1614 matches found
CVE-2022-22753
A Time-of-Check Time-of-Use bug existed in the Maintenance Updater Service that could be abused to grant Users write access to an arbitrary directory. This could have been used to escalate to SYSTEM access.This bug only affects Firefox on Windows. Other operating systems are unaffected.. This...
CVE-2022-22753
CVE-2022-22753 affects Mozilla Firefox on Windows, with a Time-of-Check Time-of-Use bug in the Maintenance (Updater) Service that could grant a user write access to an arbitrary directory and escalate to SYSTEM. The umbrella set includes Firefox versions below 97 and affected Thunderbird ESR line...
CVE-2022-44651
A Time-of-Check Time-Of-Use vulnerability in the Trend Micro Apex One and Apex One as a Service agent could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order ...
Trend Micro Apex One 安全漏洞
Trend Micro Apex One is an endpoint protection software from Trend Micro. Trend Micro Apex One suffers from a security vulnerability that originates from its Apex One service agent that allows a local attacker to escalate the privileges of the installer via a Time-of-Check Time-Of-Use vulnerabili...
Amazon Linux 2022 : tomcat9 (ALAS2022-2022-233)
The version of tomcat9 installed on the remote host is prior to 9.0.64-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2022-2022-233 advisory. - The fix for bug CVE-2020-9484 introduced a time of check, time of use vulnerability into Apache Tomcat 10.1.0-M1 to 10.1.0-M8,...
PT-2022-6621 · Trend Micro · Trend Micro Apex One +1
Name of the Vulnerable Software and Affected Versions: Trend Micro Apex One affected versions not specified Trend Micro Apex One as a Service affected versions not specified Description: A Time-of-Check Time-Of-Use vulnerability in the Trend Micro Apex One and Apex One as a Service agent could...
CVE-2022-44651
CVE-2022-44651 affects Trend Micro Apex One and Apex One as a Service agent. It is a Time-of-Check Time-of-Use (TOCTOU) race condition that could allow a local attacker who can run low-privilege code to escalate privileges on vulnerable installations. The CVSS v3.1 metrics indicate a Local attack...
CVE-2022-44651
A Time-of-Check Time-Of-Use vulnerability in the Trend Micro Apex One and Apex One as a Service agent could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order ...
CVE-2022-33984
DMA transactions which are targeted at input buffers used for the SdMmcDevice software SMI handler could cause SMRAM corruption through a TOCTOU attack. DMA transactions which are targeted at input buffers used for the software SMI handler used by the SdMmcDevice driver could cause SMRAM corrupti...
CVE-2022-33982
DMA attacks on the parameter buffer used by the Int15ServiceSmm software SMI handler could lead to a TOCTOU attack on the SMI handler and lead to corruption of SMRAM. DMA attacks on the parameter buffer used by the software SMI handler used by the driver Int15ServiceSmm could lead to a TOCTOU...
CVE-2022-33907
DMA transactions which are targeted at input buffers used for the software SMI handler used by the IdeBusDxe driver could cause SMRAM corruption through a TOCTOU attack... DMA transactions which are targeted at input buffers used for the software SMI handler used by the IdeBusDxe driver could cau...
CVE-2022-30773
DMA attacks on the parameter buffer used by the IhisiSmm driver could change the contents after parameter values have been checked but before they are used a TOCTOU attack. DMA attacks on the parameter buffer used by the IhisiSmm driver could change the contents after parameter values have been...
CVE-2022-32266
DMA attacks on the parameter buffer used by a software SMI handler used by the driver PcdSmmDxe could lead to a TOCTOU attack on the SMI handler and lead to corruption of other ACPI fields and adjacent memory fields. DMA attacks on the parameter buffer used by a software SMI handler used by the...
Insyde InsydeH2O 安全漏洞
RUGGEDCOM APE1808 is a utility-level application hosting platform that allows you to deploy a range of commercial applications for edge computing and network security in harsh industrial environments.A competitive condition vulnerability exists in the Siemens RUGGEDCOM APE1808 product family, whi...
Insyde InsydeH2O 安全漏洞
RUGGEDCOM APE1808 is a utility-level application hosting platform that allows you to deploy a range of commercial applications for edge computing and network security in harsh industrial environments.A competitive condition vulnerability exists in the Siemens RUGGEDCOM APE1808 product family, whi...
PT-2022-20307 · Insyde · Ihisismm Driver
Name of the Vulnerable Software and Affected Versions: IhisiSmm driver versions prior to Kernel 5.4: 05.44.23 IhisiSmm driver versions prior to Kernel 5.5: 05.52.23 Description: The issue allows DMA attacks on the parameter buffer used by the IhisiSmm driver to change the contents after parameter...
PT-2022-20308 · Insyde · Insydeh2O Uefi Firmware
Name of the Vulnerable Software and Affected Versions: InsydeH2O UEFI firmware versions prior to Kernel 5.2: 05.27.29 InsydeH2O UEFI firmware versions prior to Kernel 5.3: 05.36.25 InsydeH2O UEFI firmware versions prior to Kernel 5.4: 05.44.25 InsydeH2O UEFI firmware versions prior to Kernel 5.5:...
PT-2022-21948 · Insyde · Insydeh2O Uefi Firmware
Name of the Vulnerable Software and Affected Versions: InsydeH2O UEFI firmware Kernel versions prior to 5.4: 05.44.23 InsydeH2O UEFI firmware Kernel versions prior to 5.5: 05.52.23 Description: The issue concerns DMA attacks on the parameter buffer used by the VariableRuntimeDxe software SMI...
PT-2022-21946 · Insyde · Insydeh2O Uefi Firmware
Name of the Vulnerable Software and Affected Versions: InsydeH2O UEFI firmware kernel versions prior to 5.2: 05.27.25 InsydeH2O UEFI firmware kernel versions prior to 5.3: 05.36.25 InsydeH2O UEFI firmware kernel versions prior to 5.4: 05.44.25 InsydeH2O UEFI firmware kernel versions prior to 5.5:...
Insyde InsydeH2O 安全漏洞
RUGGEDCOM APE1808 is a utility-level application hosting platform that allows you to deploy a range of commercial applications for edge computing and network security in harsh industrial environments.A competitive condition vulnerability exists in the Siemens RUGGEDCOM APE1808 product family, whi...