CVE-2023-21772

creationtimestamp| type| source ---|---|--- 2024-04-18 16:45:00+00:00| seen| https://googleprojectzero.blogspot.com/2024/04/the-windows-registry-adventure-1.html 2025-05-23 05:00:00+00:00| seen| https://projectzero.google/2025/05/the-windows-registry-adventure-7-attack-surface.html 2025-05-23...

CVE-2022-35768

creationtimestamp| type| source ---|---|--- 2024-04-18 16:45:00+00:00| seen| https://googleprojectzero.blogspot.com/2024/04/the-windows-registry-adventure-1.html 2024-12-19 18:03:00+00:00| seen| https://googleprojectzero.blogspot.com/2024/12/the-windows-registry-adventure-5-regf.html 2025-05-23...

CVE-2023-21774

creationtimestamp| type| source ---|---|--- 2024-04-18 16:45:00+00:00| seen| https://googleprojectzero.blogspot.com/2024/04/the-windows-registry-adventure-1.html 2025-05-23 05:00:00+00:00| seen| https://projectzero.google/2025/05/the-windows-registry-adventure-7-attack-surface.html 2025-05-23...

CVE-2023-35358

creationtimestamp| type| source ---|---|--- 2024-04-18 16:45:00+00:00| seen| https://googleprojectzero.blogspot.com/2024/04/the-windows-registry-adventure-1.html 2024-12-19 18:03:00+00:00| seen| https://googleprojectzero.blogspot.com/2024/12/the-windows-registry-adventure-5-regf.html 2025-05-23...

CVE-2023-35633

creationtimestamp| type| source ---|---|--- 2024-04-18 16:45:00+00:00| seen| https://googleprojectzero.blogspot.com/2024/04/the-windows-registry-adventure-1.html 2024-10-25 17:30:00+00:00| seen| https://googleprojectzero.blogspot.com/2024/10/the-windows-registry-adventure-4-hives.html 2024-12-19...

CVE-2023-35357

creationtimestamp| type| source ---|---|--- 2024-04-18 16:45:00+00:00| seen| https://googleprojectzero.blogspot.com/2024/04/the-windows-registry-adventure-1.html 2024-12-19 18:03:00+00:00| seen| https://googleprojectzero.blogspot.com/2024/12/the-windows-registry-adventure-5-regf.html 2025-05-23...

CVE-2022-37991

creationtimestamp| type| source ---|---|--- 2024-04-18 16:45:00+00:00| seen| https://googleprojectzero.blogspot.com/2024/04/the-windows-registry-adventure-1.html 2024-12-19 18:03:00+00:00| seen| https://googleprojectzero.blogspot.com/2024/12/the-windows-registry-adventure-5-regf.html 2025-05-23...

The Windows Registry Adventure #2: A brief history of the feature

Posted by Mateusz Jurczyk, Google Project Zero Before diving into the low-level security aspects of the registry, it is important to understand its role in the operating system and a bit of history behind it. In essence, the registry is a hierarchical database made of named "keys" and "values",...

The Windows Registry Adventure #1: Introduction and research results

Posted by Mateusz Jurczyk, Google Project Zero In the 20-month period between May 2022 and December 2023, I thoroughly audited the Windows Registry in search of local privilege escalation bugs. It all started unexpectedly: I was in the process of developing a coverage-based Windows kernel fuzzer...

CVE-2024-23584

The NMAP Importer service​ may expose data store credentials to authorized users of the Windows Registry...

CVE-2024-23584

The CVE-2024-23584 entry concerns HCL BigFix Asset Discovery (Asset Discovery 109 and earlier) where the NMAP Importer service may expose data store credentials to users of the Windows Registry. Documented impact is credential exposure with a CVSS v3.1 base score of 6.6 (AV:N/AC:H/PR:H/UI:N/S:U/C...

CVE-2024-23584 HCL BigFix Asset Discovery is affected by a security vulnerability

The NMAP Importer service​ may expose data store credentials to authorized users of the Windows Registry...

CVE-2024-23584 HCL BigFix Asset Discovery is affected by a security vulnerability

The NMAP Importer service​ may expose data store credentials to authorized users of the Windows Registry...

HCL Technologies BigFix Enterprise Suite 安全漏洞

HCL Technologies BigFix Enterprise Suite is an enterprise-class endpoint management solution from HCL Technologies, Inc. It is used to help organizations effectively manage their endpoint devices, including desktops, laptops, servers, mobile devices, etc. to ensure security, compliance and...

Win32.STOP.Ransomware (Smokeloader) MVID-2024-0676 Remote Code Execution

Discovery / credits: Malvuln John Page aka hyp3rlinx c 2024 Original source: https://malvuln.com/advisory/3b9e9e130d52fe95c8be82aa4b8feb74.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Win32.STOP.Ransomware smokeloader Vulnerability: Remote Code Execution MITM Family: Stop...

CVE-2024-26182

creationtimestamp| type| source ---|---|--- 2024-03-12 20:21:51+00:00| seen| https://t.me/ctinow/206088 2024-04-11 18:07:51+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/10314 2024-04-18 16:45:00+00:00| seen|...

CVE-2024-26181

creationtimestamp| type| source ---|---|--- 2024-03-12 20:21:50+00:00| seen| https://t.me/ctinow/206087 2024-04-18 16:45:00+00:00| seen| https://googleprojectzero.blogspot.com/2024/04/the-windows-registry-adventure-1.html 2024-10-25 17:30:00+00:00| seen|...

CVE-2024-26178

creationtimestamp| type| source ---|---|--- 2024-03-12 20:21:49+00:00| seen| https://t.me/ctinow/206086 2024-04-18 16:45:00+00:00| seen| https://googleprojectzero.blogspot.com/2024/04/the-windows-registry-adventure-1.html 2024-12-19 18:03:00+00:00| seen|...

CVE-2024-26176

creationtimestamp| type| source ---|---|--- 2024-03-12 20:21:48+00:00| seen| https://t.me/ctinow/206085 2024-04-18 16:45:00+00:00| seen| https://googleprojectzero.blogspot.com/2024/04/the-windows-registry-adventure-1.html 2024-12-19 18:03:00+00:00| seen|...

CVE-2024-26173

creationtimestamp| type| source ---|---|--- 2024-03-12 20:21:47+00:00| seen| https://t.me/ctinow/206084 2024-04-18 16:45:00+00:00| seen| https://googleprojectzero.blogspot.com/2024/04/the-windows-registry-adventure-1.html 2024-12-19 18:03:00+00:00| seen|...