CVE-2024-38249

CVE-2024-38249 is a Windows Graphics Component elevation-of-privilege vulnerability. The connected sources confirm this CVE affects Windows Graphics Component and carries a CVSS v3.1 base score of 7.8 (HIGH), with local attack vector, low attack complexity, and privileges required: LOW; impact to...

CVE-2024-38242 Kernel Streaming Service Driver Elevation of Privilege Vulnerability

...

CVE-2024-38216 Azure Stack Hub Elevation of Privilege Vulnerability

...

Description of the security update for Office Online Server: September 10, 2024 (KB5002601)

None None...

Huawei HarmonyOS 安全漏洞

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A security vulnerability exists in Huawei HarmonyOS, which stems from an access privilege vulnerability in the Camera driver module...

CVE-2024-39579

Dell PowerScale OneFS versions 8.2.2.x through 9.8.0.0 contains an incorrect privilege assignment vulnerability. A local high privileged attacker could potentially exploit this vulnerability to gain root-level access...

CVE-2024-20466 Cisco Identity Services Engine Sensitive Information Disclosure Vulnerability

A vulnerability in the web-based management interface of Cisco Identity Services Engine ISE could allow an authenticated, remote attacker to obtain sensitive information from an affected device. This vulnerability is due to improper enforcement of administrative privilege levels for high-value...

CVE-2024-38175 Azure Managed Instance for Apache Cassandra Elevation of Privilege Vulnerability

...

CVE-2024-38196

Windows Common Log File System Driver Elevation of Privilege Vulnerability...

CVE-2024-38144

Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability...

CVE-2024-38150 Windows DWM Core Library Elevation of Privilege Vulnerability

...

CVE-2024-38098 Azure Connected Machine Agent Elevation of Privilege Vulnerability

...

CVE-2024-38084

CVE-2024-38084 : Microsoft OfficePlus Elevation of Privilege vulnerability. Publicly documented as a local elevation of privilege in Microsoft OfficePlus with the impact of obtaining elevated privileges. Reported info indicates exploitation may require user to open a file or link, and that the is...

CVE-2024-38191

Technical details for CVE-2024-38191 are not publicly provided in the supplied documents. Monitor for updates from Microsoft MSRC/NVD, NVD, or CVE listings as new information becomes available.

CVE-2024-21302 Windows Secure Kernel Mode Elevation of Privilege Vulnerability

...

Huawei EMUI和Huawei HarmonyOS 安全漏洞

Huawei HarmonyOS is an operating system from Huawei, a Chinese company. It provides a full-scene distributed operating system based on a microkernel.Huawei EMUI is an emotional operating system developed by Huawei based on Android Android. Huawei HarmonyOS and EMUI are vulnerable to a privilege...

UAB Pantera CRM 安全漏洞

UAB Pantera CRM is a tool and information management system from UAB Pantera. A security vulnerability exists in UAB Pantera CRM version v.401.152 and v.402.072, which stems from an insecure privilege vulnerability allows remote attackers to execute arbitrary code by modifying the header componen...

CVE-2024-41143

Origin validation error vulnerability exists in SKYSEA Client View Ver.3.013.00 to Ver.19.210.04e. If this vulnerability is exploited, an arbitrary process may be executed with SYSTEM privilege by a user who can log in to the PC where the product's Windows client is installed...

dde-file-manager 安全漏洞

dde-file-manager is a Chinese deepin Technology open source file management tool . It has file management functions such as searching, copying, recycling, compressing/uncompressing, viewing file attributes and so on. A security vulnerability exists in dde-file-manager version 6.0.54 and earlier,...

OTRS Security Vulnerabilities

OTRS is a software application from the German company OTRS. A service management software. A security vulnerability exists in OTRS that stems from the presence of an incorrect privilege assignment vulnerability that could lead to elevated privileges...