The vulnerability of the Active Directory catalog service for Windows operating systems arises from the insecure management of privileges, allowing attackers to elevate their own privileges.

The vulnerability of the Active Directory catalog service for Windows operating systems is related to insecure management of privileges. Exploiting this vulnerability could allow a malicious actor to enhance their privileges remotely...

ASUSTek ZenBook Pro Due 15 UX582 安全漏洞

ASUSTek ZenBook Pro Due 15 UX582 is a laptop computer from Asus Taiwan, China. The ASUSTek ZenBook Pro Due 15 UX582 suffers from a security vulnerability that stems from the ASUSTek ZenBook Pro Due 15 UX582 laptop firmware up to version 203 has insecure privileges that allow physically proximate...

Intel Unite 权限许可和访问控制问题漏洞

Intel Unite is an enterprise meeting collaboration solution from Intel Corporation USA. A security vulnerability exists in Intel Unite 4.2.25031, which stems from insecure inherited privileges that could allow authenticated users to enable privilege escalation via local access...

Nagios XI Elevation of Privilege Vulnerability (CNVD-2021-37147)

Nagios XI is a suite of IT infrastructure monitoring solutions from the US-based Nagios. The solution supports monitoring and alerting of applications, services, operating systems and more. A security vulnerability exists in Nagios XI version 5.7.5 and earlier, which stems from a program that...

Soyal Technology 701Client 安全漏洞

SOYAL Soyal Technology 701Client is a hardware device from China's Moshu Information SOYAL. A toilet alarm. A security vulnerability exists in Soyal Technology 701Client 9.0.1 that stems from insecure privileges...

The vulnerability of MongoDB Compass’s graphical interface, a database management system for MongoDB, relates to insecure privilege management. This allows attackers to escalate their privileges.

The vulnerability of MongoDB Compass’s graphical interface, a database management system by MongoDB, is related to insecure management of privileges. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability of the GPU Display Driver relates to the insecure handling of privileges, allowing an attacker to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the GPU Display Driver is related to improper access to outdated APIs in the driver nvlddmkm.sys for DxgkDdiEscape or IOCTL. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

The vulnerability of the WinINet API component of the Windows operating system allows a hacker to escalate their privileges and execute arbitrary code.

The vulnerability of the WinINet API component of the Windows operating system is related to insecure management of privileges. Exploiting this vulnerability allows a remote attacker to enhance their privileges and execute arbitrary code...

The vulnerability in the Microsoft Edge browser extension allows a hacker to enhance their privileges.

The vulnerability of the Microsoft Edge browser’s “Feedback” extension is related to insecure handling of privileges. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...

The vulnerability of the Windows Lock Screen component of the Windows operating system, which allows a hacker to exploit their privileges

The vulnerability of the Windows Lock Screen component of the operating system is related to insecure handling of privileges. Exploiting this vulnerability can allow an attacker to enhance their privileges...

The vulnerability of the Windows Error Reporting error reporting service on Microsoft Windows operating systems allows a perpetrator to escalate their privileges.

The vulnerability of the Windows Error Reporting registration service on Microsoft Windows operating systems is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker to enhance their privileges...

Citrix Systems Workspace App Elevation of Privilege Vulnerability

Citrix Systems Workspace App formerly known as Receiver is an application from Citrix Systems, Inc. that provides secure access to applications, desktops, and data. A security vulnerability exists in Citrix Systems Workspace App versions prior to 1912 Windows that stems from the program assigning...

The vulnerability of the Windows operating system’s swap buffer allows a hacker to increase their privileges or execute arbitrary code.

The vulnerability of the Windows operating system’s swap buffer is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker to enhance their privileges or execute arbitrary code using a specially created application...

Important: Red Hat Security Advisory: zsh security update

An update for zsh is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the C...

The vulnerability of the Cisco Digital Network Architecture (DNA) Center’s network management system, related to insecure privilege management, allows attackers to elevate their privileges and execute arbitrary code.

The vulnerability of the Cisco Digital Network Architecture DNA Center’s network management system is related to insecure management of privileges. Exploiting this vulnerability could allow attackers to enhance their privileges and execute arbitrary code...

The vulnerability of the ActiveX Installer component of the Windows operating system allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the ActiveX Installer component in the Windows operating system is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information through a specially created application...

The vulnerability of the Windows Setup application installation process allows a hacker to exploit their privileges.

The vulnerability of the Windows Setup application’s installation process is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker to enhance their privileges...

The vulnerability of the web page rendering modules in WebKitGTK and WPE WebKit, related to insecure privilege management, allows attackers to execute arbitrary code.

The vulnerability of the Web page rendering modules in WebKitGTK and WPE WebKit relates to insecure management of privileges. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially crafted web page...

The vulnerability of the Ghostscript file conversion program lies in its insecure handling of privileges, allowing an attacker to escalate their privileges.

The vulnerability of the Ghostscript file conversion program’s supervisor exploit is related to insecure management of privileges. Exploiting this vulnerability allows a malicious actor to enhance their privileges remotely...

The vulnerability of the NuGet package management system allows a hacker to alter the folder structure of a package.

The vulnerability of the NuGet package management system is related to insecure management of privileges. Exploiting this vulnerability could allow a malicious actor, operating remotely, to alter the package’s folder structure...