CVE-2024-26229

CVE-2024-26229 Windows CSC服务特权提升漏洞。 当程序向缓冲区写入的数据超出其处理能力时，就会发生基于堆的缓冲区溢出，从而导致多余的数据溢出到相邻的内存区域。这种溢出会损坏内存，并可能使攻击者能够执行任意代码或未经授权访问系统。本质上，攻击者可以编写触发溢出的恶意代码或输入，从而控制受影响的系统、执行 任意命令、安装恶意软件或访问敏感数据。 微软已发出警告成功利用此漏洞的攻击者可以获得 SYSTEM 权限，这是 Windows 系统上的最高访问级别。这增加了与 CVE-2024-26229 相关的风险，使其成为恶意行为者的主要目标。 compiled by clx...

CVE-2024-26229-BOF

CVE-2024-26229 BOF Beacon Object File implementation of CVE-2024-26229 — Windows CSC driver local privilege escalation via DKOM token theft. Based on RalfHacker/CVE-2024-26229-exploit, converted to BOF with Dynamic Function Resolution DFR for use with C2 frameworks that support the Cobalt Strike...

Microsoft Windows CSC Service 访问控制错误漏洞

Microsoft Windows CSC Service is an application from Microsoft USA. that allows the use of network files while the local computer is offline. An access control error vulnerability exists in Microsoft Windows CSC Service. An attacker exploiting this vulnerability could gain access to sensitive...

Microsoft Windows CSC Service 代码问题漏洞

Microsoft Windows CSC Service is an application from Microsoft Corporation USA. It allows the use of network files while the local computer is offline. A code issue vulnerability exists in Microsoft Windows CSC Service. An attacker exploiting this vulnerability could elevate privileges. The...

EUVD-2020-2256

Malware in sbrugna...

EUVD-2020-12363

Malware in sbrugna...

EUVD-2020-2258

Malware in sbrugna...

EUVD-2020-12387

Malware in sbrugna...

EUVD-2025-2441

Malicious code in bioql PyPI...

EUVD-2021-7160

Malicious code in bioql PyPI...

CVE-2020-0771

An elevation of privilege vulnerability exists when the Windows CSC Service improperly handles memory.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'Windows CSC Service Elevation of Privilege Vulnerability'. This CVE ID is unique from...

CVE-2020-0769

An elevation of privilege vulnerability exists when the Windows CSC Service improperly handles memory.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'Windows CSC Service Elevation of Privilege Vulnerability'. This CVE ID is unique from...

CVE-2025-21374

Windows CSC Service Information Disclosure Vulnerability...

CVE-2025-21374 Windows CSC Service Information Disclosure Vulnerability

...

CVE-2025-21374

CVE-2025-21374 affects the Windows Client-Side Caching (CSC) Service and is described as a local information-disclosure vulnerability. The CVSS 3.1 vector indicates Local attack vector, Low privileges required, no user interaction, with Confidentiality impact only; other impacts are not affected ...

CVE-2025-21378 Windows CSC Service Elevation of Privilege Vulnerability

...

CVE-2025-21374 Windows CSC Service Information Disclosure Vulnerability

...

VulnCheck KEV: CVE-2024-26229

The Microsoft Windows CSC Service is vulnerable to an elevation of privilege flaw. An attacker who successfully exploited this vulnerability could gain SYSTEM privileges...

Microsoft Windows CSC Service 缓冲区错误漏洞

Microsoft Windows CSC Service is an application from Microsoft Corporation USA. It allows the use of network files while the local computer is offline. A buffer error vulnerability exists in Microsoft Windows CSC Service. An attacker exploiting this vulnerability could elevate privileges. The...

Microsoft Windows Multiple Vulnerabilities (KB5036925)

This host is missing a critical security update according to Microsoft KB5036925 SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...