Windows Overlay Filter Information Disclosure Vulnerability

...

KLA20158 Multiple vulnerabilities in Microsoft Products (ESU)

Multiple vulnerabilities were found in Microsoft Products Extended Security Update. Malicious users can exploit these vulnerabilities to cause denial of service, gain privileges, execute arbitrary code, bypass security restrictions, obtain sensitive information. Below is a complete list of...

CVE-2023-21766

CVE-2023-21766 corresponds to a Windows Overlay Filter information-disclosure vulnerability. The CVE entry lists a local attack surface with a Confidentiality impact of High, no Integrity/Availability impact, and a CVSS 3.1 base score of 4.7 (Attack Vector: Local; Attack Complexity: High; Privile...

CVE-2023-21766 Windows Overlay Filter Information Disclosure Vulnerability

...

CVE-2023-21767 Windows Overlay Filter Elevation of Privilege Vulnerability

...

PT-2023-1157 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to an elevation-of-privilege vulnerability in the Windows Overlay Filter component, which is caused by insufficient access control. This vulnerability can be exploited ...

CVE-2023-21767 Windows Overlay Filter Elevation of Privilege Vulnerability

...

PT-2023-1228 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to a synchronization error, specifically a "race condition," in the Overlay Filter component of Windows operating systems. This can allow an attacker to gain unauthoriz...

CVE-2023-21766 Windows Overlay Filter Information Disclosure Vulnerability

...

Microsoft Windows Overlay Filter 安全漏洞

Microsoft Windows is a suite of operating systems for use on personal devices from the U.S.-based Microsoft Corporation Microsoft. A security vulnerability exists in Microsoft Windows Overlay Filter. An attacker could exploit the vulnerability to elevate privileges...

CVE-2023-21767

Technical details for CVE-2023-21767 are not provided in the Connected documents or initial description. No affected products, root cause, impact, or fixes are disclosed here. Monitor for updates from official sources.

CVE-2023-21767: Improper Input Validation

Windows Overlay Filter Elevation of Privilege Vulnerability...

CVE-2023-21766: Sensitive Data Storage in Improperly Locked Memory

Windows Overlay Filter Information Disclosure Vulnerability...

Microsoft Windows Overlay Filter 竞争条件问题漏洞

Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft Corporation USA. A competitive conditions issue vulnerability exists in Microsoft Windows Overlay Filter. An attacker exploiting this vulnerability could disclose sensitive information...

ASB-A-246933785

In onCreate of PhoneAccountSettingsActivity.java and related files, there is a possible way to mislead the user into enabling a malicious phone account due to a tapjacking/overlay attack. This could lead to local escalation of privilege with User execution privileges needed. User interaction is...

PT-2025-49747

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel’s overlay functionality where a call to of changeset init occurs prematurely. Specifically, if of overlay fdt apply fails, a partial state may remain,...

DEBIAN-CVE-2022-34479

A malicious website that could create a popup could have resized the popup to overlay the address bar with its own content, resulting in potential user confusion or spoofing attacks. This bug only affects Thunderbird for Linux. Other operating systems are unaffected.. This vulnerability affects...

CVE-2022-34479

A malicious website that could create a popup could have resized the popup to overlay the address bar with its own content, resulting in potential user confusion or spoofing attacks. This bug only affects Thunderbird for Linux. Other operating systems are unaffected.. This vulnerability affects...

CVE-2022-22762

Under certain circumstances, a JavaScript alert or prompt could have been shown while another website was displayed underneath it. This could have been abused to trick the user. This bug only affects Firefox for Android. Other operating systems are unaffected.. This vulnerability affects Firefox ...

Spoofing

A malicious website that could create a popup could have resized the popup to overlay the address bar with its own content, resulting in potential user confusion or spoofing attacks. This bug only affects Thunderbird for Linux. Other operating systems are unaffected.. This vulnerability affects...