122 matches found
gdid-reversal
Windows GDID 전체 분석 문서 Global Device Identifier 완전 리버스 엔지니어링 -8a2be2 -0078d6 2026년 7월 Scattered Spider 고소장에서 언급된 영구적인 Windows 식별자인 Microsoft의 "Global Device Identifier"가 실제로 생성, 저장 및 전송되는 방식 TL;DR !NOTE 아래 나열된 내용은 사실이지만 일부 정보가 누락되어 있습니다. MSA에 로그인했는지 여부와 관계없이 GDID가 있다는 점을 깨달았습니다. 게시 당시에는 인지하지 못했지만...
Astra Linux – Vulnerability in Linux 5.10
In the Linux kernel, the following vulnerability has been resolved: platform/x86/amd: pmc: Fixed a memory leak in amdpmcstbdebugfsopenv2. The function amdpmcstbdebugfsopenv2 may be called when the STB debug mechanism is enabled. When amdpmcsendcmd fails, the ‘buf’ variable needs to be released...
CVE-2026-24292
Use after free in Connected Devices Platform Service Cdpsvc allows an authorized attacker to elevate privileges locally...
EUVD-2026-10617
Use after free in Connected Devices Platform Service Cdpsvc allows an authorized attacker to elevate privileges locally...
CVE-2026-24292
Use after free in Connected Devices Platform Service Cdpsvc allows an authorized attacker to elevate privileges locally...
CVE-2026-24292 Windows Connected Devices Platform Service Elevation of Privilege Vulnerability
...
PT-2026-24286
Use after free in Connected Devices Platform Service Cdpsvc allows an authorized attacker to elevate privileges locally...
KLA90878 Multiple vulnerabilities in Microsoft Products (ESU)
Multiple vulnerabilities were found in Microsoft Products Extended Security Update. Malicious users can exploit these vulnerabilities to execute arbitrary code, gain privileges, bypass security restrictions, spoof user interface, obtain sensitive information, cause denial of service. Below is a...
CVE-2026-20864
Heap-based buffer overflow in Connected Devices Platform Service Cdpsvc allows an authorized attacker to elevate privileges locally...
CVE-2026-20864
Heap-based buffer overflow in Connected Devices Platform Service Cdpsvc allows an authorized attacker to elevate privileges locally...
CVE-2026-20864 Windows Connected Devices Platform Service Elevation of Privilege Vulnerability
...
CVE-2026-20864
CVE-2026-20864 describes a heap-based buffer overflow in the Connected Devices Platform Service (Cdpsvc) on Windows that enables an authorized local attacker to elevate privileges. The vulnerability affects Cdpsvc and is rated high (CVSS v3.1 base 7.8; Local, Low Attack Complexity, Privileges Req...
CVE-2026-20864
Heap-based buffer overflow in Connected Devices Platform Service Cdpsvc allows an authorized attacker to elevate privileges locally...
PT-2026-2709
Name of the Vulnerable Software and Affected Versions Connected Devices Platform Service Cdpsvc affected versions not specified Description A heap-based buffer overflow exists in the Connected Devices Platform Service Cdpsvc. This condition allows a locally authenticated attacker to gain elevated...
CVE-2025-58719
Use after free in Connected Devices Platform Service Cdpsvc allows an authorized attacker to elevate privileges locally...
CVE-2025-59191
Heap-based buffer overflow in Connected Devices Platform Service Cdpsvc allows an authorized attacker to elevate privileges locally...
CVE-2025-55326
Use after free in Connected Devices Platform Service Cdpsvc allows an unauthorized attacker to execute code over a network...
EUVD-2025-34300
Heap-based buffer overflow in Connected Devices Platform Service Cdpsvc allows an authorized attacker to elevate privileges locally...
