CVE-2024-29055

Summary (CVE-2024-29055 | Microsoft Defender for IoT) A known elevation of privilege vulnerability in Microsoft Defender for IoT. The root cause is described as inadequate access control that could allow a remote attacker to escalate privileges within the affected software. Several sources flag t...

CVE-2024-28917

Summary: CVE-2024-28917 is a cluster-scope elevation of privilege in Azure Arc-enabled Kubernetes Extension. According to connected sources, the affected component is the Azure Arc Kubernetes Extension (Cluster) and the impact is privilege escalation (obtain increased privileges). The CVSS score ...

CVE-2024-26239

COVID: CVE-2024-26239 is a Windows Telephony Server Elevation of Privilege vulnerability with LOCAL attack vector, requiring LOW privileges and no user interaction. The CVSS 3.1 base score is 7.8 (HIGH), with CONFIDENTIALITY, INTEGRITY, and AVAILABILITY impacts rated HIGH. The initial description...

CVE-2024-26211

CVE-2024-26211 is an elevation-of-privilege vulnerability affecting the Windows Remote Access Connection Manager. The CVE entry lists a HIGH base score (CVSSv3.1: 7.8; vector: LOCAL, LOW attack complexity; Privileges Required: LOW; User Interaction: NONE; Scope: UNCHANGED; Confidentiality/Integri...

CVE-2024-26242

CVE-2024-26242 is a Windows Telephony Server elevation-of-privilege vulnerability. The connected documents indicate a local-privilege escalation with CVSS v3.1 base score 7.0 (AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H). Root cause and exact exploit details are not provided in the sources. Microsoft has...

CVE-2024-21324

CVE-2024-21324 – Microsoft Defender for IoT Elevation of Privilege is a Defender for IoT vulnerability. Current sources indicate a privilege-escalation flaw within Defender for IoT that could allow a malicious actor to gain higher permissions in the process, with CVSSv3 base score 7.2 (AV:N/AC:L/...

CVE-2024-21322

CVE-2024-21322 affects Microsoft Defender for IoT. Affected component is the Defender for IoT web application; the root cause is described by Microsoft as CWE-77 (improper neutralization of commands). Exploitation yields remote code execution and requires the attacker to have existing administrat...

EUVD-2024-23435

Microsoft Install Service Elevation of Privilege Vulnerability...

Windows Kernel Elevation of Privilege Vulnerability

...

Microsoft Brokering File System Elevation of Privilege Vulnerability

...

Microsoft Defender for IoT Elevation of Privilege Vulnerability

...

Windows Update Stack Elevation of Privilege Vulnerability

...

PT-2024-3027 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to an elevation-of-privilege vulnerability in Windows Storage Services, which is caused by insecure privilege management. This vulnerability can be exploited by an...

Huawei HarmonyOS 安全漏洞

Huawei HarmonyOS is an operating system from Huawei, a Chinese company. It provides a full-scene distributed operating system based on a microkernel.Huawei EMUI is an emotional operating system developed by Huawei based on Android Android. Huawei HarmonyOS and EMUI are vulnerable to a stray...

CVE-2024-26203

Azure Data Studio Elevation of Privilege Vulnerability...

CVE-2024-21432

Windows Update Stack Elevation of Privilege Vulnerability...

CVE-2024-21400 Microsoft Azure Kubernetes Service Confidential Container Elevation of Privilege Vulnerability

...

CVE-2024-26199 Microsoft Office Elevation of Privilege Vulnerability

...

CVE-2024-21443 Windows Kernel Elevation of Privilege Vulnerability

...

CVE-2024-21418

CVE-2024-21418 affects Software for Open Networking in the Cloud (SONiC). Public docs indicate an Elevation of Privilege vulnerability in SONiC components with affected versions including 201811, 201911, 202012, and 202205. Root cause details are not fully disclosed in the provided materials, but...