CVE-2021-34484 Windows User Profile Service Elevation of Privilege Vulnerability

...

CVE-2021-34484

Windows User Profile Service Elevation of Privilege Vulnerability Recent assessments: ccondon-r7 at March 29, 2022 12:10pm UTC reported: This bug was evidently used by LAPSUS$ in the wild as part of the attack on Okta. gwillcox-r7 at March 30, 2022 4:21pm UTC reported: This bug was evidently used...

Microsoft Windows 产品权限许可和访问控制问题漏洞

Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft Corporation USA. A vulnerability exists in Microsoft Windows with privilege license and access control issues. The following products and editions are affected: Windows 10 Version 20H2 for 32-bit...

Microsoft Windows Event Tracing 权限许可和访问控制问题漏洞

Microsoft Windows Event Tracing is an application from Microsoft Corporation USA. It provides a mechanism for tracking and logging events raised by user-mode applications and kernel-mode drivers. Microsoft Windows Event Tracing is vulnerable to privilege permission and access control issues. The...

Google Android asf extractor elevation of privilege vulnerability

Google Android is a Linux-based open-source operating system from the US company Google. Google Android asf extractor has an elevation of privilege vulnerability that can be exploited by attackers to escalate privileges...

Nexus Control Panel Elevation of Privilege Vulnerability

Swisslog Healthcare Nexus Panel is a medical device from Swisslog Healthcare.An elevation of privilege vulnerability exists in versions prior to Nexus Control Panel 7.2.5.7. An attacker could exploit this vulnerability to gain root access to the device, which would allow access to all device...

Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

...

CVE-2021-34449

Win32k Elevation of Privilege Vulnerability...

CVE-2021-34455

CVE-2021-34455 is a Windows/File History Service elevation-of-privilege issue. Connected CNVD-2021-66071 describes an elevation-of-privilege vulnerability in the File History Service of Microsoft Windows/Windows Server. The CVE entry lists local access, low attack complexity, no authentication re...

CVE-2021-34514

Windows Kernel Elevation of Privilege Vulnerability...

CVE-2021-34470

Microsoft Exchange Server Elevation of Privilege Vulnerability...

CVE-2021-33768

Microsoft Exchange Server Elevation of Privilege Vulnerability...

CVE-2021-33771

Windows Kernel Elevation of Privilege Vulnerability...

Privilege escalation

Windows Remote Access Connection Manager Elevation of Privilege Vulnerability...

CVE-2021-34498 Windows GDI Elevation of Privilege Vulnerability

...

CVE-2021-33771 Windows Kernel Elevation of Privilege Vulnerability

...

CVE-2021-33761 Windows Remote Access Connection Manager Elevation of Privilege Vulnerability

...

CVE-2021-33759

Technical details about CVE-2021-33759 are not publicly provided in the supplied documents. Monitor for updates from NVD, Microsoft MSRC, and CNVD/NCSC sources for affected components, impact, and fixes.

CVE-2021-31979 Windows Kernel Elevation of Privilege Vulnerability

...

Privilege escalation

The Lexmark Printer Software G2, G3 and G4 Installation Packages have a local escalation of privilege vulnerability due to a registry entry that has an unquoted service path...