Lucene search
K

76 matches found

Vulnrichment
Vulnrichment
added 2023/11/02 6:56 p.m.14 views

CVE-2023-31017 CVE

NVIDIA GPU Display Driver for Windows contains a vulnerability where an attacker may be able to write arbitrary data to privileged locations by using reparse points. A successful exploit of this vulnerability may lead to code execution, denial of service, escalation of privileges, information...

7.8CVSS7.3AI score0.00194EPSS
Exploits0References1
Cvelist
Cvelist
added 2023/11/02 6:56 p.m.32 views

CVE-2023-31017 CVE

NVIDIA GPU Display Driver for Windows contains a vulnerability where an attacker may be able to write arbitrary data to privileged locations by using reparse points. A successful exploit of this vulnerability may lead to code execution, denial of service, escalation of privileges, information...

7.8CVSS8.3AI score0.00194EPSS
Exploits0References1
CVE
CVE
added 2023/11/02 6:56 p.m.96 views

CVE-2023-31017

CVE-2023-31017 : NVIDIA GPU Display Driver for Windows contains a vulnerability that allows an attacker to write arbitrary data to privileged locations via reparse points, potentially enabling code execution, DoS, privilege escalation, information disclosure, or data tampering. Public documentati...

7.8CVSS7.9AI score0.00194EPSS
Exploits0References1Affected Software1
The Hacker News
The Hacker News
added 2023/08/30 5:4 p.m.67 views

Hackers Can Exploit Windows Container Isolation Framework to Bypass Endpoint Security

New findings show that malicious actors could leverage a sneaky malware detection evasion technique and bypass endpoint security solutions by manipulating the Windows Container Isolation Framework. The findings were presented by Deep Instinct security researcher Daniel Avinoam at the DEF CON...

6.8AI score
Exploits0
Positive Technologies
Positive Technologies
added 2023/04/22 12:0 a.m.2 views

PT-2023-6812 · Nvidia · Nvidia Gpu Display Driver

Name of the Vulnerable Software and Affected Versions: NVIDIA GPU Display Driver for Windows affected versions not specified Description: The issue allows an attacker to write arbitrary data to privileged locations by using reparse points. A successful exploit may lead to code execution, denial o...

7.8CVSS8.2AI score0.00194EPSS
Exploits0References7
Fedora
Fedora
added 2022/06/24 1:26 a.m.50 views

[SECURITY] Fedora 35 Update: ntfs-3g-system-compression-1.0-9.fc35

System compression, also known as "Compact OS", is a Windows feature that allows rarely modified files to be compressed using the XPRESS or LZX compression formats. It is not built directly into NTFS but rather is implemented using reparse points. This feature appeared in Windows 10 and it appear...

7.8CVSS7.5AI score0.00498EPSS
Exploits1
Fedora
Fedora
added 2021/09/07 4:26 p.m.28 views

[SECURITY] Fedora 33 Update: ntfs-3g-system-compression-1.0-7.fc33

System compression, also known as "Compact OS", is a Windows feature that allows rarely modified files to be compressed using the XPRESS or LZX compression formats. It is not built directly into NTFS but rather is implemented using reparse points. This feature appeared in Windows 10 and it appear...

2.2AI score
Exploits0
BDU FSTEC
BDU FSTEC
added 2021/04/08 12:0 a.m.5 views

The vulnerability of the Master Configuration Wizard component of Kaspersky’s antivirus protection tools—Kaspersky Anti-Virus, Kaspersky Internet Security, Kaspersky Total Security, Kaspersky Small Office Security, and Kaspersky Security Cloud—allows a perpetrator to delete any file in the system.

The vulnerability of the Master Configuration Wizard component of Kaspersky Anti-Virus, Kaspersky Internet Security, Kaspersky Total Security, Kaspersky Small Office Security, and Kaspersky Security Cloud antivirus products is related to errors in processing symbolic links. Exploiting this...

7.9CVSS5.5AI score
Exploits0References1Affected Software5
BDU FSTEC
BDU FSTEC
added 2021/03/31 12:0 a.m.3 views

The vulnerability of the Web Antivirus component of Kaspersky Endpoint Security allows a perpetrator to compromise data integrity.

The vulnerability of the Web Antivirus component of Kaspersky Endpoint Security relates to insufficient checking of file paths for reparse points. Exploiting this vulnerability can allow attackers to compromise data integrity...

