PT-2021-2702 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to errors in processing objects in memory within the Overlay Filter component of Windows operating systems. This can allow an attacker to gain unauthorized access to...

PT-2024-11081 · Linux +4 · Linux Kernel +4

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 5.12.0-rc5 Description: The issue arises from the overlayfs not putting temporary dentry when there is a metacopy error, leading to dentry leaks when shutting down the related superblock. This results in busy...

ASB-A-172252122

In ImportVCardActivity, there is a possible way to bypass user consent due to a tapjacking/overlay attack. This could lead to local escalation of privilege with User execution privileges needed. User interaction is needed for exploitation...

The vulnerability of the Windows operating system, related to insecure management of privileges, allows a perpetrator to elevate their privileges.

The vulnerability of the App-V Overlay Filter component in the Windows operating system is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker to enhance their privileges...

The vulnerability of the Overlay Filter Elevation component of the Windows operating system, which allows a hacker to increase their privileges

The vulnerability of the Overlay Filter Elevation component in the Windows operating system is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker to enhance their privileges...

CVE-2021-28133

Zoom through 5.5.4 sometimes allows attackers to read private information on a participant's screen, even though the participant never attempted to share the private part of their screen. When a user shares a specific application window via the Share Screen functionality, other meeting participan...

CVE-2021-26860

Windows App-V Overlay Filter Elevation of Privilege Vulnerability...

CVE-2021-26874

Windows Overlay Filter Elevation of Privilege Vulnerability...

CVE-2021-26860

Windows App-V Overlay Filter Elevation of Privilege Vulnerability...

CVE-2021-26874

Windows Overlay Filter Elevation of Privilege Vulnerability...

Privilege escalation

Windows Overlay Filter Elevation of Privilege Vulnerability...

CVE-2021-26860

Windows App-V Overlay Filter Elevation of Privilege Vulnerability...

CVE-2021-26874

Windows Overlay Filter Elevation of Privilege Vulnerability...

Privilege escalation

Windows App-V Overlay Filter Elevation of Privilege Vulnerability...

CVE-2021-26874 Windows Overlay Filter Elevation of Privilege Vulnerability

...

CVE-2021-26874 Windows Overlay Filter Elevation of Privilege Vulnerability

...

CVE-2021-26874

CVE-2021-26874 is a Windows elevation-of-privilege vulnerability affecting the Windows Overlay Filter component. The description and CVSS data indicate a local, low-privilege exploit with no user interaction required, potentially allowing a total compromise of the affected system (confidentiality...

CVE-2021-26860 Windows App-V Overlay Filter Elevation of Privilege Vulnerability

...

CVE-2021-26860

CVE-2021-26860 is a Windows App-V Overlay Filter Elevation of Privilege vulnerability. The issue is local in nature and can allow an attacker with LOW privileges and no user interaction to escalate privileges, impacting confidentiality, integrity, and availability as described in CVSS/metrics. Co...

Design/Logic Flaw

In onCreate of ChooseTypeAndAccountActivity.java, there is a possible way to learn the existence of an account, without permissions, due to a tapjacking/overlay attack. This could lead to local escalation of privilege with User execution privileges needed. User interaction is needed for...