PT-2022-5499 · Microsoft · Network Policy Server +1

Name of the Vulnerable Software and Affected Versions: Network Policy Server NPS affected versions not specified Description: The issue is related to insufficient input validation in the Network Policy Server NPS of Microsoft Windows operating systems. It allows a remote attacker to cause a denia...

The vulnerability of the kernel-level driver nvlddmkm.sys from NVIDIA’s graphics processing unit software products such as GeForce, Quadro, NVS, and Tesla for Windows operating systems allows a malicious actor to cause system failures, gain unauthorized access to protected information, or enhance their privileges.

The vulnerability of the kernel-level driver nvlddmkm.sys from NVIDIA’s graphics processing units, including GeForce, Quadro, NVS, and Tesla, for Windows operating systems is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability can allow attackers to cause syst...

Microsoft Windows 安全漏洞

Microsoft Windows is a set of operating systems for personal devices from Microsoft Corporation USA...

Microsoft Graphics Component 安全漏洞

Microsoft Graphics Component is a graphics driver component from Microsoft Corporation USA. A security vulnerability exists in Microsoft Graphics Component. The following products and versions are affected: Windows 7 for x64-based Systems Service Pack 1,Windows 8.1 for 32-bit systems,Windows 8.1...

Microsoft ODBC Driver 安全漏洞

Microsoft ODBC Driver is a driver from Microsoft. It allows applications to access data in a database management system DBMS using SQL as the standard for accessing data. A security vulnerability exists in the Microsoft Windows ODBC Driver. The following products and versions are affected:Windows...

The vulnerability of the Windows Digital Media Receiver component in Windows operating systems allows attackers to exploit their privileges.

The vulnerability of the Windows Digital Media Receiver component in operating systems with Windows is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

Microsoft Windows Point-to-Point Tunneling Protocol 安全漏洞

Microsoft Windows Point-to-Point Tunneling Protocol PPTP is a network protocol from Microsoft that enables the secure transmission of data from remote clients to private corporate servers by creating a virtual private network VPN over a TCP/IP-based data network. VPN. A security vulnerability...

PT-2022-4301 · Microsoft · Storage Spaces Direct +1

Name of the Vulnerable Software and Affected Versions: Storage Spaces Direct affected versions not specified Description: The issue is related to insufficient access restrictions in the Storage Spaces Direct feature of Windows operating systems, which can be exploited to elevate privileges. This...

The vulnerability of the Windows Shell component of Windows operating systems allows a perpetrator to execute arbitrary code.

The vulnerability of the Windows Shell component in Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

The vulnerability of the Xbox Live Save Service on Windows operating systems allows a hacker to bypass system security restrictions and increase their privileges.

The vulnerability of the Xbox Live Save Service on Windows operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow a hacker to bypass system security restrictions and enhance their privileges...

The vulnerability of the Kerberos protocol for Windows operating systems allows attackers to increase their privileges.

The vulnerability of the Kerberos protocol for Windows operating systems is related to privilege management errors. Exploiting this vulnerability can allow a attacker to enhance their privileges...

The vulnerability of the Windows Installer component on Windows operating systems, which allows a hacker to increase their privileges

The vulnerability of the Windows Installer component in Windows operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability of the diagnostic data collection and troubleshooting tool from Microsoft Support Diagnostics Tool for Windows operating systems, related to errors in processing the invoked URL address, allows a perpetrator to execute arbitrary code with privileges of the invoking application.

The vulnerability of the Microsoft Support Diagnostics Tool for collecting diagnostic data and troubleshooting issues on Windows operating systems is related to errors in processing the requested URL. Exploiting this vulnerability allows a malicious actor to execute arbitrary code with privileges...

The vulnerability of the Windows Installer component on Windows operating systems, which allows a hacker to increase their privileges

The vulnerability of the Windows Installer component in Windows operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability of the LDAP service protocol implementation in Microsoft Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the LDAP service protocol implementation in Microsoft Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by transmitting specially crafted data...

The vulnerability of the LDAP service protocol implementation in Microsoft Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the LDAP service protocol implementation in Microsoft Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through a specially crafted request...

PT-2022-2455 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to errors in privilege management in the implementation of the Kerberos protocol in Windows operating systems. It allows a remote attacker to elevate their privileges...

PT-2022-2984 · Microsoft · Windows Container Manager Service +1

Name of the Vulnerable Software and Affected Versions: Windows Container Manager Service affected versions not specified Description: The issue is related to insufficient access restrictions in the Windows Container Manager Service of Windows operating systems. It allows an attacker to elevate...

PT-2022-3132 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to the implementation of Network Address Translation NAT technology in Windows operating systems, which is associated with insufficient input data validation. This can ...

PT-2022-2894 · Microsoft · Windows +2

Name of the Vulnerable Software and Affected Versions: Microsoft Local Security Authority LSA Server affected versions not specified Description: The issue is related to an information disclosure vulnerability in the Local Security Authority Subsystem Service LSASS of Windows operating systems...