PT-2023-3682 · Microsoft · Message Queuing +1

Name of the Vulnerable Software and Affected Versions: Microsoft Message Queuing MSMQ affected versions not specified Description: The issue is related to insufficient input validation in Microsoft Message Queuing MSMQ for Windows operating systems. It allows a remote attacker to execute arbitrar...

PT-2023-3507 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to insufficient input validation in the Remote Procedure Call RPC technology of Windows operating systems. This can be exploited by a remote attacker to cause a denial ...

PT-2023-3855 · Microsoft · Directmusic +1

Name of the Vulnerable Software and Affected Versions: Microsoft DirectMusic affected versions not specified Description: The issue is related to insufficient protection of internal data in the DirectMusic component of Windows operating systems. This can allow an attacker to gain unauthorized...

Microsoft PostScript Printer Driver security vulnerabilities

Microsoft PostScript Printer Driver is a Microsoft standard printer driver for PostScript printers from Microsoft Corporation USA. A security vulnerability exists in the Microsoft PostScript Printer Driver. The following products and versions are affected: Windows 11 Version 22H2 for ARM64-based...

Group Policy Services Privilege Escalation

The vulnerability of Group Policy Services in Windows operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to increase their privileges remotely...

Windows Container Manager Privilege Escalation

The vulnerability of the Windows Container Manager service in Windows operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

Windows Installer Privilege Escalation

The vulnerability of the Windows Installer component in Windows operating systems is related to errors in the memory object handling mechanisms. Exploiting this vulnerability can allow an attacker to increase their privileges...

App-V Privilege Escalation Command Execution

The vulnerability of the App-V software service for virtualizing and delivering Citrix Virtual Apps and Desktops formerly XenApp and XenDesktop on Windows operating systems is related to the lack of measures taken to neutralize special elements used in the operating system’s command set. Exploiti...

Windows IKE Code Execution

The vulnerability of the Internet Key Exchange IKE protocol implementation in Windows operating systems is related to synchronization errors when using a common resource. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...

Netlogon Remote Protocol Privilege Escalation

The vulnerability of the Netlogon Remote Protocol RPC interface in Windows operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...

PT-2023-2412 · Microsoft · Postscript/Pcl6 Class Printer Driver +1

Name of the Vulnerable Software and Affected Versions: Microsoft PostScript and PCL6 Class Printer Driver affected versions not specified Description: The issue is related to insufficient input validation in the PostScript Printer Driver Pscript and PCL6 Class Printer drivers for Windows operatin...

Microsoft Windows RDP Client security vulnerabilities

Microsoft Windows is a suite of operating systems for use on personal devices from the U.S.-based Microsoft Corporation Microsoft. A security vulnerability exists in the Microsoft Windows RDP Client. The following products and versions are affected: Windows 10 Version 20H2 for ARM64-based...

Microsoft Windows Internet Key Exchange security vulnerability

Microsoft Windows Internet Key Exchange is the Internet Key Exchange protocol in Windows from Microsoft Corporation USA. A security vulnerability exists in the Microsoft Windows Internet Key Exchange IKE Protocol. The following products and editions are affected:Windows 10 Version 1809 for...

PT-2023-2434 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows versions affected versions not specified Description: The issue is related to the implementation of the Secure Socket Tunneling Protocol SSTP in Windows operating systems, which is associated with insufficient input validation. This c...

PT-2023-1783 · Microsoft · Windows Internet Key Exchange (Ike) Extension +1

Name of the Vulnerable Software and Affected Versions: Windows Internet Key Exchange IKE Extension affected versions not specified Description: The issue is related to insufficient input validation in the implementation of the Internet Key Exchange IKE protocol in Windows operating systems. This...

HTTP.sys Driver Unauthorized Access

The vulnerability of the HTTP.sys driver in Windows operating systems is related to the disclosure of information in the erroneous data area. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

Microsoft Windows security vulnerabilities

Microsoft Windows is a suite of operating systems for use on personal devices from the U.S.-based Microsoft Corporation Microsoft. A security vulnerability exists in Microsoft Windows Protected EAP PEAP. The following products and versions are affected:Windows 10 Version 1809 for 32-bit...

Microsoft Windows security vulnerabilities

Microsoft Windows is a suite of operating systems for use on personal devices from the U.S.-based Microsoft Corporation Microsoft. A security vulnerability exists in Microsoft Windows Protected EAP PEAP. The following products and versions are affected: Windows 10 Version 1809 for 32-bit...

Microsoft ODBC Driver security vulnerabilities

Microsoft ODBC Driver is a driver from Microsoft. It allows applications to access data in a database management system DBMS using SQL as the standard for accessing data. A security vulnerability exists in the Microsoft Windows ODBC Driver. The following products and versions are affected:Windows...

Path Traversal

vertx-web is vulnerable to Path Traversal. The vulnerability exists in the pathOffset function of Utils.java When running vertx web applications that serve files using the StaticHandler on Windows Operating Systems and Windows File Systems. If the mount point is a wildcard , then an attacker can...