PT-2022-4236 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to insufficient access control in the Windows operating system kernel, which can be exploited to elevate privileges. This allows an attacker to affect the system. No...

Microsoft Windows Point-to-Point Tunneling Protocol 安全漏洞

Microsoft Windows Point-to-Point Tunneling Protocol PPTP is a network protocol from Microsoft that enables the secure transmission of data from remote clients to private corporate servers by creating a virtual private network VPN over a TCP/IP-based data network. VPN. A security vulnerability...

UBUNTU-CVE-2022-31612

NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer nvlddmkm.sys handler for DxgkDdiEscape, where a local user with basic capabilities can cause an out-of-bounds read, which may lead to a system crash or a leak of internal kernel information...

The vulnerability of the DNS Server component of the Windows operating system, which allows a hacker to execute arbitrary code.

The vulnerability of the DNS Server component of the Windows operating system arises due to synchronization errors when using a shared resource. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the Microsoft Internet Information Services (IIS) Server network services on the Windows operating system allows a perpetrator to cause a service failure.

The vulnerability of the Microsoft Internet Information Services IIS Server network services on the Windows operating system is related to an uncontrolled consumption of resources. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

The vulnerability of the Windows operating system’s print spooler allows a hacker to increase their privileges.

The vulnerability of the Windows operating system’s print spooler is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability of the Windows operating system’s Portable Device Enumerator service allows a hacker to circumvent existing security restrictions.

The vulnerability of the Windows operating system’s Portable Device Enumerator service is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to circumvent existing security restrictions...

The vulnerability of BitLocker’s data protection function in the Windows operating system allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of BitLocker’s data protection function in the Windows operating system is related to the exposure of information. Exploiting this vulnerability could allow an attacker to gain unauthorized access to the protected information...

The vulnerability of the Advanced Local Procedure Call (ALPC) handler in the Windows operating system allows attackers to escalate their privileges.

The vulnerability of the Advanced Local Procedure Call ALPC in the Windows operating system is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability of the Client Server Run-Time Subsystem (CSRSS) in the Windows operating system, which allows a hacker to increase their privileges

The vulnerability of the Client Server Run-Time Subsystem CSRSS in the Windows operating system is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

PT-2022-3591 · Microsoft · Windows Client Server Run-Time Subsystem +1

Name of the Vulnerable Software and Affected Versions: Windows Client Server Run-time Subsystem CSRSS affected versions not specified Description: The issue is related to insufficient access restrictions in the Client Server Run-time Subsystem CSRSS of the Windows operating system. It allows an...

Microsoft Windows Security Account Manager 输入验证错误漏洞

Microsoft Windows Security Account Manager is a Windows security account manager from Microsoft USA for storing user passwords. It can be used to authenticate local and remote users. An input validation error vulnerability exists in Microsoft Windows Security Account Manager. The following produc...

Microsoft Graphics Component 信息泄露漏洞

Microsoft Graphics Component is a graphics driver component from Microsoft Corporation USA. An information disclosure vulnerability exists in Microsoft Graphics Component. The following products and editions are affected: Windows Server 2008 R2 for x64-based Systems Service Pack 1,Windows Server...

Microsoft Windows 权限许可和访问控制问题漏洞

Microsoft Windows is a suite of operating systems used by Microsoft Corporation USA for personal devices. A vulnerability exists in Microsoft Windows Storage with privilege permission and access control issues. The following products and editions are affected:Windows Server 2019 Server Core...

The vulnerability of the Microsoft XML Core Services MSXML on the Windows operating system allows a hacker to execute arbitrary code.

The vulnerability of the Microsoft XML Core Services MSXML in the Windows operating system arises due to buffer overflow. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

The vulnerability affects the implementation of the Lightweight Directory Access Protocol (LDAP) on Windows operating systems, allowing attackers to execute arbitrary code.

The vulnerability of the LDAP protocol implementation on Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

The vulnerability of the Encrypting File System (EFS) of the Windows operating system allows a perpetrator to execute arbitrary code.

The vulnerability of the Encrypting File System EFS in the Windows operating system is related to insufficient validation of input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the Windows operating system installation service allows attackers to circumvent security restrictions and gain increased privileges.

The vulnerability of the Windows operating system installation service is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to bypass security restrictions and enhance their privileges...

The vulnerability of the Media Center application for playing multimedia content on Windows operating systems, which allows a hacker to escalate their privileges.

The vulnerability of the Media Center application for playing multimedia content on Windows operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability in the implementation of the LDAP Lightweight Directory Access Protocol on the Windows operating system allows a perpetrator to execute arbitrary code.

The vulnerability of the LDAP Lightweight Directory Access Protocol implementation in the Windows operating system is related to insufficient validation of input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...