Privilege escalation

Windows Client Server Run-time Subsystem CSRSS Elevation of Privilege Vulnerability...

CVE-2022-33677 Azure Site Recovery Elevation of Privilege Vulnerability

...

CVE-2022-33672

CVE-2022-33672 is an Elevation of Privilege in Microsoft Azure Site Recovery. Affected components include Azure Site Recovery VM/VMware-to-Azure flows and related libraries (e.g., Azure Storage Queues/Blobs client libs as listed). Root cause details are not fully disclosed in the provided documen...

CVE-2022-33657

CVE-2022-33657 is an Elevation of Privilege vulnerability affecting Microsoft Azure Site Recovery components (notably the Site Recovery VM to Azure and related libraries). The NVD entry describes a Privilege Escalation with network attack vector and high impact on integrity/availability, and its ...

CVE-2022-33655 Azure Site Recovery Elevation of Privilege Vulnerability

...

CVE-2022-33654 Azure Site Recovery Elevation of Privilege Vulnerability

...

CVE-2022-33651

CVE-2022-33651 is documented as an Elevation of Privilege vulnerability in Microsoft Azure Site Recovery (Azure Site Recovery/DRaaS). Connected sources corroborate that multiple Site Recovery vulnerabilities were addressed by Microsoft updates; remediation involves installing the published update...

CVE-2022-22050 Windows Fax Service Elevation of Privilege Vulnerability

...

CVE-2022-22045 Windows.Devices.Picker.dll Elevation of Privilege Vulnerability

...

CVE-2022-22026 Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability

...

Xbox Live Save Service Elevation of Privilege Vulnerability

...

Windows.Devices.Picker.dll Elevation of Privilege Vulnerability

...

Azure Site Recovery Elevation of Privilege Vulnerability

...

Microsoft Windows Active Directory 权限许可和访问控制问题漏洞

Microsoft Windows Active Directory is a centralized directory management service responsible for architecting medium- to large-scale network environments from the U.S. company Microsoft. Stores information about objects on the network and makes it easy for administrators and users to find and use...

Microsoft Windows 权限许可和访问控制问题漏洞

Microsoft Windows is a suite of operating systems used by Microsoft Corporation USA for personal devices. A vulnerability exists in Microsoft Windows Storage with privilege permission and access control issues. The following products and editions are affected:Windows Server 2019 Server Core...

CVE-2022-31138 OS Command Injection in mailcow

mailcow is a mailserver suite. Prior to mailcow-dockerized version 2022-06a, an extended privilege vulnerability can be exploited by manipulating the custom parameters regexmess, skipmess, regexflag, delete2foldersonly, delete2foldersbutnot, regextrans2, pipemess, or maxlinelengthcmd to execute...

CVE-2022-33680 Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

...

Design/Logic Flaw

IBM CloudPak for Multicloud Monitoring 2.0 and 2.3 has a few containers running in privileged mode which is vulnerable to host information leakage or destruction if unauthorized access to these containers could execute arbitrary commands. IBM X-Force ID: 211048...

Google Android elevation of privilege vulnerability (CNVD-2022-50274)

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability that can be exploited by an attacker to elevate privileges...

Google Android elevation of privilege vulnerability (CNVD-2022-50276)

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability that can be exploited by an attacker to gain elevated privileges...