CVE-2024-30033: Improper Link Resolution Before File Access

Windows Search Service Elevation of Privilege Vulnerability...

KLA67433 Multiple vulnerabilities in Microsoft Windows

Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to execute arbitrary code, gain privileges, cause denial of service, obtain sensitive information, bypass security restrictions. Below is a complete list of vulnerabilities: 1. A remote cod...

Microsoft Windows Search Service Link Following Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the Windows Search...

PT-2024-3706 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to an elevation-of-privilege vulnerability in the Windows Search Service, which is caused by incorrect handling of symbolic links before accessing a file. This...

The vulnerability of the Windows operating system’s Search service allows a perpetrator to escalate their privileges.

The vulnerability of the Windows operating system’s Search service is related to synchronization errors when using a shared resource “Race Condition”. Exploiting this vulnerability can allow an attacker to increase their privileges...

CVE-2023-36394

Windows Search Service Elevation of Privilege Vulnerability...

CVE-2023-36394

Windows Search Service Elevation of Privilege Vulnerability...

CVE-2023-36394 Windows Search Service Elevation of Privilege Vulnerability

...

CVE-2023-36394

Technical details about CVE-2023-36394 (Windows Search Service elevation of privilege) are not provided in the supplied documents. Monitor for updates; no vendor, impact, or remediation details are disclosed here.

Windows Search Service Elevation of Privilege Vulnerability

...

PT-2023-6945 · Microsoft · Windows Search Service +5

Name of the Vulnerable Software and Affected Versions: Windows Search Service versions prior to the fixed version Description: The issue is related to synchronization errors when using a shared resource, specifically a "race condition" situation. This can allow an attacker to elevate their...

CVE-2023-36394: Improper Link Resolution Before File Access

Windows Search Service Elevation of Privilege Vulnerability...

Vulnerability fixed in OTRS

A vulnerability has been fixed in OTRS. The vulnerability allows an authenticated malicious person to perform an SQL injection. execute. OTRS instances are only vulnerable if the TicketSearch Web service is configured. OTRS developers have released updates to fix the vulnerability. More informati...

CVE-2022-20288

In AppSearchManagerService, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for...

CVE-2021-45492

In Sage 300 ERP formerly accpac through 6.8.x, the installer configures the C:\Sage\Sage300\Runtime directory to be the first entry in the system-wide PATH environment variable. However, this directory is writable by unprivileged users because the Sage installer fails to set explicit permissions...

February 15, 2022—KB5010421 (OS Build 20348.558) Preview

None None...

Description of the security update for SharePoint Enterprise Server 2016: December 14, 2021 (KB5002055)

None None...

Description of the security update for SharePoint Server 2019: December 14, 2021 (KB5002054)

None None...

Unauthorized Access Vulnerability in Apache Solr

Apache Solr is an open source search service , using the Java language development , mainly based on HTTP and Apache Lucene implementation . An unauthorized access vulnerability exists in Apache Solr, which can be exploited by attackers to obtain sensitive information...

CVE-2021-21318 Removing access may not effect published series

Opencast is a free, open-source platform to support the management of educational audio and video content. In Opencast before version 9.2 there is a vulnerability in which publishing an episode with strict access rules will overwrite the currently set series access. This allows for an easy denial...