160 matches found
CVE-2024-49126
CVE-2024-49126 affects Windows Local Security Authority Subsystem Service (LSASS) and enables remote code execution. The CVSS v3.1 base context shows Network attack vector, high impact on confidentiality, integrity, and availability, with no privileges required and no user interaction. Connected ...
CVE-2024-49126: Use After Free
Windows Local Security Authority Subsystem Service LSASS Remote Code Execution Vulnerability...
PT-2024-9468 · Microsoft · Windows
Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The vulnerability in the Windows Local Security Authority Subsystem Service LSASS is related to the use of insecure mechanisms for handling authentication data in the operating system's...
Local Security Authority Subsystem Service Disclosure
The vulnerability of the Local Security Authority Subsystem Service LSASS in Windows operating systems relates to the use of an uninitialized resource. Exploiting this vulnerability can allow an attacker to disclose sensitive information that is protected by this service...
CVE-2024-26209
Microsoft Local Security Authority Subsystem Service Information Disclosure Vulnerability...
CVE-2024-26209 Microsoft Local Security Authority Subsystem Service Information Disclosure Vulnerability
...
CVE-2024-26209: Use of Uninitialized Resource
Microsoft Local Security Authority Subsystem Service Information Disclosure Vulnerability...
Information disclosure
Microsoft Local Security Authority Subsystem Service Information Disclosure Vulnerability...
CVE-2024-20692
Technical details such as affected product versions, root cause, exploiting conditions, or remediation are not publicly available in the provided documents. Monitor for updates from authoritative sources to obtain concrete information about CVE-2024-20692.
CVE-2024-20692: Inadequate Encryption Strength
Microsoft Local Security Authority Subsystem Service Information Disclosure Vulnerability...
PT-2024-1126 · Microsoft · Lsass +1
Name of the Vulnerable Software and Affected Versions: Microsoft Local Security Authority Subsystem Service affected versions not specified Description: The issue is related to a lack of protection for service data in the Local Security Authority Subsystem Service LSASS of the Windows operating...
Microsoft Windows Local Security Authority Subsystem Service Security Vulnerability
The Microsoft Windows Local Security Authority Subsystem Service is an internal Microsoft program that runs Windows system security policies. It authenticates users when they log on to a computer standalone or server, manages user password changes, and generates access characters. It also leaves...
CVE-2023-36391
Local Security Authority Subsystem Service Elevation of Privilege Vulnerability...
CVE-2023-36391
Local Security Authority Subsystem Service Elevation of Privilege Vulnerability...
CVE-2023-36391 Local Security Authority Subsystem Service Elevation of Privilege Vulnerability
...
CVE-2023-36391
CVE-2023-36391 is a Local Security Authority Subsystem Service (LSASS) elevation-of-privilege vulnerability in Windows. The ENISA/NC SC advisory cites LSASS as affected and lists the impact as Obtain increased privileges . The CVE is associated with a local-exploit path and is addressed by Micros...
CVE-2023-36391: Improper Link Resolution Before File Access
Local Security Authority Subsystem Service Elevation of Privilege Vulnerability...
UNISOC Chipsets Security Vulnerability
UNISOC Chipsets is a chipset from China's Purple Spreadtrum UNISOC. A security vulnerability exists in UNISOC Chipsets that stems from a lack of privilege checking in the ims service, with a possible method to write a privilege usage log of an application...