CVE-2023-35328

Windows Transaction Manager Elevation of Privilege Vulnerability...

Privilege escalation

Windows Transaction Manager Elevation of Privilege Vulnerability...

CVE-2023-35328 Windows Transaction Manager Elevation of Privilege Vulnerability

...

CVE-2023-35328 Windows Transaction Manager Elevation of Privilege Vulnerability

...

CVE-2023-35328

Technical details for CVE-2023-35328 are not provided in the supplied documents. No product/version/root-cause/impact/fix information is present here. Monitor for updates from official advisories and connected sources.

Windows Transaction Manager Elevation of Privilege Vulnerability

...

Microsoft Windows Transaction Manager 安全漏洞

Microsoft Windows is a suite of operating systems for use on personal devices from the U.S.-based Microsoft Corporation Microsoft. A security vulnerability exists in Microsoft Windows Transaction Manager. An attacker could exploit the vulnerability to elevate privileges. The following products an...

CVE-2023-35328: Numeric Truncation Error

Windows Transaction Manager Elevation of Privilege Vulnerability...

PT-2023-3862 · Microsoft · Windows Transaction Manager +1

Name of the Vulnerable Software and Affected Versions: Windows Transaction Manager affected versions not specified Description: The issue is related to insufficient access restrictions in the Windows Transaction Manager, allowing an attacker to elevate their privileges. This can affect the system...

Stealing excess tokens from other users by either front-running skim function or calling it before legitimate user

Lines of code Vulnerability details Impact File /src/interfaces/IWell.sol comment's defines what the skim function is being responsible for: / @notice Sends excess tokens held by the Well to the recipient. @param recipient The address to send the tokens @return skimAmounts The amount of each toke...

CRITICAL UPGRADES IN THE DIAMOND PROXY COULD BE MISSED DUE TO INVALID ACTIONS PASSED IN

Lines of code Vulnerability details Impact The LibDiamond.diamondCut function is used to modify the facets by passing in the FacetCut structs. The FacetCut struct contains the action to perform: add, replace and remove and the function selectors to use for them. Here the function implementation...

CVE-2023-30659

Improper input validation vulnerability in Transaction prior to SMR Jul-2023 Release 1 allows local attackers to launch privileged activities...

Input validation

Improper input validation vulnerability in Transaction prior to SMR Jul-2023 Release 1 allows local attackers to launch privileged activities...

CVE-2023-30659

Improper input validation vulnerability in Transaction prior to SMR Jul-2023 Release 1 allows local attackers to launch privileged activities...

CVE-2023-30659

CVE-2023-30659 affects SAMSUNG Mobile devices, specifically the Transaction module prior to SMR Jul-2023 Release 1. The root cause is improper input validation, enabling local attackers to perform privileged activities. Impact is described as local privilege escalation with high confidentiality, ...

CVE-2023-30659

Improper input validation vulnerability in Transaction prior to SMR Jul-2023 Release 1 allows local attackers to launch privileged activities...

CVE-2023-37192: Missing Encryption of Sensitive Data

Memory management and protection issues in Bitcoin Core v22 allows attackers to modify the stored sending address within the app's memory, potentially allowing them to redirect Bitcoin transactions to wallets of their own choosing...

SAMSUNG Mobile device 输入验证错误漏洞

SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc. from Samsung South Korea. A security vulnerability exists in SAMSUNG Mobile device SMR Jul-2023 Release 1 version, which stems from an incorrect input validation vulnerability in the Transaction...

CVE-2023-30659: Improper Input Validation

Improper input validation vulnerability in Transaction prior to SMR Jul-2023 Release 1 allows local attackers to launch privileged activities...

LSP6KeyManagerCore reentrancy vulnerability

Lines of code Vulnerability details Impact Both LSP6KeyManager and LSP6KeyManagerInit inherit from LSP6KeyManagerCore. Consider our previous 3 contracts as A, B and C. We write a contract D, call the A.execute method, and let it execute D.execute. When executing D.execute, we can also execute...