2460 matches found
Privilege escalation
Win32k Elevation of Privilege Vulnerability...
Privilege escalation
Win32k Elevation of Privilege Vulnerability...
CVE-2021-41357 Win32k Elevation of Privilege Vulnerability
...
CVE-2021-41357 Win32k Elevation of Privilege Vulnerability
...
CVE-2021-41357
CVE-2021-41357 is a Windows Win32k privilege-escalation vulnerability (local, low complexity, no user interaction) with CVSS v3.1 base score 7.8 (high). Affected component is Win32k; root cause involves elevation of privileges on Windows systems. Public disclosures in the connected documents indi...
CVE-2021-40450 Win32k Elevation of Privilege Vulnerability
...
CVE-2021-40450
CVE-2021-40450 is a Win32k elevation-of-privilege vulnerability (local, privilege escalation) in Windows. The CVE is described as a Win32k Privilege Escalation issue with high impact (confidentiality, integrity, availability) per CVSS 3.1/3.1 vector; attack is local and requires no user interacti...
CVE-2021-40450 Win32k Elevation of Privilege Vulnerability
...
CVE-2021-40449 Win32k Elevation of Privilege Vulnerability
...
CVE-2021-40449
CVE-2021-40449 is a Win32k use-after-free local privilege escalation in GreResetDCInternal. The vulnerability arises when a user‑mode callback hook on the driver’s PDEV path (DrvEnablePDEV) can trigger a subsequent ResetDC call, freeing the original device context and causing a kernel‑mode use‑af...
CVE-2021-40449 Win32k Elevation of Privilege Vulnerability
...
CVE-2021-40450
Win32k Elevation of Privilege Vulnerability Recent assessments: Assessed Attacker Value: 0 Assessed Attacker Value: 0Assessed Attacker Value: 0...
CVE-2021-41357
Win32k Elevation of Privilege Vulnerability Recent assessments: Assessed Attacker Value: 0 Assessed Attacker Value: 0Assessed Attacker Value: 0...
CVE-2021-40449
Win32k Elevation of Privilege Vulnerability Recent assessments: Assessed Attacker Value: 0 Assessed Attacker Value: 0Assessed Attacker Value: 0...
Microsoft Windows Multiple Vulnerabilities (KB5006670)
This host is missing a critical security update according to Microsoft KB5006670 SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Microsoft Oct. Patch Tuesday Squashes 4 Zero-Day Bugs
Today is Microsoft’s October 2021 Patch Tuesday, and it delivers fixes for four zero-day vulnerabilities, one of which is being exploited in a far-reaching espionage campaign that delivers the new MysterySnail RAT malware to Windows servers. Microsoft reported a total of 74 vulnerabilities, three...
MysterySnail attacks with Windows zero-day
Executive Summary In late August and early September 2021, Kaspersky technologies detected attacks with the use of an elevation of privilege exploit on multiple Microsoft Windows servers. The exploit had numerous debug strings from an older, publicly known exploit for vulnerability CVE-2016-3309,...
Win32k Elevation of Privilege Vulnerability
...
Win32k Elevation of Privilege Vulnerability
...
PT-2021-4386 · Microsoft · Windows
Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to errors in privilege management within the win32k component of the Windows operating system. It allows an attacker to potentially elevate their privileges...