Microsoft Windows Common Log File System Driver权限许可和访问控制问题漏洞

The Microsoft Windows Common Log File System Driver is Microsoft's Common Log File System CLFS API that provides a high-performance, general-purpose log file subsystem that can be used by specialized client applications and shared by multiple clients to optimize logging and access. access. A...

Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

...

ManageEngine Desktop Central 权限许可和访问控制问题漏洞

ZOHO ManageEngine Desktop Central DC is a desktop management solution from ZOHO. The solution includes software distribution, patch management, system configuration, remote control and other functional modules to support the entire lifecycle of desktop and server management. A privilege permissio...

Microsoft Windows Background Intelligent Transfer Service (BITS) Improper Privilege Management Vulnerability

Microsoft Windows BITS is vulnerable to to a privilege elevation vulnerability if it improperly handles symbolic links. An actor can exploit this vulnerability to execute arbitrary code with system-level privileges...

Mageia: Security Advisory (MGASA-2019-0331)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

polkit pkexec elevation of privilege vulnerability

pkexec is a SUID root program that is installed on every major Linux distribution by default. polkit pkexec elevation of privilege vulnerability can be exploited to gain full root privileges on a host...

Linux kernel 权限许可和访问控制问题漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. The Linux kernel suffers from a privilege-granting and access-control issue vulnerability that could allow a local attacker with user privileges to cause an elevation of...

Exploit for Out-of-bounds Write in Polkit_Project Polkit

This is a PoC exploit for CVE-2021-4034, a local privilege escal...

Apple macOS Monterey和Apple macOS Big Sur权限许可和访问控制问题漏洞

Apple macOS Big Sur and Apple macOS Monterey are both products of Apple Inc.Apple macOS Big Sur is a mobile application app.Apple macOS Monterey is the 18th major version of macOS, the operating system for the Macintosh desktop. Apple macOS Monterey and Apple macOS Big Sur are vulnerable to a...

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Privileges). Supported versions that are affected are 5.7.36 and prior and 8.0.27 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized update insert or delete access to some of MySQL Server accessible data. CVSS 3.1 Base Score 4.3 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N).

...

Privilege escalation

Microsoft Edge Chromium-based Elevation of Privilege Vulnerability...

CVE-2022-21901

Technical details for CVE-2022-21901 are not publicly available in the provided documents. No explicit affected components, root cause, impact, or remediation are disclosed here. Monitor for updates from official advisories.

CVE-2022-21885 Windows Remote Access Connection Manager Elevation of Privilege Vulnerability

...

CVE-2022-21882 Win32k Elevation of Privilege Vulnerability

...

CVE-2022-21863 Windows StateRepository API Server file Elevation of Privilege Vulnerability

...

Windows User-mode Driver Framework Reflector Driver Elevation of Privilege Vulnerability

...

Microsoft Diagnostics Hub Standard Collector Runtime Elevation of Privilege Vulnerability

...

Clipboard User Service Elevation of Privilege Vulnerability

...

Microsoft Cryptographic 权限许可和访问控制问题漏洞

Microsoft Cryptographic is an encryption service from Microsoft Corporation USA. A vulnerability exists in Microsoft Windows Cryptographic Services with privilege permission and access control issues. The following products and versions are affected: Windows 7 for 32-bit Systems Service Pack...

Microsoft Windows Remote Access Connection Manager权限许可和访问控制问题漏洞

Microsoft Windows Remote Access Connection Manager is a Windows service from Microsoft that manages virtual private network VPN connections from your computer to the Internet. If you disable this service, the VPN client application If you disable this service, VPN client applications will not...