Lucene search
K

1262 matches found

CNNVD
CNNVD
added 2021/12/23 12:0 a.m.2 views

Apple macOS High Sierra 缓冲区错误漏洞

Apple macOS High Sierra is a specialized operating system developed by Apple for Mac computers. apple macOS High Sierra has a security vulnerability that could be exploited by attackers to execute arbitrary code with elevated privileges...

7.8CVSS6.2AI score0.00367EPSS
Exploits0References2
Zero Day Initiative
Zero Day Initiative
added 2021/12/21 12:0 a.m.35 views

Microsoft Windows tcpip.sys Heap-based Buffer Overflow Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the tcpip.sys...

8.8CVSS8.4AI score0.00702EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/12/21 12:0 a.m.40 views

Microsoft Windows Print Spooler Link Following Privilege Escalation Vulnerability

This vulnerability allows local attackers to escape the low integrity sandbox on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the...

7.8CVSS8.3AI score0.00653EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/12/14 12:0 a.m.21 views

Trend Micro Maximum Security Link Following Denial-of-Service Vulnerability

This vulnerability allows local attackers to create a denial-of-service condition on affected installations of Trend Micro Maximum Security. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exis...

6.1CVSS3.5AI score0.00213EPSS
Exploits0References1
OSV
OSV
added 2021/12/03 11:15 a.m.0 views

CVE-2021-44020

An unnecessary privilege vulnerability in Trend Micro Worry-Free Business Security 10.0 SP1 could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit...

7.8CVSS7.3AI score0.00061EPSS
Exploits0References2
OSV
OSV
added 2021/12/03 11:15 a.m.0 views

CVE-2021-44021

An unnecessary privilege vulnerability in Trend Micro Worry-Free Business Security 10.0 SP1 could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit...

7.8CVSS7.3AI score0.00061EPSS
Exploits0References2
Prion
Prion
added 2021/12/03 11:15 a.m.8 views

Privilege escalation

An unnecessary privilege vulnerability in Trend Micro Worry-Free Business Security 10.0 SP1 could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit...

7.2CVSS7.7AI score0.00061EPSS
Exploits0References2Affected Software1
Prion
Prion
added 2021/12/03 11:15 a.m.13 views

Authentication flaw

A reachable assertion vulnerability in Trend Micro Apex One could allow an attacker to crash the program on affected installations, leading to a denial-of-service DoS. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit th...

2.1CVSS5.7AI score0.00076EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2021/12/03 10:50 a.m.11 views

CVE-2021-44019

An unnecessary privilege vulnerability in Trend Micro Worry-Free Business Security 10.0 SP1 could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit...

8AI score0.00061EPSS
Exploits0References2
Zero Day Initiative
Zero Day Initiative
added 2021/12/03 12:0 a.m.11 views

Avira Free Antivirus Unnecessary Privileges Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Avira Free Antivirus. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the endpoint...

7CVSS6.1AI score
Exploits0
Zero Day Initiative
Zero Day Initiative
added 2021/12/03 12:0 a.m.16 views

Bitdefender GravityZone Unnecessary Privileges Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Bitdefender GravityZone. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the endpoint...

7CVSS5.8AI score0.00097EPSS
Exploits0References1
NVD
NVD
added 2021/11/30 12:15 p.m.19 views

CVE-2021-43771

Trend Micro Antivirus for Mac 2021 v11 Consumer is vulnerable to an improper access control privilege escalation vulnerability that could allow an attacker to establish a connection that could lead to full local privilege escalation within the application. Please note that an attacker must first...

7.8CVSS0.00078EPSS
Exploits0References2
Prion
Prion
added 2021/11/23 7:15 p.m.19 views

Privilege escalation

Adobe Creative Cloud version 5.5 and earlier are affected by a privilege escalation vulnerability in the resources leveraged by the Setup.exe service. An unauthenticated attacker could leverage this vulnerability to remove files and escalate privileges under the context of SYSTEM . An attacker mu...

9.3CVSS7.9AI score0.00542EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2021/11/23 6:3 p.m.14 views

CVE-2021-43019 Adobe Creative Cloud Incorrect Permission Assignment Privilege Escalation Vulnerability

Adobe Creative Cloud version 5.5 and earlier are affected by a privilege escalation vulnerability in the resources leveraged by the Setup.exe service. An unauthenticated attacker could leverage this vulnerability to remove files and escalate privileges under the context of SYSTEM . An attacker mu...

7.8CVSS8.1AI score0.00542EPSS
Exploits0References1
OSV
OSV
added 2021/11/16 7:15 p.m.3 views

CVE-2020-12951

Race condition in ASP firmware could allow less privileged x86 code to perform ASP SMM System Management Mode operations...

7CVSS5.8AI score
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/11/11 12:0 a.m.33 views

Microsoft Windows Diagnostics Hub Link Following Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the Microsoft...

7.8CVSS8.2AI score0.00263EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/11/09 12:0 a.m.31 views

Kaspersky Total Security Directory Traversal Denial-of-Service Vulnerability

This vulnerability allows local attackers to create a denial-of-service condition on affected installations of Kaspersky Total Security. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists...

6.1CVSS7.2AI score0.01281EPSS
Exploits0References1
CNVD
CNVD
added 2021/11/04 12:0 a.m.4 views

Fortinet FortiSIEM Windows Agent Command Execution Vulnerability

Fortinet FortiSIEM Windows Agent is an agent program for collecting logs and other behaviors from Windows servers from Fortinet, Inc. A security vulnerability exists in Fortinet FortiSIEM Windows Agent versions 4.1.4 and below, which can be exploited by an attacker to execute privileged code or...

7.8CVSS7.8AI score0.00049EPSS
Exploits0References1
CNVD
CNVD
added 2021/11/03 12:0 a.m.4 views

Unspecified Vulnerability in Fortinet FortiSIEM Windows Agent

Fortinet FortiSIEM Windows Agent is an agent program for collecting logs and other behaviors from Windows servers from Fortinet, Inc. A security vulnerability exists in Fortinet FortiSIEM Windows Agent versions 4.1.4 and below, which can be exploited by an attacker to execute privileged code or...

7.8CVSS7.8AI score0.00049EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/11/03 12:0 a.m.25 views

(0Day) Bitdefender Total Security Unnecessary Privileges Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Bitdefender Total Security. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the...

7CVSS7.6AI score0.00097EPSS
Exploits0
Rows per page
Query Builder