Microsoft Windows Redirected Drive Buffering Permission and Access Control Vulnerabilities

Microsoft Windows Redirected Drive Buffering is a Redirected Drive Buffering Subsystem RDBSS from Microsoft Corporation USA provided as the kernel-mode file system driver rdbss.sys, which is included in the operating system, and as the static library rdbsslib.lib provided as the kernel-mode file...

PT-2021-5229

Name of the Vulnerable Software and Affected Versions Microsoft Windows affected versions not specified Description The issue is related to errors in managing privileges in the Windows Common Log File System CLFS Driver. Exploitation of this issue may allow an attacker to elevate their privileges...

DEBIAN-CVE-2021-35267

NTFS-3G versions 2021.8.22, a stack buffer overflow can occur when correcting differences in the MFT and MFTMirror allowing for code execution or escalation of privileges when setuid-root...

CVE-2021-39262

A crafted NTFS image can cause an out-of-bounds access in ntfsdecompress in NTFS-3G 2021.8.22...

Tuxera NTFS-3G buffer error vulnerability

Tuxera NTFS-3G is Finland's Tuxera company's set of open source , cross-platform for supporting NTFS partition read and write drivers . NTFS-3G suffers from a buffer overflow vulnerability that can be exploited by an attacker to cause a heap-based buffer overflow in ntfsinodelookupbyname in NTFS-...

Tuxera NTFS-3G buffer error vulnerability

Tuxera NTFS-3G is an open source, cross-platform set of drivers from Tuxera Finland for reading and writing NTFS partitions.Tuxera NTFS-3G is vulnerable to a buffer overflow vulnerability that could be exploited by an attacker to crash an application or execute arbitrary code in the application...

Tuxera NTFS-3G buffer error vulnerability

NTFS-3G is a stable, full-featured, read/write NTFS driver for Linux, Android, Mac OS X, FreeBSD, NetBSD, OpenSolaris, QNX, Haiku, and other operating systems. ntfsrunlistsmergei in versions prior to NTFS-3G 2021.8.22 is vulnerable to an out-of-bounds read. runlistsmergei is vulnerable to...

PT-2021-5752 · Ntfs-3G +7 · Ntfs-3G +7

Name of the Vulnerable Software and Affected Versions: NTFS-3G versions prior to 2021.8.22 Description: The issue is related to an out-of-bounds access in the ntfs inode sync standard information function of the NTFS-3G driver for the FUSE module. This can be triggered by a crafted NTFS image,...

PT-2021-5777 · Ntfs-3G +7 · Ntfs-3G +7

Name of the Vulnerable Software and Affected Versions: NTFS-3G versions prior to 2021.8.22 Description: The issue is related to a heap-based buffer overflow in the ntfs inode lookup by name function of the NTFS-3G driver. This can be triggered by a crafted NTFS image, potentially allowing an...

DEBIAN-CVE-2021-29157

Dovecot before 2.3.15 allows ../ Path Traversal. An attacker with access to the local filesystem can trick OAuth2 authentication into using an HS256 validation key from an attacker-controlled location. This occurs during use of local JWT validation with the posix fs driver...

CVE-2021-31954: Improper Privilege Management

Windows Common Log File System Driver Elevation of Privilege Vulnerability...

KLA12202 Multiple vulnerabilities in Microsoft Windows

Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to obtain sensitive information, execute arbitrary code, gain privileges, bypass security restrictions, cause denial of service. Below is a complete list of vulnerabilities: 1. An informati...

Windows Projected File System FS Filter driver unauthorized access

The vulnerability of the Windows Projected File System FS Filter driver in Microsoft Windows relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

Windows File System Driver Unauthorized Access

The vulnerability of the file system driver filter in the Windows operating system is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

CVE-2021-1672

Windows Projected File System FS Filter Driver Information Disclosure Vulnerability...

CVE-2020-17088: Undefined Security Weakness

Windows Common Log File System Driver Elevation of Privilege Vulnerability...

Microsoft Windows Common Log File System Driver Elevation of Privilege (CVE-2020-17088)

An elevation of privilege vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

KLA11777 Multiple vulnerabilities in Microsoft Products (ESU)

Multiple vulnerabilities were found in Microsoft Products ESU. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service, execute arbitrary code, gain privileges, obtain sensitive information. Below is a complete list of vulnerabilities: 1. A denia...

Microsoft Windows Common Log File System Driver Information Disclosure Vulnerability

The Microsoft Windows Common Log File System Driver is a general purpose log file system that can be accessed from kernel-mode or user-mode applications to build a high-performance transaction log. An information disclosure vulnerability exists in the Microsoft Windows Common Log File System CLFS...

KLA11703 Multiple vulnerabilities in Microsoft Products (ESU)

Multiple vulnerabilities were found in Microsoft Products Extended Security Update. Malicious users can exploit these vulnerabilities to gain privileges, execute arbitrary code, obtain sensitive information. Below is a complete list of vulnerabilities: 1. An elevation of privilege vulnerability i...