2088 matches found
CVE-2024-5909
CVE-2024-5909 affects Palo Alto Networks Cortex XDR Agent on Windows. A protection mechanism flaw lets a low-privileged local Windows user disable the Cortex XDR Agent, potentially enabling malware to perform malicious activity after disabling protection. Connected documents consistently referenc...
CVE-2024-5905 Cortex XDR Agent: Local Windows User Can Disrupt Functionality of the Agent
A problem with a protection mechanism in the Palo Alto Networks Cortex XDR agent on Windows devices allows a local low privileged Windows user to disrupt some functionality of the agent. However, they are not able to disrupt Cortex XDR agent protection mechanisms using this vulnerability...
Cortex XDR Agent: Local Windows User Can Disable the Agent
A problem with a protection mechanism in the Palo Alto Networks Cortex XDR agent on Windows devices allows a low privileged local Windows user to disable the agent. This issue may be leveraged by malware to disable the Cortex XDR agent and then to perform malicious activity. Work around: No work...
PT-2024-4315 · Palo Alto Networks · Palo Alto Networks Cortex Xdr Agent
Name of the Vulnerable Software and Affected Versions: Palo Alto Networks Cortex XDR Agent affected versions not specified Description: The issue is related to a flaw in the source confirmation mechanism of the Palo Alto Networks Cortex XDR Agent, which can be exploited to impact the system's...
CVE-2024-30052: Protection Mechanism Failure
Visual Studio Remote Code Execution Vulnerability...
CVE-2024-5691: Protection Mechanism Failure
By tricking the browser with a X-Frame-Options header, a sandboxed iframe could have presented a button that, if clicked by a user, would bypass restrictions to open a new window. This vulnerability affects Firefox 127, Firefox ESR 115.12, and Thunderbird 115.12...
hw: intel: Protection mechanism failure for some Intel(R) PROSet/Wireless WiFi
Protection mechanism failure for some IntelR PROSet/Wireless WiFi software may allow a privileged user to enable escalation of privilege via local access...
GHSA-57FM-592M-34R7 iFrames Bypass Origin Checks for Tauri API Access Control
Impact Remote origin iFrames in Tauri applications can access the Tauri IPC endpoints without being explicitly allowed in the dangerousRemoteDomainIpcAccess in v1 and in the capabilities in v2. This bypasses the origin check and allows iFrames to access the IPC endpoints exposed to the parent...
hw: intel: Protection mechanism failure for some Intel(R) PROSet/Wireless WiFi
Protection mechanism failure for some IntelR PROSet/Wireless WiFi software may allow a privileged user to enable escalation of privilege via local access...
K000139654: Intel oneAPI vulnerabilities CVE-2023-24592 and CVE-2023-27383
Security Advisory Description CVE-2023-24592 Path traversal in the some IntelR oneAPI Toolkits and Component software before version 2023.1 may allow authenticated user to potentially enable escalation of privilege via local access. CVE-2023-27383 Protection mechanism failure in some IntelR oneAP...
CVE-2024-31142: Protection Mechanism Failure
Because of a logical error in XSA-407 Branch Type Confusion, the mitigation is not applied properly when it is intended to be used. XSA-434 Speculative Return Stack Overflow uses the same infrastructure, so is equally impacted. For more details, see: https://xenbits.xen.org/xsa/advisory-407.html...
CVE-2024-30041: Protection Mechanism Failure
Microsoft Bing Search Spoofing Vulnerability...
CVE-2024-34524
In XLANG OpenAgents through fe73ac4, the allowedfile protection mechanism can be bypassed by using an incorrect file extension for the nature of the file content...
hw: intel: Protection mechanism failure for some Intel(R) PROSet/Wireless WiFi
Protection mechanism failure for some IntelR PROSet/Wireless WiFi software may allow a privileged user to enable escalation of privilege via local access...
CVE-2024-33903: Protection Mechanism Failure
In CARLA through 0.9.15.2, the collision sensor mishandles some situations involving pedestrians or bicycles, in part because the collision sensor function is not exposed to the Blueprint library...
Fedora 40 : python3.10 (2023-254c1f3b69)
The remote Fedora 40 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-254c1f3b69 advisory. Automatic update for python3.10-3.10.13-2.fc40. Changelog Mon Dec 18 2023 Lumr Balhar - 3.10.13-2 - Security fix for CVE-2023-27043 rhbz2196187 Tenable has...
Fedora 40 : python3.11 (2023-3c8c06b6bb)
The remote Fedora 40 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-3c8c06b6bb advisory. Automatic update for python3.11-3.11.7-2.fc40. Changelog Mon Dec 18 2023 Lumr Balhar - 3.11.7-2 - Security fix for CVE-2023-27043 rhbz2196188 Tenable has...
CVE-2022-48611: Protection Mechanism Failure
A logic issue was addressed with improved checks. This issue is fixed in iTunes 12.12.4 for Windows. A local attacker may be able to elevate their privileges...