3023 matches found
Patch Tuesday - May 2023
A less crowded Patch Tuesday for May 2023: Microsoft is offering fixes for just 49 vulnerabilities this month. There are no fixes this month for printer drivers, DNS, or .NET, three components which have featured heavily in recent months. Three zero-day vulnerabilities are patched, alongside a...
CVE-2023-29336
Win32k Elevation of Privilege Vulnerability...
CVE-2023-29336
Win32k Elevation of Privilege Vulnerability...
CVE-2023-24902
Win32k Elevation of Privilege Vulnerability...
CVE-2023-24902
Win32k Elevation of Privilege Vulnerability...
Privilege escalation
Win32k Elevation of Privilege Vulnerability...
Privilege escalation
Win32k Elevation of Privilege Vulnerability...
Microsoft Patch Tuesday for May 2023 — Fewest vulnerabilities disclosed in a month in three-plus years
Microsoft disclosed 40 vulnerabilities across its suite of products and software Tuesday, the fewest the companys included in a Patch Tuesday since December 2019. However, two of the vulnerabilities is being actively exploited in the wild, according to Microsoft, the fourth month in a row in whic...
CVE-2023-29336 Win32k Elevation of Privilege Vulnerability
...
CVE-2023-29336 Win32k Elevation of Privilege Vulnerability
...
CVE-2023-29336
CVE-2023-29336 is a Win32k elevation-of-privilege vulnerability in Windows. Public material in the connected docs confirms a local, low-complexity exploit path that can grant SYSTEM privileges, typically via a crafted interaction with Win32k components (notably NtUserEnableMenuItem/MenuItemState ...
CVE-2023-24902 Win32k Elevation of Privilege Vulnerability
...
CVE-2023-24902
Technical details about CVE-2023-24902 (affected components, exploit vectors, root cause, or mitigation) are not publicly provided in the supplied documents. Monitor for official advisories and updates from Microsoft and national CERTs for new information.
Win32k Elevation of Privilege Vulnerability
...
Win32k Elevation of Privilege Vulnerability
...
PT-2023-2693 · Microsoft · Windows
Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to insufficient access control in the Win32k component of the Windows operating system, which can be exploited to elevate privileges. This could allow an attacker to...
PT-2023-2624
Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description The issue is related to an elevation-of-privilege vulnerability in the Win32k component of Windows operating systems. This vulnerability is associated with errors in processing objects in...
CVE-2023-24902: Out-of-bounds Read
Win32k Elevation of Privilege Vulnerability...
