The vulnerability in the implementation of the Secure Boot protocol for operating systems with Windows, which allows attackers to circumvent existing security restrictions.

The vulnerability of the Secure Boot protocol for Windows operating systems is related to a numerical overflow condition. Exploiting this vulnerability could allow a malicious actor to bypass existing security restrictions remotely...

The vulnerability of the MSHTML platform in Microsoft Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the MSHTML platform in Microsoft Windows operating systems is related to the disclosure of information in the erroneous data area. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely, provided that the user opens a specially crafted file...

Microsoft Graphics Component Security Vulnerability

Microsoft Graphics Component is a graphics driver component from Microsoft Corporation USA. A security vulnerability exists in Microsoft Graphics Component. An attacker could exploit this vulnerability to gain elevated privileges. The following products and versions are affected:Windows 10 Versio...

Microsoft WS-Discovery Security Vulnerability

Microsoft WS-Discovery is a web-based protocol from Microsoft Corporation USA. A security vulnerability exists in Microsoft WS-Discovery. An attacker has exploited the vulnerability to cause a denial of service on the system. The following products and editions are affected:Windows 10 Version 180...

PT-2024-4854 · Microsoft · Windows Ocsp Server +1

Name of the Vulnerable Software and Affected Versions: Windows Online Certificate Status Protocol OCSP Server affected versions not specified Description: The issue is related to an uncontrolled consumption of resources in the implementation of the Online Certificate Status Protocol OCSP in Windo...

The vulnerability of the Windows operating system’s streaming data transmission service allows attackers to enhance their privileges.

The vulnerability of the Windows operating system’s streaming data transmission service is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerability of the implementation of the Link Layer Topology Discovery Protocol (LLTD) in Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the Link Layer Topology Discovery Protocol LLTD implementation in Windows operating systems is related to buffer overflows in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code by sending a specially crafted network packet...

The vulnerability of the Winlogon entry program in Windows operating systems allows attackers to escalate their privileges.

The vulnerability of the Winlogon entry program in Windows operating systems is related to integer overflow. Exploiting this vulnerability can allow an attacker to enhance their privileges using specially created data...

The vulnerability of the Winlogon entry program in Windows operating systems allows attackers to elevate their privileges.

The vulnerability of the Winlogon entry program in Windows operating systems is related to overflow in the dynamic memory buffer. Exploiting this vulnerability can allow an attacker to enhance their privileges using specially created data...

The vulnerability of the Wi-Fi driver for Windows operating systems, allowing a hacker to execute arbitrary code

The vulnerability of Wi-Fi operating system Windows drivers is related to errors in processing input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code by sending a specially crafted network packet...

Microsoft Windows Themes Backlink Vulnerability

Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft Corporation USA. A backlink vulnerability exists in Microsoft Windows Themes. An attacker could exploit this vulnerability to cause a denial of service on the system. The following products and versions a...

Microsoft Winlogon Input Validation Error Vulnerability

Microsoft Winlogon is a Microsoft Corporation USA component built into the Windows NT family of operating systems developed by Microsoft. An input validation error vulnerability exists in Microsoft Winlogon. An attacker could exploit the vulnerability to elevate privileges. The following products...

PT-2024-4144 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to a buffer overflow in dynamic memory in the Winlogon program, which is part of the Windows operating system. This can be exploited by an attacker using specially...

Microsoft Windows Wi-Fi Driver Input Validation Error Vulnerability

Microsoft Windows is a suite of operating systems used by Microsoft Corporation USA for personal devices. An input validation error vulnerability exists in Microsoft Windows Wi-Fi Driver. An attacker exploiting this vulnerability could remotely execute code. The following products and editions ar...

PT-2024-27501 · Microsoft +1 · Windows Os +1

Name of the Vulnerable Software and Affected Versions: Ariane Allegro Scenario Player through 2024-03-05 Description: The issue allows physically proximate attackers to obtain sensitive information, such as hotel invoice content with personally identifiable information PII, and potentially create...

The vulnerability of the Windows operating system’s deployment process allows attackers to disclose sensitive information that should be protected.

The vulnerability of the Windows operating system’s deployment service exists because measures to neutralize specific elements are not taken. Exploiting this vulnerability can allow a malicious actor, operating remotely, to disclose sensitive information...

The vulnerability of the Windows Routing and Remote Access Service (RRAS) component in operating systems allows a hacker to execute arbitrary code.

The vulnerability of the Windows Routing and Remote Access Service RRAS component in operating systems is related to numerical truncation errors. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...

The vulnerability of the Windows Hyper-V hardware virtualization system allows a attacker to trigger a service failure.

The vulnerability of the Windows Hyper-V hardware virtualization system in Windows operating systems is related to a numerical overflow condition. Exploiting this vulnerability can allow an attacker to cause a service failure remotely...

The vulnerability of the Windows DWM library in Windows operating systems allows attackers to disclose protected information.

The vulnerability of the Windows DWM library in Windows operating systems is related to integer overflow. Exploiting this vulnerability can allow an attacker to disclose protected information...

Cerberus FTP Enterprise 资源管理错误漏洞

Cerberus FTP Server is a Windows-based FTP server from Cerberus, Inc. that supports FTP sessions encrypted via FTPS and SFTP. A resource management error vulnerability exists in Cerberus FTP Enterprise version 8.0.10.3, which stems from the presence of a denial of service DoS vulnerability...