1489 matches found
CVE-2021-38645
Open Management Infrastructure (OMI) in Azure VM Management Extensions contains CVE-2021-38645, an Elevation of Privilege vulnerability. OMI runs with root privileges; when vulnerable, it can be exploited locally to escalate privileges on affected hosts. Microsoft addressed the OMIGOD set (CVE-20...
Microsoft Windows Event Tracing 权限许可和访问控制问题漏洞
Microsoft Windows Event Tracing is an application from Microsoft Corporation USA. It provides a mechanism for tracking and logging events raised by user-mode applications and kernel-mode drivers. Microsoft Windows Event Tracing is vulnerable to privilege permission and access control issues. The...
Microsoft Windows Subsystem for Linux 产品权限许可和访问控制问题漏洞
Microsoft Windows Subsystem for Linux WSL is a Microsoft Windows Subsystem for Linux, a compatibility layer capable of running native Linux binary executables ELF format. A vulnerability exists in the Microsoft Windows Subsystem for Linux with privilege permission and access control issues. Windo...
Microsoft Windows Update Assistant 权限许可和访问控制问题漏洞
Microsoft Windows Update Assistant is a system update tool from Microsoft Corporation USA. A vulnerability exists in Microsoft Windows Update Assistant due to privilege permission and access control issues. The following products and editions are affected:Windows 10 Version 1809 for 32-bit...
Palo Alto Networks PAN-OS 权限许可和访问控制问题漏洞
Palo Alto Networks PAN-OS is an operating system developed by Palo Alto Networks, Inc. for its firewall appliances. A privilege permission and access control issue vulnerability exists in the Palo Alto Networks PAN-OS dataplan that stems from a mishandling of an anomalous condition vulnerability ...
Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
...
IBM AIX 权限许可和访问控制问题漏洞
IBM AIX is an open standards-based UNIX operating system developed for the IBM Power architecture by the U.S. company IBM. There is a privilege permission and access control issue vulnerability in several IBM applications. The vulnerability stems from the lack of effective privilege permission an...
CVE-2021-30900
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 14.8.1 and iPadOS 14.8.1, iOS 15.1 and iPadOS 15.1. A malicious application may be able to execute arbitrary code with kernel privileges...
Apple macOS 权限许可和访问控制问题漏洞
Apple macOS is a suite of specialized operating systems developed for Mac computers by Apple Inc. in the United States. A vulnerability exists in Apple macOS Monterey prior to version 12.1 with privilege permission and access control issues, which stems from a logic issue that could lead to...
Apple macOS权限许可和访问控制问题漏洞
Apple macOS is a suite of specialized operating systems from the U.S.-based Apple Inc. developed specifically for Mac computers. Apple macOS Monterey 12.0.1 previously contained a privilege permission and access control issue vulnerability that could allow sandboxing processes to bypass sandboxin...
Adobe Captivate 2019 Elevation of Privilege Vulnerability
Adobe Captivate 2019 is a tool that allows us to quickly create and produce interactive content in html. An elevation of privilege vulnerability exists in Adobe Captivate 2019 11.5.5 and earlier versions. The vulnerability stems from creating temporary files in a directory with incorrect...
Dell EMC PowerScale OneFS Elevation of Privilege Vulnerability
Dell EMC PowerScale OneFS is an API-powered file system. A vulnerability exists in Dell EMC PowerScale OneFS versions 8.2. - 9.2. in which critical resource permissions are incorrectly assigned. An attacker could exploit this vulnerability to gain unauthorized access to cluster-related informatio...
CVE-2021-25263
Local privilege vulnerability in Yandex Browser for Windows prior to 21.9.0.390 allows a local, low privileged, attacker to execute arbitary code with the SYSTEM privileges through manipulating files in directory with insecure permissions during Yandex Browser update process...
Nagios XI 权限许可和访问控制问题漏洞
Nagios XI is a commercial monitoring solution built on Nagios Core, including dashboards, web-based configuration, advanced reporting, and rich data visualization.An insecure privilege vulnerability exists in versions of Nagios XI prior to 5.8.5. An attacker could exploit the vulnerability by...
CVE-2021-36945
Windows 10 Update Assistant Elevation of Privilege Vulnerability...
CVE-2021-34483
Windows Print Spooler Elevation of Privilege Vulnerability...
CVE-2021-26431
Windows Recovery Environment Agent Elevation of Privilege Vulnerability...
Privilege escalation
Windows User Account Profile Picture Elevation of Privilege Vulnerability...
CVE-2021-36943
CVE-2021-36943 is an Azure CycleCloud elevation of privilege issue. Connected sources confirm a local escalation vulnerability in Azure CycleCloud, with root cause described as insufficient access control allowing a local attacker to elevate privileges. Public disclosures note the vulnerability a...
