CVE-2021-24102 Windows Event Tracing Elevation of Privilege Vulnerability

...

CVE-2021-24102

CVE-2021-24102 is a Windows vulnerability described as a local elevation of privilege in Windows Event Tracing. The connected NVD entry lists a CVSS-3.1 base score of 7.8 with local attack vector, low attack complexity, and privileges required as Low, with no user interaction. The impact is high ...

ScareCrow - Payload Creation Framework Designed Around EDR Bypass

If you want to learn more about the techniques utlized in this framework please take a look at Part 1 and Part 2 Description ScareCrow is a payload creation framework for generating loaders for the use of side loading not injection into a legitimate Windows process bypassing Application...

CVE-2021-24103: Undefined Security Weakness

Windows Event Tracing Elevation of Privilege Vulnerability...

CVE-2021-24102: Improper Privilege Management

Windows Event Tracing Elevation of Privilege Vulnerability...

OPENSUSE-SU-2021:0334-1 Security update for tor

This update for tor fixes the following issues: tor was updated to 0.4.5.6: https://lists.torproject.org/pipermail/tor-announce/2021-February/000214.html Introduce a new MetricsPort HTTP interface Support IPv6 in the torrc Address option Add event-tracing library support for USDT and LTTng-UST Tr...

The vulnerability of the Windows Event Tracing service allows attackers to escalate their privileges.

The vulnerability of the Windows Event Tracing service is related to privilege management errors. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerability of the Windows Event Tracing service allows a perpetrator to cause a service failure.

The vulnerability of the Windows Event Tracing service is related to privilege management errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the Windows Event Tracing service allows attackers to escalate their privileges.

The vulnerability of the Windows Event Tracing service is related to privilege management errors. Exploiting this vulnerability can allow an attacker to increase their privileges...

openSUSE Security Update : tor (openSUSE-2021-316)

This update for tor fixes the following issues : tor was updated to 0.4.5.6 : - https://lists.torproject.org/pipermail/tor-announce/2021-February/000214.html - Introduce a new MetricsPort HTTP interface - Support IPv6 in the torrc Address option - Add event-tracing library support for USDT and...

OPENSUSE-SU-2021:0316-1 Security update for tor

This update for tor fixes the following issues: tor was updated to 0.4.5.6: https://lists.torproject.org/pipermail/tor-announce/2021-February/000214.html Introduce a new MetricsPort HTTP interface Support IPv6 in the torrc Address option Add event-tracing library support for USDT and LTTng-UST Tr...

Windows Event Tracing Elevation of Privilege Vulnerability

...

Windows Event Tracing Elevation of Privilege Vulnerability

...

PT-2021-2049 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to errors in privilege management within the Windows Event Tracing service, allowing an attacker to potentially elevate their privileges. This could affect the system...

Microsoft Windows Event Tracing Security Feature Issue Vulnerability

Microsoft Windows Event Tracing is an application from Microsoft Corporation USA. It provides a mechanism for tracking and logging events raised by user-mode applications and kernel-mode drivers. A security feature issue vulnerability exists in the Microsoft Windows Event Tracing event tracking...

KLA12075 Multiple vulnerabilities in Microsoft Products (ESU)

Multiple vulnerabilities were found in Microsoft Products Extended Support Update. Malicious users can exploit these vulnerabilities to cause denial of service, gain privileges, obtain sensitive information, execute arbitrary code, bypass security restrictions. Below is a complete list of...

PT-2021-2045 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows versions prior to the fixed version Description: The issue is related to a Denial of Service vulnerability in the Windows TCP/IP service, which can be exploited to cause a system crash. It is also associated with errors in privilege...

Microsoft Windows Event Tracing Security Feature Issue Vulnerability

Microsoft Windows Event Tracing is an application from Microsoft Corporation USA. It provides a mechanism for tracking and logging events raised by user-mode applications and kernel-mode drivers. A security feature issue vulnerability exists in Microsoft Windows Event Tracing. The following...

PT-2021-2048 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to errors in privilege management in the Windows Event Tracing service, which can be exploited to elevate privileges. This allows an attacker to affect the system. No...

Microsoft Windows Event Tracing Out-Of-Bounds Access Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the implementation...