Lucene search
+L

558 matches found

Kaspersky
Kaspersky
added 2022/08/02 12:0 a.m.506 views

KLA12600 Multiple vulnerabilities in Google Chrome

Multiple vulnerabilities were found in Google Chrome. Malicious users can exploit these vulnerabilities to cause denial of service, bypass security restrictions, execute arbitrary code, obtain sensitive information, spoof user interface. Below is a complete list of vulnerabilities: 1. Out of boun...

8.8CVSS10AI score0.00923EPSS
SaveExploits6References3
Positive Technologies
Positive Technologies
added 2022/08/02 12:0 a.m.7 views

PT-2022-6369 · Google +2 · Chrome Os +4

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 104.0.5112.79 Lacros versions prior to 104.0.5112.79 Description: The issue is caused by an integer overflow in the Window Manager of Google Chrome on Chrome OS and Lacros. This allows a remote attacker, who...

10CVSS7.2AI score0.70461EPSS
SaveExploits24References463
ATTACKERKB
ATTACKERKB
added 2022/07/13 7:15 p.m.7 views

CVE-2022-20226

In finishDrawingWindow of WindowManagerService.java, there is a possible tapjacking due to improper input validation. This could lead to local escalation of privilege with User execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-12...

3.9CVSS5.9AI score0.001EPSS
SaveExploits0References2
OSV
OSV
added 2022/06/15 2:15 p.m.5 views

CVE-2022-20192

In grantEmbeddedWindowFocus of WindowManagerService.java, there is a possible way to change an input channel for embedded hierarchy due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...

7.8CVSS7.2AI score0.00112EPSS
SaveExploits0References1
OSV
OSV
added 2022/06/15 1:15 p.m.6 views

CVE-2021-39691

In WindowManager, there is a possible tapjacking attack due to an incorrect window flag when processing user input. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10...

7.3CVSS5.9AI score0.00111EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2022/05/26 12:0 a.m.9 views

The vulnerability of the Windows DWM library in the Microsoft Windows operating system, which allows attackers to escalate their privileges

The vulnerability of the Windows DWM library in the Microsoft Windows operating system is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

7.8CVSS7.2AI score0.00793EPSS
SaveExploits0References3
Rockylinux
Rockylinux
added 2022/05/17 7:4 a.m.18 views

new packages: matchbox-window-manager

An update is available for matchbox-window-manager. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the...

2.2AI score
SaveExploits0
OSV
OSV
added 2022/04/15 7:15 p.m.3 views

CVE-2022-24546

Windows DWM Core Library Elevation of Privilege Vulnerability...

7.8CVSS7.1AI score0.00793EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2022/04/15 7:15 p.m.9 views

CVE-2022-24546

Windows DWM Core Library Elevation of Privilege Vulnerability...

7.8CVSS7.1AI score0.00793EPSS
SaveExploits0References3Affected Software10
CNNVD
CNNVD
added 2022/04/12 12:0 a.m.10 views

Microsoft DWM Core Library 权限许可和访问控制问题漏洞

Microsoft DWM Core Library is the United States Microsoft Microsoft company's Microsoft windows get a core library. An elevation of privilege vulnerability exists in the Microsoft DWM Core Library. The vulnerability arises from an incorrect programmatic call to a high-level native procedure. An...

7.8CVSS7.5AI score0.00793EPSS
SaveExploits0References6
OSV
OSV
added 2022/03/30 4:15 p.m.6 views

CVE-2021-39758

In WindowManager, there is a possible way to start a foreground activity from the background due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions...

7.8CVSS7.2AI score0.001EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2022/03/30 4:15 p.m.7 views

CVE-2021-39758

In WindowManager, there is a possible way to start a foreground activity from the background due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions...

7.8CVSS7.2AI score0.001EPSS
SaveExploits0References2
OSV
OSV
added 2022/03/30 4:15 p.m.9 views

CVE-2021-39749

In WindowManager, there is a possible way to start non-exported and protected activities due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

7.8CVSS7.2AI score0.00192EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2022/03/30 12:0 a.m.6 views

Google Android 安全漏洞

Google Android is a Linux-based open-source operating system from the U.S. company Google. Google Android has a security vulnerability that stems from a lack of permission checks in WindowManager, which could be exploited by attackers to escalate privileges...

7.8CVSS5.6AI score0.00192EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2022/03/28 12:0 a.m.10 views

The vulnerability of the Windows DWM library in the Microsoft Windows operating system, which allows attackers to escalate their privileges

The vulnerability of the Windows DWM library in the Microsoft Windows operating system is related to the use of a shared resource with incorrect synchronization. Exploiting this vulnerability can allow an attacker to gain increased privileges...

7CVSS7.2AI score0.00577EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2022/03/28 12:0 a.m.11 views

The vulnerability of the basic Windows DWM library in Microsoft Windows operating systems allows attackers to escalate their privileges.

The vulnerability of the basic Windows DWM library in Microsoft Windows is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker to enhance their privileges...

7.8CVSS7.2AI score0.00642EPSS
SaveExploits0References3
OSV
OSV
added 2022/03/09 5:15 p.m.3 views

CVE-2022-23291

Windows DWM Core Library Elevation of Privilege Vulnerability...

7.8CVSS7.1AI score0.00642EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2022/02/25 12:0 a.m.13 views

The vulnerability of the Windows DWM Core Library on Windows operating systems, which allows attackers to enhance their privileges

The vulnerability of the Windows DWM Core Library in operating systems is related to security configuration errors. Exploiting this vulnerability can allow attackers to gain increased privileges...

7.8CVSS7.2AI score0.04196EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2022/02/10 12:0 a.m.17 views

The vulnerability of the basic Windows DWM library in the Windows operating system allows attackers to escalate their privileges.

The vulnerability of the Windows DWM base library in the Windows operating system is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker to enhance their privileges...

7CVSS7.2AI score0.00586EPSS
SaveExploits0References2
OSV
OSV
added 2022/02/09 5:15 p.m.6 views

CVE-2022-21994

Windows DWM Core Library Elevation of Privilege Vulnerability...

7.8CVSS7.1AI score0.04196EPSS
SaveExploits0References1
Rows per page
Query Builder