2459 matches found
CISA Orders Federal Agencies to Patch Actively Exploited Windows Vulnerability
The U.S. Cybersecurity and Infrastructure Security Agency CISA is urging federal agencies to secure their systems against an actively exploited security vulnerability in Windows that could be abused to gain elevated permissions on affected hosts. To that end, the agency has added CVE-2022-21882...
PT-2022-2928 · Microsoft · Windows
Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to insufficient access control in the Win32k component of the Microsoft Windows operating system. This can be exploited to elevate privileges. There is no information...
Microsoft Win32k Privilege Escalation Vulnerability
Microsoft Win32k contains an unspecified vulnerability that allows for privilege escalation...
Exploit for Out-of-bounds Write in Microsoft
CVE-2022-21882 win32k LPE bypass CVE-2021-1732 Test - only...
The vulnerability of the Win32k component in Windows operating systems arises from the insecure handling of privileges, allowing attackers to escalate their privileges.
The vulnerability of the Win32k component in Windows operating systems is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker to enhance their privileges...
Public Exploit Released for Windows 10 Bug
Security teams might have skipped January’s Patch Tuesday after reports of it breaking servers, but it also included a patch for a privilege-escalation bug in Windows 10 that leaves unpatched systems open to malicious actors looking for administrative access. It’s a bug that now has a...
VulnCheck KEV: CVE-2018-8639
Microsoft Windows Win32k contains an improper resource shutdown or release vulnerability that allows for local, authenticated privilege escalation. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode...
Microsoft Win32k Privilege Escalation Vulnerability
Microsoft Windows Win32k contains a vulnerability that allows an attacker to escalate privileges...
CVE-2022-21882
Win32k Elevation of Privilege Vulnerability...
CVE-2022-21876
Win32k Information Disclosure Vulnerability...
CVE-2022-21876
Win32k Information Disclosure Vulnerability...
CVE-2022-21887
Win32k Elevation of Privilege Vulnerability...
CVE-2022-21876
Win32k Information Disclosure Vulnerability...
CVE-2022-21882
Win32k Elevation of Privilege Vulnerability...
Privilege escalation
Win32k Elevation of Privilege Vulnerability...
Information disclosure
Win32k Information Disclosure Vulnerability...
Privilege escalation
Win32k Elevation of Privilege Vulnerability...
CVE-2022-21887 Win32k Elevation of Privilege Vulnerability
...
CVE-2022-21887
CVE-2022-21887 is a Win32k local elevation-of-privilege vulnerability in Windows. Public advisories indicate it affects Win32k and can enable attackers to escalate privileges on a vulnerable system. Public exploits have been reported for this CVE. Microsoft mitigation involves installing the Janu...
