Privilege escalation

An issue was discovered in OPSWAT MetaDefender KIOSK 4.6.1.9996. Built-in features of Windows desktop shortcuts, narrator can be abused for privilege escalation...

CVE-2023-36658

An issue was discovered in OPSWAT MetaDefender KIOSK 4.6.1.9996. It has an unquoted service path that can be abused locally...

CVE-2023-36658

An issue was discovered in OPSWAT MetaDefender KIOSK 4.6.1.9996. It has an unquoted service path that can be abused locally...

Design/Logic Flaw

An issue was discovered in OPSWAT MetaDefender KIOSK 4.6.1.9996. It has an unquoted service path that can be abused locally...

CVE-2023-36659

An issue was discovered in OPSWAT MetaDefender KIOSK 4.6.1.9996. Long inputs were not properly processed, which allows remote attackers to cause a denial of service loss of communication...

CVE-2023-36658

An issue was discovered in OPSWAT MetaDefender KIOSK 4.6.1.9996. It has an unquoted service path that can be abused locally...

CVE-2023-36658

An issue was discovered in OPSWAT MetaDefender KIOSK 4.6.1.9996. It has an unquoted service path that can be abused locally...

CVE-2023-36659

An issue was discovered in OPSWAT MetaDefender KIOSK 4.6.1.9996. Long inputs were not properly processed, which allows remote attackers to cause a denial of service loss of communication...

CVE-2023-36658

Affected software: OPSWAT MetaDefender KIOSK 4.6.1.9996. Vulnerability type / root cause: unquoted service path that can be abused locally, enabling potential local privilege escalation. Impact (as documented): high confidentiality, integrity, and availability impact; CVSS 3.1 base score 7.8 (LOC...

CVE-2023-36657

CVE-2023-36657 concerns OPSWAT MetaDefender KIOSK 4.6.1.9996. The issue arises because Windows features (desktop shortcuts, narrator) can be abused to escalate privileges. Multiple sources corroborate the vulnerability description and scope, identifying built‑in Windows features as the attack sur...

CVE-2023-36657

An issue was discovered in OPSWAT MetaDefender KIOSK 4.6.1.9996. Built-in features of Windows desktop shortcuts, narrator can be abused for privilege escalation...

CVE-2023-36659

CVE-2023-36659 - OPSWAT MetaDefender KIOSK 4.6.1.9996 is characterized by a buffer overflow-like issue where long inputs are not properly processed, enabling remote attackers to cause a denial of service (loss of communication). The connected documents corroborate a DoS impact and reference the a...

OPSWAT MetaDefender KIOSK Code Issue Vulnerability

OPSWAT MetaDefender KIOSK is a digital security guard from OPSWAT USA. A security vulnerability exists in OPSWAT MetaDefender KIOSK version 4.6.1.9996, which stems from the presence of a service path disclosure issue. An attacker can exploit the vulnerability to elevate privileges...

OPSWAT MetaDefender KIOSK Security Vulnerability

OPSWAT MetaDefender KIOSK is a digital security guard from OPSWAT USA. A security vulnerability exists in OPSWAT MetaDefender KIOSK version 4.6.1.9996, which stems from the fact that some of the built-in features of Windows can be abused for elevation of privilege...

CVE-2023-36657

An issue was discovered in OPSWAT MetaDefender KIOSK 4.6.1.9996. Built-in features of Windows desktop shortcuts, narrator can be abused for privilege escalation...

PT-2023-25660 · Microsoft +1 · Windows +1

Name of the Vulnerable Software and Affected Versions: OPSWAT MetaDefender KIOSK version 4.6.1.9996 Description: An issue was discovered in OPSWAT MetaDefender KIOSK where built-in features of Windows, such as desktop shortcuts and narrator, can be abused for privilege escalation. Recommendations...

OPSWAT Metadefender Core - Privilege Escalation

Exploit Title: OPSWAT Metadefender Core - Privilege Escalation Date: 24 October 2022 Exploit Author: Ulascan Yildirim Vendor Homepage: https://www.opswat.com/ Version: Metadefender Core 4.21.1 Tested on: Windows / Linux CVE : CVE-2022-32272...

OPSWAT Metadefender Core 4.21.1 Privilege Escalation

Exploit Title: OPSWAT Metadefender Core - Privilege Escalation Date: 24 October 2022 Exploit Author: Ulascan Yildirim Vendor Homepage: https://www.opswat.com/ Version: Metadefender Core 4.21.1 Tested on: Windows / Linux CVE : CVE-2022-32272...

K16794: CUPS vulnerabilities CVE-2015-1158 / CVE-2015-1159

Security Advisory Description Description CVE-2015-1158 A string reference count bug was found in cupsd, causing premature freeing of string objects. An attacker can submit a malicious print job that exploits this flaw to dismantle ACLs protecting privileged operations, allowing a replacement...

CVE-2022-40778

A stored Cross-Site Scripting XSS vulnerability in OPSWAT MetaDefender ICAP Server before 4.13.0 allows attackers to execute arbitrary JavaScript or HTML because of the blocked page response...