PT-2022-2894 · Microsoft · Windows +2

Name of the Vulnerable Software and Affected Versions: Microsoft Local Security Authority LSA Server affected versions not specified Description: The issue is related to an information disclosure vulnerability in the Local Security Authority Subsystem Service LSASS of Windows operating systems...

Samsung Portable SSD T5 PC code issue and vulnerability

Samsung portable SSD T5 PC is an official software for hard disks from Samsung South Korea. A security vulnerability exists in Samsung portable SSD T5 PC software prior to version 1.6.9, which originates from a DLL hijacking vulnerability that can be exploited by a local attacker to escalate...

Microsoft Windows Point-to-Point Tunneling Protocol input validation vulnerability

Microsoft Windows Point-to-Point Tunneling Protocol PPTP is a network protocol from Microsoft that enables the secure transmission of data from remote clients to private corporate servers by creating a virtual private network VPN over a TCP/IP-based data network. VPN. An input validation error...

Microsoft Windows HTML Platform Security Feature Vulnerability

Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft Corporation USA. A vulnerability exists in the Microsoft Windows HTML Platform due to a security feature issue. The following products and versions are affected: Windows 7 for 32-bit Systems Service Pack...

Windows Mobile Device Management Privilege Escalation

The vulnerability of Windows Mobile Device Management for Windows operating systems is related to insecure management of privileges. Exploiting this vulnerability can allow attackers to enhance their privileges...

Windows Mobile Device Management Code Execution

The vulnerability of Windows Mobile Device Management for Windows operating systems is related to improper code generation. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

Hyper-V Hardware Virtualization Bypass

The vulnerability of the Hyper-V hardware virtualization technology for Windows operating systems is related to security configuration errors. Exploiting this vulnerability can allow attackers to circumvent security restrictions...

Path Traversal in Eclipse Vert

In Eclipse Vert.x 3.4.x up to 3.9.4, 4.0.0-milestone1, 4.0.0-milestone2, 4.0.0-milestone3, 4.0.0-milestone4, 4.0.0-milestone5, 4.0.0.Beta1, 4.0.0.Beta2, and 4.0.0.Beta3, StaticHandler doesn't correctly processes back slashes on Windows Operating systems, allowing, escape the webroot folder to the...

CVE-2021-33113

Improper input validation for some IntelR PROSet/Wireless WiFi in multiple operating systems and KillerTM WiFi in Windows 10 and 11 may allow an unauthenticated user to potentially enable denial of service or information disclosure via adjacent access...

CVE-2021-0170

Exposure of Sensitive Information to an Unauthorized Actor in firmware for some IntelR PROSet/Wireless Wi-Fi in multiple operating systems and some KillerTM Wi-Fi in Windows 10 and 11 may allow an authenticated user to potentially enable information disclosure via local access...

CVE-2021-0172

Improper input validation in firmware for some IntelR PROSet/Wireless Wi-Fi in multiple operating systems and some KillerTM Wi-Fi in Windows 10 and 11 may allow an unauthenticated user to potentially enable denial of service via adjacent access...

CVE-2021-0168

Improper input validation in firmware for some IntelR PROSet/Wireless Wi-Fi in multiple operating systems and some KillerTM Wi-Fi in Windows 10 and 11 may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2021-0166

Exposure of Sensitive Information to an Unauthorized Actor in firmware for some IntelR PROSet/Wireless Wi-Fi in multiple operating systems and some KillerTM Wi-Fi in Windows 10 and 11 may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2021-0066

Improper input validation in firmware for IntelR PROSet/Wireless Wi-Fi in multiple operating systems and KillerTM Wi-Fi in Windows 10 and 11 may allow an unauthenticated user to potentially enable escalation of privilege via local access...

Windows Storage Spaces Privilege Escalation

The vulnerability of the driver for enabling Storage Spaces on Windows operating systems is related to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...

Windows HTTP Protocol Stack Buffer Overflow

The vulnerability of the HTTP Protocol Stack in Microsoft Windows operating systems is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

Active Directory Federation Services Privilege Escalation

The vulnerability of the Active Directory Federation Services AD FS for Windows operating systems is related to security configuration errors. Exploiting this vulnerability can allow a malicious actor to bypass security restrictions and increase their privileges...

Microsoft Graphics Component security vulnerabilities

Microsoft Graphics Component is a graphics driver component from Microsoft Corporation USA. A security vulnerability exists in Microsoft Graphics Component. The following products and versions are affected:Windows 10 for 32-bit Systems,Windows 10 for x64-based Systems,Windows 10 Version 1607 for...

Microsoft Windows Permission Licensing and Access Control Vulnerabilities

Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft Corporation USA. A vulnerability exists in Microsoft Windows AppContracts API Server with privilege license and access control issues. The following products and editions are affected:Windows 10 Version...

PT-2022-1530 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to errors in privilege management in the implementation of the Kerberos protocol in Windows operating systems. It allows a remote attacker to elevate their privileges...