PT-2023-2513 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to synchronization errors in the Win32k component Win32k.sys of the Windows operating system, specifically a "race condition" scenario. This can allow an attacker to...

PT-2023-2429 · Microsoft · Postscript/Pcl6 Class Printer Driver +1

Name of the Vulnerable Software and Affected Versions: Microsoft PostScript and PCL6 Class Printer Driver affected versions not specified Description: The issue is related to insufficient input validation in the PostScript Printer Driver Pscript and PCL6 Class Printer drivers in Windows operating...

PT-2023-20463 · Lexmark · Lexmark Devices

Name of the Vulnerable Software and Affected Versions: Lexmark devices affected versions not specified Description: The issue is related to mishandling Input Validation. There is an unauthenticated remote code execution vulnerability in certain Lexmark devices. Recommendations: At the moment, the...

PT-2023-17521 · Unknown · Keyinstall

Name of the Vulnerable Software and Affected Versions: keyinstall affected versions not specified Description: The issue is related to a possible out of bounds write in keyinstall due to a missing bounds check. This could lead to local escalation of privilege, with System execution privileges...

PT-2023-17538 · Audio · Audio

Name of the Vulnerable Software and Affected Versions: Audio affected versions not specified Description: The issue is related to a possible out of bounds write in audio due to a missing bounds check. This could lead to local escalation of privilege, with System execution privileges needed. User...

PT-2023-12813 · Modem · Modem

Name of the Vulnerable Software and Affected Versions: Modem affected versions not specified Description: The issue is related to information disclosure in the modem due to a missing NULL check while reading packets received from the local network. Recommendations: At the moment, there is no...

PT-2023-13276 · Modem · Modem

Name of the Vulnerable Software and Affected Versions: Modem affected versions not specified Description: The issue is related to a time-of-check time-of-use race condition in the Modem when processing RRC Reconfiguration messages, which can cause a transient denial of service. Recommendations: A...

PT-2023-13275 · Core · Core

Name of the Vulnerable Software and Affected Versions: Core affected versions not specified Description: The issue is related to memory corruption caused by integer overflow or wraparound in Core during DDR memory assignment. Recommendations: At the moment, there is no information about a newer...

PT-2023-13294 · Modem · Modem

Name of the Vulnerable Software and Affected Versions: Modem affected versions not specified Description: Memory corruption occurs due to improper validation of an array index when a malformed APDU is sent from a card. Recommendations: At the moment, there is no information about a newer version...

PT-2023-14274 · Bentley · Bentley View

Name of the Vulnerable Software and Affected Versions: Bentley View affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations of Bentley View. It requires user interaction, where the target must visit a malicious page or op...

PT-2023-9678 · Freebsd · Freebsd

Name of the Vulnerable Software and Affected Versions: FreeBSD affected versions not specified Description: The issue is related to the use of an uninitialized resource in the msdosfs driver of the FreeBSD operating system. Exploitation of this issue may allow an attacker to read data from remote...

PT-2023-15730 · Huawei · Emui +1

Name of the Vulnerable Software and Affected Versions: No specific software or versions mentioned, use: affected versions not specified Description: The issue is related to configuration problems in some smartphones. It may lead to kernel privilege escalation, resulting in system service...

PT-2023-15725 · Huawei · Emui +1

Name of the Vulnerable Software and Affected Versions: Control component affected versions not specified Description: The issue is related to a spoofing vulnerability in the control component. Successful exploitation of this vulnerability may impact confidentiality and availability...

PT-2023-3584 · Libssh +10 · Libssh +10

Name of the Vulnerable Software and Affected Versions: libssh affected versions not specified Description: A NULL pointer dereference was found in libssh during re-keying with algorithm guessing. This issue may allow an authenticated client to cause a denial of service. The vulnerability is relat...

PT-2023-12433 · Upx +1 · Upx +1

Name of the Vulnerable Software and Affected Versions: upx affected versions not specified Description: A heap-based buffer overflow issue was found in the get le64 function, where a generic pointer 'p' points to an inaccessible address. Recommendations: At the moment, there is no information abo...

PT-2023-2326

Name of the Vulnerable Software and Affected Versions TP-Link Archer AX20 AX1800 and Archer AX21 versions prior to a fix TP-Link Archer AX1800 WiFi 6 Router versions prior to a fix TP-Link Archer AX21 versions prior to a fix Description The MiniDLNA service in TP-Link Archer AX20 AX1800 and Arche...

PT-2023-1720 · Microsoft · Edge

Name of the Vulnerable Software and Affected Versions: Microsoft Edge Chromium-based affected versions not specified Description: The issue is related to errors in the representation of information by the user interface of the Webview2 control in Microsoft Edge. Exploitation of this issue may all...

PT-2023-1777 · Microsoft · Windows Brokerinfrastructure Service +1

Name of the Vulnerable Software and Affected Versions: Windows BrokerInfrastructure Service affected versions not specified Description: The issue is related to an elevation-of-privilege vulnerability in the Windows BrokerInfrastructure Service. It is caused by synchronization errors when using a...

PT-2023-1752 · Microsoft · Windows Media +1

Name of the Vulnerable Software and Affected Versions: Windows Media affected versions not specified Description: The issue exists due to insufficient input validation in the Windows Media component. This allows a remote attacker to execute arbitrary code. Recommendations: At the moment, there is...

PT-2023-1749 · Microsoft · Windows Point-To-Point Protocol Over Ethernet +1

Name of the Vulnerable Software and Affected Versions: Windows Point-to-Point Protocol over Ethernet PPPoE versions affected versions not specified Description: The issue is caused by synchronization errors when using a shared resource in the Windows Point-to-Point Protocol PPP implementation. Th...