.Availability\Agent.Package.Availability.exe file is automatically launched as SYSTEM when the system reboots. Since the C:\Windows\Temp\Agent.Package.Availability folder inherits permissions from C:\Windows\Temp and Agent.Package.Availability.exe is susceptible t...

CVE-2023-37243

The vulnerability CVE-2023-37243 concerns the Windows Atera Agent Package Availability (Agent.Package.Availability.exe). The executable is launched with SYSTEM privileges at reboot, and its folder (C:\Windows\Temp\Agent.Package.Availability) inherits permissions from C:\Windows\Temp; this enables...

CVE-2023-37243

The C:\Windows\Temp\Agent.Package.Availability\Agent.Package.Availability.exe file is automatically launched as SYSTEM when the system reboots. Since the C:\Windows\Temp\Agent.Package.Availability folder inherits permissions from C:\Windows\Temp and Agent.Package.Availability.exe is susceptible t...

CVE-2023-37243

The C:\Windows\Temp\Agent.Package.Availability\Agent.Package.Availability.exe file is automatically launched as SYSTEM when the system reboots. Since the C:\Windows\Temp\Agent.Package.Availability folder inherits permissions from C:\Windows\Temp and Agent.Package.Availability.exe is susceptible t...

PT-2023-6720 · Sonicwall · Sonicwall Netextender Windows Client

Name of the Vulnerable Software and Affected Versions: SonicWall NetExtender Windows client versions 10.2.336 and earlier Description: The issue is related to a DLL Search Order Hijacking vulnerability in the start-up DLL component of the SonicWall NetExtender Windows client. This vulnerability c...

Microsoft Windows 11 apds.dll DLL Hijacking

--------------------------------------------------------- Title: Microsoft Windows 11 - 'apds.dll' DLL hijacking Forced Date: 2023-09-01 Author: Moein Shahabi Vendor: https://www.microsoft.com Version: Windows 11 Pro 10.0.22621 Tested on: Windows 11x64 eng...

CVE-2023-45248

Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Protect Cloud Agent Windows before build 36497, Acronis Cyber Protect 16 Windows before build 37391...

CVE-2023-45248

Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Protect Cloud Agent Windows before build 36497, Acronis Cyber Protect 16 Windows before build 37391...

Privilege escalation

Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Protect Cloud Agent Windows before build 36497, Acronis Cyber Protect 16 Windows before build 37391...

CVE-2023-45248

Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Protect Cloud Agent Windows before build 36497, Acronis Cyber Protect 16 Windows before build 37391...

CVE-2023-45248

CVE-2023-45248 describes a local privilege escalation caused by a DLL hijacking flaw in Acronis products. Affected: Acronis Cyber Protect Cloud Agent (Windows) before build 36497; Acronis Cyber Protect 16 (Windows) before build 37391. Root cause: DLL hijacking leading to an uncontrolled search pa...

CVE-2023-45248

Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Protect Cloud Agent Windows before build 36497, Acronis Cyber Protect 16 Windows before build 37391...

Microsoft Windows 11 - (apds.dll) DLL hijacking (Forced) Exploit

--------------------------------------------------------- Title: Microsoft Windows 11 - 'apds.dll' DLL hijacking Forced Date: 2023-09-01 Author: Moein Shahabi Vendor: https://www.microsoft.com Version: Windows 11 Pro 10.0.22621 Tested on: Windows 11x64 eng...

PT-2023-5788 · Acronis · Acronis Cyber Protect 16 +2

Name of the Vulnerable Software and Affected Versions: Acronis Cyber Protect Cloud Agent Windows versions before build 36497 Acronis Cyber Protect 16 Windows versions before build 37391 Acronis Agent Windows versions before build 36497 Description: The issue is related to a local privilege...