CVE-1999-0285

Denial of service in telnet from the Windows NT Resource Kit, by opening then immediately closing a connection...

CVE-1999-0227

Access violation in LSASS.EXE LSA/LSARPC program in Windows NT allows a denial of service...

CVE-1999-0228

Denial of service in RPCSS.EXE program RPC Locator in Windows NT...

CVE-1999-0119

Windows NT 4.0 beta allows users to read and delete shares...

CVE-2024-49360

Sandboxie is a sandbox-based isolation software for 32-bit and 64-bit Windows NT-based operating systems. An authenticated user UserA with no privileges is authorized to read all files created in sandbox belonging to other users in the sandbox folders C:\Sandbox\UserB\xxx. An authenticated attack...

CVE-2024-49360 Path traversal in Sandboxie

Sandboxie is a sandbox-based isolation software for 32-bit and 64-bit Windows NT-based operating systems. An authenticated user UserA with no privileges is authorized to read all files created in sandbox belonging to other users in the sandbox folders C:\Sandbox\UserB\xxx. An authenticated attack...

PT-2024-33484 · Sandboxie · Sandboxie

Name of the Vulnerable Software and Affected Versions: Sandboxie affected versions not specified Description: Sandboxie is a sandbox-based isolation software for 32-bit and 64-bit Windows NT-based operating systems. An authenticated user UserA without privileges can read files created in a sandbo...

Microsoft Fixes 90 New Flaws, Including Actively Exploited NTLM and Task Scheduler Bugs

Microsoft on Tuesday revealed that two security flaws impacting Windows NT LAN Manager NTLM and Task Scheduler have come under active exploitation in the wild. The security vulnerabilities are among the 90 security bugs the tech giant addressed as part of its Patch Tuesday update for November 202...

November Patch Tuesday release contains three critical remote code execution vulnerabilities

The Patch Tuesday for November of 2024 includes 89 vulnerabilities, including four that Microsoft marked as "critical." The remaining vulnerabilities listed are classified as "important." Microsoft assessed that exploitation of the four "critical" vulnerabilities is "less likely." CVE-2024-43639 ...

CVE-2024-43623 Windows NT OS Kernel Elevation of Privilege Vulnerability

...

CVE-2024-43623

CVE-2024-43623 is documented across connected sources as a Windows NT OS Kernel elevation-of-privilege vulnerability. The ENISA/NCSC summary and related Microsoft patch-coverage references confirm it affects the Windows NT OS Kernel and was addressed via the November 2024 update cycle (e.g., KB50...

PT-2024-8075 · Microsoft · Windows Nt Os Kernel +1

Name of the Vulnerable Software and Affected Versions: Windows NT OS Kernel affected versions not specified Description: The issue is related to an elevation-of-privilege vulnerability in the Windows NT OS Kernel, which is caused by an integer overflow. This vulnerability can be exploited by an...

KLA77106 Multiple vulnerabilities in Microsoft Products (ESU)

Multiple vulnerabilities were found in Microsoft Products Extended Security Update. Malicious users can exploit these vulnerabilities to execute arbitrary code, gain privileges, spoof user interface, obtain sensitive information. Below is a complete list of vulnerabilities: 1. A remote code...

PT-2024-6917 · Microsoft · Nt Os Kernel +1

Name of the Vulnerable Software and Affected Versions: NT OS Kernel affected versions not specified Description: The issue is related to an elevation-of-privilege vulnerability in the NT OS Kernel, which can be exploited by attackers to affect the system. It is associated with the dereference of ...

SUSE CVE-2000-0328

Windows NT 4.0 generates predictable random TCP initial sequence numbers ISN, which allows remote attackers to perform spoofing and session hijacking...

SUSE CVE-2005-2917

Squid 2.5.STABLE10 and earlier, while performing NTLM authentication, does not properly handle certain request sequences, which allows attackers to cause a denial of service daemon restart...

CVE-2023-21688

NT OS Kernel Elevation of Privilege Vulnerability...

CVE-2023-21688

NT OS Kernel Elevation of Privilege Vulnerability...

Microsoft Client Server Run-time Subsystem (CSRSS) Privilege Elevation Vulnerability

Microsoft Client Server Run-time Subsystem is a client/server run-time subsystem from Microsoft Corporation of the United States, manifested as the csrss.exe process. It is a component of the Windows NT operating system family, appearing in Windows NT 3.1 and later systems, providing the user mod...

Microsoft Client Server Run-time Subsystem (CSRSS) Privilege Elevation Vulnerability

Microsoft Client Server Run-time Subsystem is a client/server run-time subsystem from Microsoft Corporation of the United States, manifested as the csrss.exe process. It is a component of the Windows NT operating system family, appearing in Windows NT 3.1 and later systems, and provides the user...