Microsoft Windows/Windows Server Elevation of Privilege Vulnerability (CNVD-2021-66075)

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation, an operating system for personal devices, and Microsoft Windows Server is a server operating system. An elevation-of-privilege vulnerability exists in Event Tracing in Microsoft Windows/Windows Server. No...

CVE-2021-33774

Windows Event Tracing Elevation of Privilege Vulnerability...

CVE-2021-33774

Windows Event Tracing Elevation of Privilege Vulnerability...

Privilege escalation

Windows Event Tracing Elevation of Privilege Vulnerability...

CVE-2021-33774

Windows Event Tracing Elevation of Privilege Vulnerability...

CVE-2021-33774 Windows Event Tracing Elevation of Privilege Vulnerability

...

CVE-2021-33774

CVE-2021-33774 is a Windows Event Tracing elevation-of-privilege vulnerability in Microsoft Windows/Windows Server. Connected sources confirm the flaw resides in Event Tracing and can yield increased privileges, with local attack prerequisites (no user interaction) per CVSS vectors cited in publi...

CVE-2021-31979

creationtimestamp| type| source ---|---|--- 2021-07-14 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=608 2021-07-14 16:59:39+00:00| seen| https://t.me/truesecator/1917 2021-07-14 22:25:09+00:00| seen| https://t.me/cibsecurity/26158 2021-07-15 10:13:10+00:00| seen|...

CVE-2021-33774: Undefined Security Weakness

Windows Event Tracing Elevation of Privilege Vulnerability...

Windows Event Tracing Elevation of Privilege Vulnerability

...

PT-2021-4847

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description The issue is related to insecure privilege management in the Windows Event Tracing service of the Microsoft Windows operating system. Exploitation of this issue may allow an attacker to eleva...

Microsoft Windows Event Tracing 权限许可和访问控制问题漏洞

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation, an operating system for personal devices, and Microsoft Windows Server is a server operating system. An elevation-of-privilege vulnerability exists in Event Tracing in Microsoft Windows/Windows Server. No...

KLA12221 Multiple vulnerabilities in Microsoft Windows

Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service, execute arbitrary code, gain privileges, obtain sensitive information, spoof user interface. Below is a complete list of...

SQL Injection Vulnerability in Quality Tracing System of Heilongjiang Ligao Technology Co.

Heilongjiang Ligao Technology Co., Ltd. is a company that provides safe food production and quality control solutions for food companies. A SQL injection vulnerability exists in the quality traceability system of Heilongjiang Ligao Technology Co. Ltd, which can be exploited by attackers to obtain...

TiEtwAgent - PoC Memory Injection Detection Agent Based On ETW, For Offensive And Defensive Research Purposes

This project was created to research, build and test different memory injection detection use cases and bypass techniques. The agent utilizes Microsoft-Windows-Threat-Intelligence event tracing provider, as a more modern and stable alternative to Userland-hooking, with the benefit of Kernel-mode...

UVI-2021-1001027 tracing: Correct the length check which causes memory corruption

tracing: Correct the length check which causes memory corruption This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.11 by commit...

GSD-2021-1001027 tracing: Correct the length check which causes memory corruption

tracing: Correct the length check which causes memory corruption This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.11 by commit...

GSD-2021-1000952 tracing: Correct the length check which causes memory corruption

tracing: Correct the length check which causes memory corruption This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.44 by commit...

UVI-2021-1000952 tracing: Correct the length check which causes memory corruption

tracing: Correct the length check which causes memory corruption This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.44 by commit...

UVI-2021-1000897 tracing: Correct the length check which causes memory corruption

tracing: Correct the length check which causes memory corruption This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.126 by commit...