CVE-2024-21445 Windows USB Print Driver Elevation of Privilege Vulnerability

...

CVE-2024-21442 Windows USB Print Driver Elevation of Privilege Vulnerability

...

CVE-2024-21442 Windows USB Print Driver Elevation of Privilege Vulnerability

...

CVE-2024-21442

CVE-2024-21442 affects the Windows USB Print Driver. Root cause: a kernel flaw enabling local elevation of privilege. Exploitation requires an authenticated, local attacker with low privileges and no user interaction; impact is SYSTEM-level full compromise (C, I, A high). Public technical details...

PT-2024-2104 · Microsoft · Windows Usb Print Driver +1

Name of the Vulnerable Software and Affected Versions: Windows USB Print Driver affected versions not specified Description: The issue is related to insufficient access restrictions in the Windows USB Print Driver, allowing an attacker to potentially elevate their privileges. There is no...

Microsoft Windows USB Print Driver 安全漏洞

Microsoft Windows USB Print Driver is a USB printer device driver from Microsoft USA. Microsoft Windows USB Print Driver suffers from an elevation of privilege vulnerability that is due to a flaw in the kernel. An attacker could exploit this vulnerability to gain SYSTEM privileges...

Microsoft Windows USB Print Driver 安全漏洞

Microsoft Windows USB Print Driver is a USB printer device driver from Microsoft USA. Microsoft Windows USB Print Driver suffers from an elevation of privilege vulnerability due to a flaw in the kernel, which can be exploited by an authenticated attacker to gain SYSTEM privileges...

PT-2024-2203 · Microsoft · Windows Usb Print Driver +1

Name of the Vulnerable Software and Affected Versions: Windows USB Print Driver affected versions not specified Description: The issue is related to an elevation-of-privilege vulnerability in the Windows USB Print Driver, which is caused by insufficient access restrictions. This vulnerability can...

CVE-2023-25738

Members of the DEVMODEW struct set by the printer device driver weren't being validated and could have resulted in invalid values which in turn would cause the browser to attempt out of bounds access to related variables.This bug only affects Firefox on Windows. Other operating systems are...

CVE-2023-24866 Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability

...

Microsoft Windows User-Mode Print Driver Insufficient Message Authentication Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute code at low integrity on the target system in order to exploit this vulnerability. The specific flaw exists within the user-mode...

Metasploit Wrap-Up

Print Driver PrivEsc If you attended DEF CON last week, you may have seen this talk on print driver vulnerabilities from Metasploit community contributor Jacob Baines. In the spirit of Friday the 13th, we're highlighting some of these "print nightmares" again, in the form of two new Metasploit...

CVE-2021-38085

The Canon TR150 print driver through 3.71.2.10 is vulnerable to a privilege escalation issue. During the add printer process, a local attacker can overwrite CNMurGE.dll and, if timed properly, the overwritten DLL will be loaded into a SYSTEM process resulting in escalation of privileges. This...

Privilege escalation

The Canon TR150 print driver through 3.71.2.10 is vulnerable to a privilege escalation issue. During the add printer process, a local attacker can overwrite CNMurGE.dll and, if timed properly, the overwritten DLL will be loaded into a SYSTEM process resulting in escalation of privileges. This...

CVE-2021-38085

CVE-2021-38085 – Canon TR150 print driver privilege escalation is a local vulnerability affecting Canon TR150 driver versions up to 3.71.2.10. During printer installation, an attacker can overwrite CNMurGE.dll in CanonBJ%PROGRAMDATA% and, if timed correctly, the DLL is loaded by the system proces...

CVE-2021-38085

The Canon TR150 print driver through 3.71.2.10 is vulnerable to a privilege escalation issue. During the add printer process, a local attacker can overwrite CNMurGE.dll and, if timed properly, the overwritten DLL will be loaded into a SYSTEM process resulting in escalation of privileges. This...

CVE-2021-35449

The Lexmark Universal Print Driver version 2.15.1.0 and below, G2 driver 2.7.1.0 and below, G3 driver 3.2.0.0 and below, and G4 driver 4.2.1.0 and below are affected by a privilege escalation vulnerability. A standard low priviliged user can use the driver to execute a DLL of their choosing durin...

CVE-2021-35449

The Lexmark Universal Print Driver version 2.15.1.0 and below, G2 driver 2.7.1.0 and below, G3 driver 3.2.0.0 and below, and G4 driver 4.2.1.0 and below are affected by a privilege escalation vulnerability. A standard low priviliged user can use the driver to execute a DLL of their choosing durin...

CVE-2021-35449

The Lexmark Universal Print Driver version 2.15.1.0 and below, G2 driver 2.7.1.0 and below, G3 driver 3.2.0.0 and below, and G4 driver 4.2.1.0 and below are affected by a privilege escalation vulnerability. A standard low priviliged user can use the driver to execute a DLL of their choosing durin...

CVE-2021-35449

CVE-2021-35449 affects Lexmark Universal Print Driver (versions 2.15.1.0 and earlier) and associated G2/G3/G4 drivers. The vulnerability enables local privilege escalation: a low-privilege user can cause the driver to load a DLL of their choosing during the add printer process, escalating to SYST...