122 matches found
EUVD-2024-40337
Malicious code in bioql PyPI...
CVE-2019-1268
An elevation of privilege exists when Winlogon does not properly handle file path information, aka 'Winlogon Elevation of Privilege Vulnerability'...
CVE-2018-5354
The custom GINA/CP module in ANIXIS Password Reset Client before version 3.22 allows remote attackers to execute code and escalate privileges via spoofing. When the client is configured to use HTTP, it does not authenticate the intended server before opening a browser window. An unauthenticated...
The vulnerability of the Winlogon entry program in Windows operating systems allows attackers to escalate their privileges.
The vulnerability of the Winlogon entry program in Windows operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...
Microsoft Issues Security Update Fixing 118 Flaws, Two Actively Exploited in the Wild
Microsoft has released security updates to fix a total of 118 vulnerabilities across its software portfolio, two of which have come under active exploitation in the wild. Of the 118 flaws, three are rated Critical, 113 are rated Important, and two are rated Moderate in severity. The Patch Tuesday...
Patch Tuesday - October 2024
Microsoft is addressing 118 vulnerabilities this October 2024 Patch Tuesday. Microsoft has evidence of in-the-wild exploitation and/or public disclosure for five of the vulnerabilities published today, although it does not rate any of these as critical yet. Of those five, Microsoft lists two as...
Largest Patch Tuesday since July includes two exploited in the wild, three critical vulnerabilities
The largest Microsoft Patch Tuesday since July includes two vulnerabilities that have been exploited in the wild and three other critical issues across the company's range of hardware and software offerings. October's monthly security update from Microsoft includes fixes for 117 CVEs, the most in...
CVE-2024-43583
Winlogon Elevation of Privilege Vulnerability...
CVE-2024-43583
Winlogon Elevation of Privilege Vulnerability...
CVE-2024-43583 Winlogon Elevation of Privilege Vulnerability
...
CVE-2024-43583 Winlogon Elevation of Privilege Vulnerability
...
CVE-2024-43583
CVE-2024-43583 is a Winlogon elevation of privilege vulnerability. Connected PoC details show an attacker with low local privileges can escalate to SYSTEM by abusing the Image File Execution Options (IFEO) registry hijack to replace a legitimate system process with a malicious payload. Affected W...
Winlogon Elevation of Privilege Vulnerability
...
PT-2024-6925 · Microsoft · Windows
Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to insufficient access control in the Winlogon program of Windows operating systems. It allows an attacker to elevate their privileges. Recommendations: At the moment,...
Microsoft Winlogon 安全漏洞
Microsoft Winlogon is an American Microsoft Microsoft component built into the Windows NT family of operating systems developed by Microsoft. A security vulnerability exists in Microsoft Winlogon. An attacker can exploit the vulnerability to elevate privileges. The following products and versions...
The vulnerability of the Winlogon entry program in Windows operating systems allows attackers to elevate their privileges.
The vulnerability of the Winlogon entry program in Windows operating systems is related to overflow in the dynamic memory buffer. Exploiting this vulnerability can allow an attacker to enhance their privileges using specially created data...
The vulnerability of the Winlogon entry program in Windows operating systems allows attackers to escalate their privileges.
The vulnerability of the Winlogon entry program in Windows operating systems is related to integer overflow. Exploiting this vulnerability can allow an attacker to enhance their privileges using specially created data...
CVE-2024-30067
Winlogon Elevation of Privilege Vulnerability...
