Lucene search
+L

97 matches found

Positive Technologies
Positive Technologies
added 2025/07/08 12:00 a.m.7 views

PT-2025-28509

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: A buffer over-read issue in Virtual Hard Disk VHDX allows an unauthorized attacker to elevate privileges locally. This issue affects Virtual Hard Disk VHDX, enabling an attacker to gain...

7.8CVSS6.6AI score0.00457EPSS
SaveExploits0References7
CNNVD
CNNVD
added 2025/07/08 12:00 a.m.11 views

Microsoft Virtual Hard Disk 安全漏洞

Microsoft Virtual Hard Disk is a virtual hard disk file format from Microsoft USA. A security vulnerability exists in Microsoft Virtual Hard Disk. An attacker could exploit the vulnerability to elevate privileges. The following products and versions are affected: Windows Server 2022 Server Core...

7.8CVSS6.2AI score0.00457EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/07/08 12:00 a.m.4 views

PT-2025-28581

Name of the Vulnerable Software and Affected Versions: Virtual Hard Disk VHDX affected versions not specified Description: The issue is related to an integer overflow or wraparound in Virtual Hard Disk VHDX, which allows an unauthorized attacker to execute code locally. Recommendations: At the...

7.8CVSS7AI score0.01904EPSS
SaveExploits1References7
BDU FSTEC
BDU FSTEC
added 2025/04/10 12:00 a.m.17 views

The vulnerability of the Windows Virtual Hard Disk component of the Microsoft Windows operating system, which allows a hacker to exploit their privileges.

The vulnerability of the Windows Virtual Hard Disk component of the Microsoft Windows operating system involves a buffer overflow in the stack. Exploiting this vulnerability can allow an attacker to gain increased privileges...

7.8CVSS7.9AI score0.00572EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2025/04/08 5:23 p.m.22 views

CVE-2025-26688 Microsoft Virtual Hard Disk Elevation of Privilege Vulnerability

...

7.8CVSS7.2AI score0.00572EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/04/08 5:23 p.m.51 views

CVE-2025-26688 Microsoft Virtual Hard Disk Elevation of Privilege Vulnerability

...

7.8CVSS0.00572EPSS
SaveExploits0References1
Microsoft CVE
Microsoft CVE
added 2025/04/08 7:00 a.m.17 views

Microsoft Virtual Hard Disk Elevation of Privilege Vulnerability

Stack-based buffer overflow in Microsoft Virtual Hard Drive allows an authorized attacker to elevate privileges locally...

7.8CVSS7.3AI score0.00572EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2025/03/28 12:00 a.m.5 views

PT-2025-28587

Name of the Vulnerable Software and Affected Versions: Microsoft Windows Virtual Hard Disk VHDX affected versions not specified Description: An integer overflow or wraparound condition exists in Virtual Hard Disk VHDX that may allow an unauthorized attacker to elevate privileges locally. The issu...

7.8CVSS6.4AI score0.00656EPSS
SaveExploits0References18
HackRead
HackRead
added 2025/03/19 12:19 p.m.21 views

Hackers Hide VenomRAT Malware Inside Virtual Hard Disk Image File

Hackers are using .VHD files to spread VenomRAT malware, bypassing security software, reveals Forcepoint X-Labs. Learn how this stealthy attack works and how to protect yourself...

7.4AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2025/03/12 12:00 a.m.16 views

The vulnerability of the NTFS file system in Windows operating systems allows a perpetrator to execute arbitrary code.

The vulnerability of the NTFS file system in Windows operating systems is related to buffer overflows in dynamic memory. Exploiting this vulnerability allows an attacker to execute arbitrary code by mounting a specially crafted VHD image...

7.8CVSS8.4AI score0.02173EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2024/11/15 12:00 a.m.11 views

The vulnerability of the Windows Virtual Hard Disk component of the Microsoft Windows operating system, which allows a hacker to trigger a service failure.

The vulnerability of the Windows Virtual Hard Disk component of the Microsoft Windows operating system is related to the use of unsafe mechanisms for processing authentication data in the operating system’s memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

5.9CVSS5.5AI score0.01318EPSS
SaveExploits0References3
OSV
OSV
added 2024/11/12 6:15 p.m.6 views

CVE-2024-38264

Microsoft Virtual Hard Disk VHDX Denial of Service Vulnerability...

5.9CVSS5.8AI score0.01318EPSS
SaveExploits0References1
NVD
NVD
added 2024/11/12 6:15 p.m.8 views

CVE-2024-38264

Microsoft Virtual Hard Disk VHDX Denial of Service Vulnerability...

5.9CVSS0.01318EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/11/12 5:53 p.m.52 views

CVE-2024-38264 Microsoft Virtual Hard Disk (VHDX) Denial of Service Vulnerability

...

5.9CVSS0.01318EPSS
SaveExploits0References1
Microsoft CVE
Microsoft CVE
added 2024/11/12 8:00 a.m.26 views

Microsoft Virtual Hard Disk (VHDX) Denial of Service Vulnerability

...

5.9CVSS7.1AI score0.01318EPSS
SaveExploits0
OSV
OSV
added 2024/01/09 6:15 p.m.3 views

CVE-2024-20658

Microsoft Virtual Hard Disk Elevation of Privilege Vulnerability...

7.8CVSS7.3AI score0.00706EPSS
SaveExploits0References1
NVD
NVD
added 2024/01/09 6:15 p.m.32 views

CVE-2024-20658

Microsoft Virtual Hard Disk Elevation of Privilege Vulnerability...

7.8CVSS8AI score0.00706EPSS
SaveExploits0References1
Prion
Prion
added 2024/01/09 6:15 p.m.32 views

Privilege escalation

Microsoft Virtual Hard Disk Elevation of Privilege Vulnerability...

4.3CVSS6.9AI score0.00706EPSS
SaveExploits0References1Affected Software9
Vulnrichment
Vulnrichment
added 2024/01/09 5:56 p.m.6 views

CVE-2024-20658 Microsoft Virtual Hard Disk Elevation of Privilege Vulnerability

...

7.8CVSS7.6AI score0.00706EPSS
SaveExploits0References1
CVE
CVE
added 2024/01/09 5:56 p.m.225 views

CVE-2024-20658

CVE-2024-20658 is described as a local, elevation-of-privilege vulnerability in the Microsoft Virtual Hard Disk. The CVSS3.1 base shows: attack vector LOCAL, attack complexity LOW, privileges required LOW, user interaction NONE, and impact C (confidentiality), I (integrity), and A (availability) ...

7.8CVSS7.9AI score0.00706EPSS
SaveExploits0References1Affected Software12
Rows per page
Query Builder