CVE-2024-49126: Use After Free

Windows Local Security Authority Subsystem Service LSASS Remote Code Execution Vulnerability...

CVE-2024-43522

Windows Local Security Authority LSA Elevation of Privilege Vulnerability...

CVE-2024-43522: Heap-based Buffer Overflow

Windows Local Security Authority LSA Elevation of Privilege Vulnerability...

July 9, 2024—KB5040438 (OS Build 25398.1009)

None None...

Microsoft Windows Menu DC Pen Use-After-Free Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the win32kfull...

April 9, 2024—KB5036909 (OS Build 20348.2402)

None None...

CVE-2022-44684

Windows Local Session Manager LSM Denial of Service Vulnerability...

CVE-2022-44684: Undefined Security Weakness

Windows Local Session Manager LSM Denial of Service Vulnerability...

CVE-2023-35331: Undefined Security Weakness

Windows Local Security Authority LSA Denial of Service Vulnerability...

CVE-2022-35759

Windows Local Security Authority LSA Denial of Service Vulnerability...

CVE-2022-35759: Undefined Security Weakness

Windows Local Security Authority LSA Denial of Service Vulnerability...

April 11, 2023—KB5025239 (OS Build 22621.1555)

None None...

CVE-2022-47632

Razer Synapse before 3.7.0830.081906 allows privilege escalation due to an unsafe installation path, improper privilege management, and improper certificate validation. Attackers can place malicious DLLs into %PROGRAMDATA%\Razer\Synapse3\Service\bin if they do so before the service is installed a...

CVE-2022-45770

Improper input validation in adgnetworkwfpdrv.sys in Adguard For Windows x86 through 7.11 allows local privilege escalation...

CVE-2023-21771: Sensitive Data Storage in Improperly Locked Memory

Windows Local Session Manager LSM Elevation of Privilege Vulnerability...

PT-2023-1136 · Microsoft · Windows Local Security Authority +1

Name of the Vulnerable Software and Affected Versions: Windows Local Security Authority LSA affected versions not specified Description: The issue is related to insufficient access control in the Windows Local Security Authority LSA service, which can be exploited to elevate privileges. This allo...

CVE-2023-21524: Use of Hard-coded Credentials

Windows Local Security Authority LSA Elevation of Privilege Vulnerability...

PT-2022-7227 · Microsoft · Windows Local Session Manager +1

Name of the Vulnerable Software and Affected Versions: Windows Local Session Manager LSM affected versions not specified Description: The issue exists due to insufficient input validation in the Windows Local Session Manager component. Exploitation of this issue may allow a remote attacker to cau...

CVE-2022-37973

Windows Local Session Manager LSM Denial of Service Vulnerability...

PT-2022-5426 · Microsoft · Windows Local Session Manager +1

Name of the Vulnerable Software and Affected Versions: Windows Local Session Manager affected versions not specified Description: The issue is related to insufficient input validation in the Windows Local Session Manager component of the Windows operating system. This can be exploited by a remote...