PT-2022-1830

Name of the Vulnerable Software and Affected Versions Veeam Agent for Windows versions 2.0 through 5.x Description The issue is related to the deserialization of untrusted data, which can be exploited by sending specially crafted data through TCP-port 9395. This allows local users to run arbitrar...

CVE-2022-26503

Challenge Vulnerability CVE-2022-26503 in Veeam Agent for Microsoft Windows allows local privilege escalation. An attacker who successfully exploited this vulnerability could run arbitrary code with LOCAL SYSTEM privileges. Severity : High CVSS v3 score : 7.8 Cause Veeam Agent for Microsoft Windo...

Microsoft Edge’s vulnerability, related to deficiencies in access control, allows attackers to elevate their privileges within the system.

The vulnerability of Microsoft Edge is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to gain increased privileges within the system...

CVE-2022-25294

Proofpoint Insider Threat Management Agent for Windows relies on an inherently dangerous function that could enable an unprivileged local Windows user to run arbitrary code with SYSTEM privileges. All versions prior to 7.12.1 are affected. Agents for MacOS and Linux and Cloud are unaffected...

CVE-2022-25294

Proofpoint Insider Threat Management Agent for Windows relies on an inherently dangerous function that could enable an unprivileged local Windows user to run arbitrary code with SYSTEM privileges. All versions prior to 7.12.1 are affected. Agents for MacOS and Linux and Cloud are unaffected...

CVE-2022-24286

Acer QuickAccess 2.01.300x before 2.01.3030 and 3.00.30xx before 3.00.3038 contains a local privilege escalation vulnerability. The user process communicates with a service of system authority through a named pipe. In this case, the Named Pipe is also given Read and Write rights to the general...

CVE-2022-24286

Acer QuickAccess 2.01.300x before 2.01.3030 and 3.00.30xx before 3.00.3038 contains a local privilege escalation vulnerability. The user process communicates with a service of system authority through a named pipe. In this case, the Named Pipe is also given Read and Write rights to the general...

CVE-2022-24285

Acer Care Center 4.00.30xx before 4.00.3042 contains a local privilege escalation vulnerability. The user process communicates with a service of system authority called ACCsvc through a named pipe. In this case, the Named Pipe is also given Read and Write rights to the general user. In addition,...

CVE-2022-24285

Acer Care Center 4.00.30xx before 4.00.3042 contains a local privilege escalation vulnerability. The user process communicates with a service of system authority called ACCsvc through a named pipe. In this case, the Named Pipe is also given Read and Write rights to the general user. In addition,...

Privilege escalation

Acer QuickAccess 2.01.300x before 2.01.3030 and 3.00.30xx before 3.00.3038 contains a local privilege escalation vulnerability. The user process communicates with a service of system authority through a named pipe. In this case, the Named Pipe is also given Read and Write rights to the general...

CVE-2022-20049

In vpu, there is a possible escalation of privilege due to a missing permission check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05954679; Issue ID: ALPS05954679...

Quicklert 代码问题漏洞

Quicklert is an easy-to-use messaging, alerting and emergency response solution from Quicklert USA. Save lives and provide business continuity through early detection, intelligent real-time alerts and response. A security vulnerability exists in Quicklert for Digium 10.0.0 that allows an...

Acer QuickAccess 授权问题漏洞

Acer QuickAccess is used by Acer China Acer to adjust common settings on computers. A security vulnerability exists in Acer QuickAccess versions 2.01.300x through 2.01.3030 and 3.00.30xx through 3.00.3038, which originates when a user process communicates with a service with system privileges via...

PT-2022-14297

Name of the Vulnerable Software and Affected Versions connsyslogger affected versions not specified Description The issue is related to a possible symbolic link following due to improper link resolution in connsyslogger. This could lead to local escalation of privilege, with System execution...

Kofax Printix Secure Cloud Print Management 竞争条件问题漏洞

Kofax Printix Secure Cloud Print Management is a cloud-based print management software from Kofax USA that is flexible, scalable and easy to use. Manage and maintain complex print environments anytime, anywhere with all the modern printing features users and organizations need. A security...

Microsoft Windows ALPC 权限许可和访问控制问题漏洞

Microsoft Windows ALPC is a C/S model technology developed by Microsoft to replace LPC for native RPC. Microsoft Windows ALPC has an elevation of privilege vulnerability that can be exploited to gain elevated privileges on the system...

PT-2022-16584

Name of the Vulnerable Software and Affected Versions Acer QuickAccess versions 2.01.300x through 2.01.3029 Acer QuickAccess versions 3.00.30xx through 3.00.3037 Description The issue concerns a local privilege escalation. It involves a user process communicating with a system authority service...

CVE-2022-25294

Proofpoint Insider Threat Management Agent for Windows relies on an inherently dangerous function that could enable an unprivileged local Windows user to run arbitrary code with SYSTEM privileges. All versions prior to 7.12.1 are affected. Agents for MacOS and Linux and Cloud are unaffected...

Google Android 缓冲区错误漏洞

Google Android is a Linux-based open source operating system from Google, a US-based company. The vulnerability stems from a possible out-of-bounds write in the TBD of the TBD due to memory corruption. An attacker could exploit the vulnerability to cause a local privilege escalation that requires...

Google Android 竞争条件问题漏洞

Google Android is a Linux-based open-source operating system from the U.S. company Google. Google Android has an elevation of privilege vulnerability that could be exploited by attackers to cause a local privilege escalation that requires system execution privileges...