mailorder

Mail Order Nalpeiron 授权服务（NLSSRV32.exe）会在某些软件安装过程中被一同安装，用于处理特权的软件授权操作。它与客户端组件（filechck.dll）配合使用，通过邮件槽（mailslot）进行通信（因此得名）。 通过自定义序列化方式向该服务发起调用，其中许多调用涉及对机器所挂载磁盘卷的直接访问。我认为这些调用用于对服务本身及客户端二进制文件进行完整性检查。其中许多调用类型并未限制管理员权限，因此可被用于读取（甚至可能写入）本地驱动器的原始数据。 我不清楚该服务有多普遍。最显著的例子是 Nitro PDF MailOrder.exe c 4096 +...

CVE-2026-69627

CVE-2026-69627 is an out-of-bounds read vulnerability in the Windows Remote Desktop Licensing Service . An authorized local attacker with low privileges can exploit this flaw to disclose information , resulting in high confidentiality impact but no integrity or availability impact (CVSS 3.1: 5.5 ...

CVE-2026-68893

CVE-2026-68893 is a use-after-free vulnerability in the Windows Remote Desktop Licensing Service that allows an authorized attacker to elevate privileges over a network . The flaw is rated CVSS 3.1: 7.1 (High) with a vector requiring network access, high complexity, low privileges, and user inter...

CVE-2026-50110

Storage Concentrator SC & SCVM contains hardcoded credentials for numerous internal services embedded within a configuration file. While the credentials are stored in an encoded format, the encoding can be reversed to plaintext. The exposed credentials span a broad range of internal services,...

PT-2026-54432

Name of the Vulnerable Software and Affected Versions Storage Concentrator SC & SCVM affected versions not specified Description Storage Concentrator SC & SCVM contains hardcoded credentials for various internal services within a configuration file. Although these credentials use encoding, the...

CVE-2026-26159

Missing authentication for critical function in Windows Remote Desktop Licensing Service allows an authorized attacker to elevate privileges locally...

EUVD-2026-22385

Missing authentication for critical function in Windows Remote Desktop Licensing Service allows an authorized attacker to elevate privileges locally...

CVE-2026-26159

Missing authentication for critical function in Windows Remote Desktop Licensing Service allows an authorized attacker to elevate privileges locally...

CVE-2026-26160

Missing authentication for critical function in Windows Remote Desktop Licensing Service allows an authorized attacker to elevate privileges locally...

CVE-2026-26159

CVE-2026-26159 concerns the Windows Remote Desktop Licensing Service. The issue allows local attackers with low privileges and no user interaction to exploit elevation of privilege, impacting confidentiality, integrity, and availability. The CVSS v3.1 base score is 7.8 (HIGH) with LOCAL attack ve...

CVE-2026-26160 Remote Desktop Licensing Service Elevation of Privilege Vulnerability

...

CVE-2026-26160

CVE-2026-26160 affects the Windows Remote Desktop Licensing Service. The issue arises from missing authentication for a critical function, enabling an authorized local attacker to elevate privileges on affected systems. The CVE has a CVSS v3.1 base score of 7.8 (HIGH) with LOCAL attack vector, lo...

NVIDIA Delegated Licensing Service Authorization Issues Vulnerability

NVIDIA Delegated Licensing Service is a licensing service of NVIDIA Corporation. NVIDIA Delegated Licensing suffers from an authorization issue vulnerability that stems from improper authentication, which can be exploited by an attacker to cause information disclosure...

CVE-2026-24241

NVIDIA Delegated Licensing Service for all appliance platforms contains a vulnerability where an attacker could exploit an improper authentication issue. A successful exploit of this vulnerability might lead to information disclosure...

CVE-2026-24241

NVIDIA Delegated Licensing Service for all appliance platforms contains a vulnerability where an attacker could exploit an improper authentication issue. A successful exploit of this vulnerability might lead to information disclosure...

CVE-2026-24241

NVIDIA Delegated Licensing Service for all appliance platforms contains a vulnerability where an attacker could exploit an improper authentication issue. A successful exploit of this vulnerability might lead to information disclosure...

CVE-2026-24241

The CVE-2026-24241 entry concerns NVIDIA Delegated Licensing Service (DLS) for all appliance platforms with an improper authentication issue leading to information disclosure. Connected sources confirm affected component and provide remediation: upgrading DLS to version v3.6 fixes the vulnerabili...

CVE-2026-24241

NVIDIA Delegated Licensing Service for all appliance platforms contains a vulnerability where an attacker could exploit an improper authentication issue. A successful exploit of this vulnerability might lead to information disclosure...

CVE-2026-24241

NVIDIA Delegated Licensing Service for all appliance platforms contains a vulnerability where an attacker could exploit an improper authentication issue. A successful exploit of this vulnerability might lead to information disclosure...

NVIDIA Delegated Licensing Service 授权问题漏洞

NVIDIA Delegated Licensing Service is a licensing service of NVIDIA Corporation. NVIDIA Delegated Licensing suffers from an authorization issue vulnerability that stems from improper authentication, which can be exploited by an attacker to cause information disclosure...