2837 matches found
Windows Event Tracing Elevation of Privilege Vulnerability
...
Windows Event Tracing Elevation of Privilege Vulnerability
...
PT-2021-2045 · Microsoft · Windows
Name of the Vulnerable Software and Affected Versions: Windows versions prior to the fixed version Description: The issue is related to a Denial of Service vulnerability in the Windows TCP/IP service, which can be exploited to cause a system crash. It is also associated with errors in privilege...
PT-2021-2049 · Microsoft · Windows
Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to errors in privilege management within the Windows Event Tracing service, allowing an attacker to potentially elevate their privileges. This could affect the system...
PT-2021-2048 · Microsoft · Windows
Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to errors in privilege management in the Windows Event Tracing service, which can be exploited to elevate privileges. This allows an attacker to affect the system. No...
KLA12075 Multiple vulnerabilities in Microsoft Products (ESU)
Multiple vulnerabilities were found in Microsoft Products Extended Support Update. Malicious users can exploit these vulnerabilities to cause denial of service, gain privileges, obtain sensitive information, execute arbitrary code, bypass security restrictions. Below is a complete list of...
Microsoft Windows Event Tracing Security Feature Issue Vulnerability
Microsoft Windows Event Tracing is an application from Microsoft Corporation USA. It provides a mechanism for tracking and logging events raised by user-mode applications and kernel-mode drivers. A security feature issue vulnerability exists in Microsoft Windows Event Tracing. The following...
Microsoft Windows Event Tracing Security Feature Issue Vulnerability
Microsoft Windows Event Tracing is an application from Microsoft Corporation USA. It provides a mechanism for tracking and logging events raised by user-mode applications and kernel-mode drivers. A security feature issue vulnerability exists in the Microsoft Windows Event Tracing event tracking...
wildfly: Potential Memory leak in Wildfly when using OpenTracing
A flaw was found in Wildfly. When an application uses the OpenTracing API's java-interceptors, there is a possibility of a memory leak. This flaw allows an attacker to impact the availability of the server. The highest threat from this vulnerability is to system availability...
Security Bulletin: Daeja ViewONE Professional, Standard & Virtual is affected by a disclosing sensitive data when logging is enabled vulnerability
Summary Daeja ViewONE Professional, Standard & Virtual has addressed the following vulnerability. When logging is enabled in Daeja ViewONE, the user's current session ID can be written to log files or standard output. Vulnerability Details CVEID: CVE-2017-1211 DESCRIPTION: IBM Daeja ViewONE...
Microsoft Windows Event Tracing Out-Of-Bounds Access Privilege Escalation Vulnerability
This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the implementation...
wildfly: Potential Memory leak in Wildfly when using OpenTracing
A flaw was found in Wildfly. When an application uses the OpenTracing API's java-interceptors, there is a possibility of a memory leak. This flaw allows an attacker to impact the availability of the server. The highest threat from this vulnerability is to system availability...
Exploit for CVE-2020-1034
This is a PoC Proof of Concept exploit for CVE-2020-1034, a vulnerability discovered by Microsoft and fixed on August 9, 2020. The exploit targets an unpatched Windows 10 2004, build 19041.488. The exploit code is written in C++ and uses the Windows API to manipulate the system's Event Tracing fo...
The vulnerability of the dev_map_read function in the input/output tracing utility Blktrace allows a attacker to cause a service failure.
The vulnerability of the devmapread function in the Blktrace input/output tracing utility is related to the operation of pushing the output data beyond the allowable buffer size in memory. Exploiting this vulnerability could allow a remote attacker to cause a service failure...
The vulnerability of the Windows operating system’s tracing service allows a hacker to increase their privileges.
The vulnerability of the Windows operating system’s tracing service is related to privilege management errors. Exploiting this vulnerability can allow an attacker to enhance their privileges...
CISOs Prep For COVID-19 Exposure Notification in the Workplace
With the potential of employees going back into the workplace on the horizon, chief information security officers CISOs are mulling applications that utilize exposure notifications in order to track COVID-19’s spread in the office. Steve Moore, chief security strategist with Exabeam, said he is...
CVE-2021-1662
Windows Event Tracing Elevation of Privilege Vulnerability...
CVE-2021-1662
Windows Event Tracing Elevation of Privilege Vulnerability...
Privilege escalation
Windows Event Tracing Elevation of Privilege Vulnerability...
CVE-2021-1662
CVE-2021-1662 is a Windows Event Tracing Elevation of Privilege vulnerability (local, low complexity, high impact per CVSS 3.1). The available connected documents indicate Windows event tracing is the affected component and classify the issue as a local privilege escalation; no specific exploit d...