CVE-2022-20432

There is an missing authorization issue in the system service. Since the component does not have permission check and permission protection,, resulting in Local Elevation of privilege.Product: AndroidVersions: Android SoCAndroid ID: A-242221899...

CVE-2022-37984

Windows WLAN Service Elevation of Privilege Vulnerability...

CVE-2022-38034

Windows Workstation Service Elevation of Privilege Vulnerability...

Privilege escalation

Windows Kernel Elevation of Privilege Vulnerability...

Windows Resilient File System Elevation of Privilege

...

Windows Server Service Elevation of Privilege Vulnerability

...

PT-2022-5520 · Microsoft · Windows Dhcp Client +1

Name of the Vulnerable Software and Affected Versions: Windows DHCP Client affected versions not specified Description: The issue is related to insecure privilege management in the Windows DHCP client, which can be exploited to elevate privileges. This allows an attacker to affect the system. No...

CVE-2022-38003 Windows Resilient File System Elevation of Privilege

...

PT-2022-5751 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to the win32k component of the Windows operating system and involves insecure privilege management. It allows an attacker to elevate their privileges, potentially...

CVE-2020-14129

CVE-2020-14129 concerns a logic vulnerability in a Xiaomi product due to an identity verification failure that enables a brief elevation of privileges. The NVD entry rates it CVSS v3.1 as 9.8 (CRITICAL): attack vector NETWORK, attack complexity LOW, privileges required NONE, user interaction NONE...

PT-2022-5363 · Microsoft · Windows Client Server Run-Time Subsystem +1

Name of the Vulnerable Software and Affected Versions: Windows Client Server Run-time Subsystem CSRSS affected versions not specified Description: The issue is related to an elevation of privilege vulnerability in the Windows Client Server Run-time Subsystem CSRSS. It is associated with an...

PT-2022-8560 · Xiaomi · Xiaomi

Name of the Vulnerable Software and Affected Versions: Xiaomi product affected versions not specified Description: A logic issue exists due to an identity verification failure, allowing an attacker to briefly elevate their privileges. Recommendations: At the moment, there is no information about ...

Xiaomi specific devices 安全漏洞

Xiaomi specific devices are a series of specific devices from the Chinese company Xiaomi. A security vulnerability exists in Xiaomi specific devices, which stems from an authentication failure. An attacker could exploit this vulnerability to gain a short-lived elevation of privilege...

Microsoft Windows DHCP Client 安全漏洞

Microsoft Windows is a set of operating systems for personal devices from Microsoft Corporation USA.An elevation of privilege vulnerability exists in Microsoft Windows DHCP Client, which stems from improper privilege assignment in the application and can be exploited by an attacker to cause an...

MediaTek 芯片 缓冲区错误漏洞

MediaTek Inc. is the world's fourth largest fab semiconductor company and a market leader in mobile devices, smart home applications, wireless connectivity technologies and IoT products, with approximately 1.5 billion devices a year with MediaTek chips built into them available around the world...

MediaTek 芯片代码问题漏洞

MediaTek chips are a variety of chips from MediaTek, a Chinese company called MediaTek. An elevation of privilege vulnerability exists in several MediaTek chips telephony, which stems from a mismatch in the package format and can be exploited by an attacker to conduct elevation of privilege...

Cisco SD-WAN Access Control Error Vulnerability

Cisco SD-WAN is a highly secure cloud-scale architecture from Cisco that is open, programmable, and scalable.Cisco SD-WAN has an access control error vulnerability that stems from improper access control of commands in the application CLI, which could be exploited by an attacker to elevate...

RealVNC VNC Server 安全漏洞

RealVNC VNC Server is a VNC server for remote access software from RealVNC UK. A security vulnerability exists in RealVNC VNC Server versions prior to 6.11.0 and VNC Viewer versions prior to 6.22.826. An attacker has exploited the vulnerability to perform a local elevation of privilege via MSI...

Memory corruption

A memory corruption issue was addressed with improved input validation. This issue is fixed in macOS Monterey 12.6, iOS 15.7 and iPadOS 15.7, iOS 16, macOS Big Sur 11.7. A user may be able to elevate privileges...

PT-2022-6227 · Microsoft · Azure Service Fabric Container

Name of the Vulnerable Software and Affected Versions: Azure Service Fabric Container affected versions not specified Description: The issue is related to the Azure Service Fabric Container and involves an elevation of privilege vulnerability. This vulnerability is associated with the WAagent...