CVE-2023-36541

Insufficient verification of data authenticity in Zoom Desktop Client for Windows before 5.14.5 may allow an authenticated user to enable an escalation of privilege via network access...

PT-2023-4701 · Zoom · Zoom Desktop Client For Windows +1

Name of the Vulnerable Software and Affected Versions: Zoom Desktop Client for Windows versions prior to 5.15.5 Zoom Rooms for Windows versions prior to 5.15.5 Description: The issue is related to improper privilege management, which may allow an authenticated user to enable information disclosur...

PT-2023-4962 · Zoom · Zoom Desktop Client For Windows

Name of the Vulnerable Software and Affected Versions: Zoom Desktop Client for Windows versions prior to 5.14.7 Description: The issue is related to insufficient input validation, which can be exploited by a remote attacker to gain elevated privileges. This can potentially allow an unauthenticate...

PT-2023-21198 · Cloudflare · Cloudflare Warp Client For Windows

Name of the Vulnerable Software and Affected Versions: Cloudflare WARP client for Windows affected versions not specified Description: The Cloudflare WARP client for Windows assigns loopback IPv4 addresses for the DNS Servers, as it acts as a local DNS server that performs DNS queries in a secure...

CVE-2023-32232

An issue was discovered in Vasion PrinterLogic Client for Windows before 25.0.0.836. During client installation and repair, a PrinterLogic binary is called by the installer to configure the device. This window is not hidden, and is running with elevated privileges. A standard user can break out o...

CVE-2023-32232

An issue was discovered in Vasion PrinterLogic Client for Windows before 25.0.0.836. During client installation and repair, a PrinterLogic binary is called by the installer to configure the device. This window is not hidden, and is running with elevated privileges. A standard user can break out o...

PT-2023-23675 · Vasion · Vasion Printerlogic Client

Name of the Vulnerable Software and Affected Versions: Vasion PrinterLogic Client for Windows versions prior to 25.0.0.818 Description: An issue was discovered in the Vasion PrinterLogic Client for Windows. During installation, binaries are executed out of a subfolder in C:WindowsTemp. A standard...

Vasion PrinterLogic Client 安全漏洞

Vasion PrinterLogic Client is a print management solution from Vasion. A security vulnerability exists in Vasion PrinterLogic Client Windows versions prior to 25.0.0.836 that originates during client installation and repair, where the installer calls the PrinterLogic binary to configure the devic...

CVE-2023-24491

A vulnerability has been discovered in the Citrix Secure Access client for Windows which, if exploited, could allow an attacker with access to an endpoint with Standard User Account that has the vulnerable client installed to escalate their local privileges to that of NT AUTHORITY\SYSTEM...

Microsoft Windows Online Certificate Status Protocol (OCSP) SnapIn 安全漏洞

Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft Corporation USA. A security vulnerability exists in Microsoft Windows Online Certificate Status Protocol OCSP SnapIn. An attacker could exploit the vulnerability to remotely execute code. The following...

Microsoft Windows Kernel 安全漏洞

Microsoft Windows Kernel is the kernel of the Windows operating system by Microsoft Corporation USA. A security vulnerability exists in Microsoft Windows Kernel. An attacker can exploit the vulnerability to elevate privileges. The following products and versions are affected:Windows Server...

Microsoft Windows Routing and Remote Access Service (RRAS) 安全漏洞

Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft Corporation USA. A security vulnerability exists in Microsoft Windows Routing and Remote Access Service RRAS. An attacker exploiting this vulnerability could remotely execute code. The following products...

PT-2023-3995 · Citrix · Citrix Secure Access Client For Windows

Name of the Vulnerable Software and Affected Versions: Citrix Secure Access client for Windows affected versions not specified Description: A vulnerability has been discovered in the Citrix Secure Access client for Windows, which, if exploited, could allow an attacker with access to an endpoint...

Microsoft Windows Routing and Remote Access Service (RRAS) 安全漏洞

Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft Corporation USA. A security vulnerability exists in Microsoft Windows Routing and Remote Access Service RRAS. An attacker exploiting this vulnerability could remotely execute code. The following products...

Microsoft Windows Kernel 竞争条件问题漏洞

Microsoft Windows Kernel is the kernel of the Windows operating system by Microsoft Corporation USA. A security vulnerability exists in Microsoft Windows Kernel. An attacker can exploit the vulnerability to elevate privileges. The following products and versions are affected:Windows 10 Version 16...

Microsoft Windows Partition Management Driver 安全漏洞

Microsoft Windows Partition Management Driver is a partition management driver from Microsoft Corporation USA. A security vulnerability exists in Microsoft Windows Partition Management Driver. An attacker could exploit the vulnerability to elevate privileges. The following products and editions a...

CVE-2023-1862

Cloudflare WARP client for Windows up to v2023.3.381.0 allowed a malicious actor to remotely access the warp-svc.exe binary due to an insufficient access control policy on an IPC Named Pipe. This would have enabled an attacker to trigger WARP connect and disconnect commands, as well as obtaining...

PT-2023-3411 · Cloudflare · Cloudflare Warp Client For Windows

Name of the Vulnerable Software and Affected Versions: Cloudflare WARP client for Windows versions up to 2023.3.381.0 Description: The issue is related to insufficient access control policy on an IPC Named Pipe, allowing a malicious actor to remotely access the warp-svc.exe binary. This could...

CVE-2023-34114

Exposure of resource to wrong sphere in Zoom for Windows and Zoom for MacOS clients before 5.14.10 may allow an authenticated user to potentially enable information disclosure via network access...

CVE-2023-28601

Zoom for Windows clients prior to 5.14.0 contain an improper restriction of operations within the bounds of a memory buffer vulnerability. A malicious user may alter protected Zoom Client memory buffer potentially causing integrity issues within the Zoom Client...