860 matches found
Windows Standards-Based Storage Management Service Denial of Service Vulnerability
Uncontrolled resource consumption in Windows Standards-Based Storage Management Service allows an unauthorized attacker to deny service over a network...
Windows Standards-Based Storage Management Service Denial of Service Vulnerability
Uncontrolled resource consumption in Windows Standards-Based Storage Management Service allows an unauthorized attacker to deny service over a network...
Windows Standards-Based Storage Management Service Denial of Service Vulnerability
Uncontrolled resource consumption in Windows Standards-Based Storage Management Service allows an unauthorized attacker to deny service over a network...
Windows Standards-Based Storage Management Service Denial of Service Vulnerability
Uncontrolled resource consumption in Windows Standards-Based Storage Management Service allows an unauthorized attacker to deny service over a network...
CVE-2025-1095: Unprotected Alternate Channel
IBM Personal Communications v14 and v15 include a Windows service that is vulnerable to local privilege escalation LPE. The vulnerability allows any interactively logged in users on the target computer to run commands with full privileges in the context of NT AUTHORITY\SYSTEM. This allows for a l...
CVE-2025-24051
Heap-based buffer overflow in Windows Routing and Remote Access Service RRAS allows an unauthorized attacker to execute code over a network...
CVE-2025-27816
A vulnerability was discovered in the Arctera InfoScale 7.0 through 8.0.2 where a .NET remoting endpoint can be exploited due to the insecure deserialization of potentially untrusted messages. The vulnerability is present in the Windows PluginHost service, which runs on all the servers where...
Schneider Electric EcoStruxure Process Expert 安全漏洞
Schneider Electric EcoStruxure Process Expert is a next-generation process automation system for designing, operating, and maintaining entire plants from Schneider Electric, France. A security vulnerability exists in Schneider Electric EcoStruxure Process Expert that stems from the inclusion of a...
The vulnerability of the SmartCardReader class in the Smart Cards for Windows service (formerly known as Smart Card Resource Manager) on Windows operating systems allows a malicious individual to disclose protected information.
The vulnerability of the SmartCardReader class in the Smart Cards for Windows service previously known as Smart Card Resource Manager in Windows operating systems is related to the use of an uninitialized resource. Exploiting this vulnerability could allow an attacker to disclose sensitive...
CVE-2025-21224 Windows Line Printer Daemon (LPD) Service Remote Code Execution Vulnerability
...
CVE-2025-21330 Windows Remote Desktop Services Denial of Service Vulnerability
...
Windows CSC Service Information Disclosure Vulnerability
...
Windows Geolocation Service Information Disclosure Vulnerability
...
Windows CSC Service Elevation of Privilege Vulnerability
...
PT-2025-1045
Name of the Vulnerable Software and Affected Versions Windows PrintWorkflowUserSvc affected versions not specified Description The issue is related to an elevation-of-privilege vulnerability in the Windows PrintWorkflowUserSvc service. This vulnerability is caused by insufficient input validation...
PT-2025-1247 · Microsoft · Windows Csc Service +1
Name of the Vulnerable Software and Affected Versions: Windows CSC Service affected versions not specified Description: The issue is related to a buffer overflow in dynamic memory, which can allow an attacker to elevate their privileges. This can affect the system, potentially leading to...
Systeminformation has command injection vulnerability in getWindowsIEEE8021x (SSID)
Summary The SSID is not sanitized when before it is passed as a parameter to cmd.exe in the getWindowsIEEE8021x function. This means that malicious content in the SSID can be executed as OS commands. Details I have exploited this vulnerability in a Windows service using version 5.22.11 of the...
The vulnerability of the PrintWorkflowUserSvc service in Microsoft Windows operating systems allows a hacker to increase their privileges.
The vulnerability of the PrintWorkflowUserSvc service in Microsoft Windows operating systems is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...