5.5CVSS5.5AI score
Exploits0References1Affected Software6
OSV
OSV
added 2020/10/16 11:15 p.m.2 views

CVE-2020-16877

An elevation of privilege vulnerability exists when Microsoft Windows improperly handles reparse points. An attacker who successfully exploited this vulnerability could overwrite or delete a targeted file that would normally require elevated permissions. To exploit this vulnerability, an attacker...

7.1CVSS7.1AI score0.00942EPSS
Exploits0References1
NVD
NVD
added 2020/10/16 11:15 p.m.14 views

CVE-2020-16877

An elevation of privilege vulnerability exists when Microsoft Windows improperly handles reparse points. An attacker who successfully exploited this vulnerability could overwrite or delete a targeted file that would normally require elevated permissions. To exploit this vulnerability, an attacker...

7.1CVSS0.00942EPSS
Exploits0References1
Prion
Prion
added 2020/10/16 11:15 p.m.21 views

Privilege escalation

An elevation of privilege vulnerability exists when Microsoft Windows improperly handles reparse points. An attacker who successfully exploited this vulnerability could overwrite or delete a targeted file that would normally require elevated permissions. To exploit this vulnerability, an attacker...

3.6CVSS7.6AI score0.00942EPSS
Exploits0References1Affected Software2
Microsoft CVE
Microsoft CVE
added 2020/10/13 7:0 a.m.40 views

Windows Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists when Microsoft Windows improperly handles reparse points. An attacker who successfully exploited this vulnerability could overwrite or delete a targeted file that would normally require elevated permissions. To exploit this vulnerability, an attacker...

7.1CVSS4AI score0.00942EPSS
Exploits0
Positive Technologies
Positive Technologies
added 2020/10/13 12:0 a.m.1 views

PT-2020-4337 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Microsoft Windows affected versions not specified Description: An elevation of privilege issue exists due to improper handling of reparse points by Microsoft Windows. This could allow an attacker to overwrite or delete targeted files that...

7.1CVSS6.5AI score0.00942EPSS
Exploits0References10
OSV
OSV
added 2020/07/14 11:15 p.m.1 views

CVE-2020-1333

An elevation of privilege vulnerability exists when Group Policy Services Policy Processing improperly handle reparse points, aka 'Group Policy Services Policy Processing Elevation of Privilege Vulnerability'...

6.7CVSS6.9AI score0.00921EPSS
Exploits0References1
NVD
NVD
added 2020/07/14 11:15 p.m.16 views

CVE-2020-1333

An elevation of privilege vulnerability exists when Group Policy Services Policy Processing improperly handle reparse points, aka 'Group Policy Services Policy Processing Elevation of Privilege Vulnerability'...

6.7CVSS0.00921EPSS
Exploits0References1
Prion
Prion
added 2020/07/14 11:15 p.m.15 views

Privilege escalation

An elevation of privilege vulnerability exists when Group Policy Services Policy Processing improperly handle reparse points, aka 'Group Policy Services Policy Processing Elevation of Privilege Vulnerability'...

3.7CVSS7.1AI score0.00921EPSS
Exploits0References1Affected Software5
CVE
CVE
added 2020/07/14 10:54 p.m.110 views

CVE-2020-1333

CVE-2020-1333 is an elevation of privilege vulnerability in Microsoft Windows and Windows Server caused by Group Policy Services Policy Processing failing to properly handle reparse points. The CNVD-2020-52916 entry confirms the root cause as the policy processing re-resolution issue and lists Wi...

6.7CVSS7.7AI score0.00921EPSS
Exploits0References1Affected Software8
Microsoft CVE
Microsoft CVE
added 2020/03/10 7:0 a.m.20 views

Windows Installer Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists in the Windows Installer when MSI packages process symbolic links. An attacker who successfully exploited this vulnerability could bypass access restrictions to add or remove files. To exploit this vulnerability, an attacker would first have to log o...

7CVSS4.6AI score0.00969EPSS
Exploits0
Microsoft CVE
Microsoft CVE
added 2020/02/11 8:0 a.m.35 views

Windows Installer Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists in the Windows Installer when MSI packages process symbolic links. An attacker who successfully exploited this vulnerability could bypass access restrictions to add or remove files. To exploit this vulnerability, an attacker would first have to log o...

7.8CVSS4.6AI score0.07667EPSS
Exploits5
Rows per page
Query Builder