191 matches found
createdump
Windows App LSASS 덤프 - 개념 증명 이 프로젝트는 Windows App에서 Microsoft 서명 실행 파일인 createdump.exe 도구를 사용하여 LSASS 프로세스를 덤프하는 방법을 시연하며, 커스텀 후크를 활용하여 LSASS에 대한 프로세스 액세스를 활성화합니다. Get-AuthentiCodeSignature -FilePath Join-Path -Path Get-AppxPackage -Name Windows365.InstallLocation -ChildPath 'wnc\createdump.exe'...
CVE-2026-78547 Out-of-Bounds Write
Out-of-bounds write vulnerability in Citrix Citrix Workspace app for Windows. This issue affects Citrix Workspace app for Windows: before 2603.11 Current Release CR, before 2507.1 LTSR CU3, and before LTSR 2607...
Windows Enterprise App Management Elevation of Privilege Vulnerability
Improper handling of insufficient permissions or privileges in Windows Enterprise App Management allows an authorized attacker to elevate privileges locally...
Citrix Workspace app for Windows Security Bulletin CVE-2026-78546 and CVE-2026-78547
Severity - Medium Description of Problem Two vulnerabilities have been discovered that impact the Citrix Workspace app for Windows. Affected Versions The vulnerabilities affect the following supported versions of the Citrix Workspace app for Windows. Current Release CR Citrix Workspace app for...
CVE-2026-69550 Windows App for Mac Information Disclosure Vulnerability
...
CVE-2026-69550
The Windows App for Mac information disclosure vulnerability (CVSS 6.5, MEDIUM) exposes sensitive data over the network; exploitation requires user interaction. No root cause, affected component, or remediation details are provided in the documents.
CVE-2026-69550 Windows App for Mac Information Disclosure Vulnerability
...
The vulnerability of the Windows App Store application store for Windows operating systems allows attackers to escalate their privileges.
The vulnerability of the Windows App Store application store for Windows operating systems is related to competitive access to resources a state of competition. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...
EUVD-2026-43863
Stack-based buffer overflow in Windows App Installer allows an authorized attacker to elevate privileges locally...
EUVD-2026-43840
Concurrent execution using shared resource with improper synchronization 'race condition' in Microsoft Windows App Store allows an authorized attacker to elevate privileges locally...
EUVD-2026-43990
Concurrent execution using shared resource with improper synchronization 'race condition' in Microsoft Windows App Store allows an authorized attacker to elevate privileges locally...
EUVD-2026-43977
Use of uninitialized resource in Microsoft Windows App Store allows an authorized attacker to disclose information locally...
EUVD-2026-43974
Use after free in Windows App Installer allows an authorized attacker to elevate privileges locally...
EUVD-2026-43973
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows App Installer allows an authorized attacker to elevate privileges locally...
EUVD-2026-43970
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows App Store allows an unauthorized attacker to elevate privileges over a network...
CVE-2026-50400
Stack-based buffer overflow in Windows App Installer allows an authorized attacker to elevate privileges locally...
CVE-2026-50356
Concurrent execution using shared resource with improper synchronization 'race condition' in Microsoft Windows App Store allows an authorized attacker to elevate privileges locally...
CVE-2026-49784
Concurrent execution using shared resource with improper synchronization 'race condition' in Microsoft Windows App Store allows an authorized attacker to elevate privileges locally...