Google Android Elevation of Privilege Vulnerability (CNVD-2022-28915)

Google Android is a Linux-based open source operating system from Google, Inc. An elevation of privilege vulnerability exists in Google Android, which stems from a lack of privilege checks in Traceur that could bypass developer setup requirements to capture system traces. An attacker could exploi...

Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

...

Google Android elevation of privilege vulnerability (CNVD-2022-22956)

Google Android is a Linux-based open source operating system from Google. An elevation of privilege vulnerability exists in Google Android versions prior to 10, 11, and 12. The vulnerability stems from an incorrect programmatic call to an advanced local procedure. An attacker could use this...

Xbox Live Auth Manager for Windows Elevation of Privilege Vulnerability

...

Microsoft Windows Fastfat Driver 权限许可和访问控制问题漏洞

Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft Corporation USA. A vulnerability exists in Microsoft Windows Fastfat Driver with privilege permission and access control issues. The following products and editions are affected:Windows 10 Version 1809 fo...

Microsoft Tablet Windows User Interface 权限许可和访问控制问题漏洞

Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft Corporation USA. A vulnerability exists in Microsoft Tablet Windows User Interface with privilege permission and access control issues. The following products and editions are affected: Windows Server...

KB5011487: Windows 10 Version 20H2 / 21H1 / 21H2 Security Update (March 2022)

The remote Windows host is missing security update 5011487. It is, therefore, affected by multiple vulnerabilities: - An elevation of privilege vulnerability. An attacker can exploit this to gain elevated privileges. CVE-2022-23283, CVE-2022-23284, CVE-2022-23291, CVE-2022-24459, CVE-2022-23296,...

Microsoft Windows Fax and Scan Service 权限许可和访问控制问题漏洞

Microsoft Windows Fax Service is a functional component service from Microsoft Corporation USA. It is used to specify settings for faxes, including how they are sent, received, viewed, and printed. A vulnerability exists in Microsoft Windows Fax and Scan Service with privilege permission and acce...

Stepmania Elevation of Privilege Vulnerability

Stepmania is a game from the Stepmania team available for Windows, Linux and OS X. Stepmania is vulnerable to an elevation of privilege vulnerability that stems from a lack of privilege restrictions in the rootfs component of RageFile, which could be exploited to access the entire file system...

Google Android Elevation of Privilege Vulnerability (CNVD-2022-47680)

Google Android is a Linux-based open source operating system from Google, Inc. An elevation of privilege vulnerability exists in Google Android, which stems from a lack of privilege checks and could result in CPU behavior that could be considered faulty and could be exploited by attackers to...

Tibco BusinessConnect Container Edition 权限许可和访问控制问题漏洞

Tibco BusinessConnect Container Edition is a lightweight, sophisticated tool from Tibco, Inc. for business-to-business e-commerce transactions deployed in a unified and consistent manner on a container-based Paas platform. Tibco BusinessConnect Container Edition suffers from a privilege-permissio...

OESA-2022-1519 mysql security update

MySQL client programs and shared libraries. Security Fixes: Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Security: Privileges. Supported versions that are affected are 5.7.36 and prior and 8.0.27 and prior. Easily exploitable vulnerability allows low privileged...

The vulnerability of the Windows Application Model Core API of the operating system allows attackers to enhance their privileges.

The vulnerability of the Windows Application Model Core API component of the Windows operating system is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker to enhance their privileges...

CVE-2022-21996

Win32k Elevation of Privilege Vulnerability...

CVE-2022-22000

Windows Common Log File System Driver Elevation of Privilege Vulnerability...

CVE-2022-21994

Windows DWM Core Library Elevation of Privilege Vulnerability...

CVE-2022-21981

Technical details for CVE-2022-21981 are not publicly available in the provided documents. Monitoring for future updates or disclosures is advised.

Microsoft Dynamics GP Elevation Of Privilege Vulnerability

...

Microsoft Windows Common Log File System Driver权限许可和访问控制问题漏洞

The Microsoft Windows Common Log File System Driver is Microsoft's Common Log File System CLFS API that provides a high-performance, general-purpose log file subsystem that can be used by specialized client applications and shared by multiple clients to optimize logging and access. access. A...

Microsoft Windows Print Spooler Components权限许可和访问控制问题漏洞

Microsoft Windows Print Spooler Components is a printing backend handler component from Microsoft Corporation USA. A vulnerability exists in Microsoft Windows Print Spooler Components due to privilege permission and access control issues. The following products and editions are affected:Windows 1...