The vulnerability of the Remote Desktop Licensing Service for Windows operating systems allows a perpetrator to execute arbitrary code.

The vulnerability of the Remote Desktop Licensing Service for Windows operating systems is related to errors in processing the relative path to the directory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code...

The vulnerability of the MoTw mechanism in Windows operating systems allows attackers to circumvent existing security restrictions.

The vulnerability of the MoTw mechanism in Windows operating systems is related to a breach of data protection mechanisms. Exploiting this vulnerability allows an attacker to circumvent existing security restrictions remotely...

The vulnerability of the Kernel Streaming Service driver for Windows operating systems allows attackers to increase their privileges.

The vulnerability of the Kernel Streaming Service driver for Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain increased privileges...

The vulnerability of the OLE DB driver for SQL Server on Windows operating systems arises from insecure management of privileges. This allows attackers to escalate their privileges.

The vulnerability of the OLE DB driver for SQL Server on Windows operating systems is related to insecure management of privileges. Exploiting this vulnerability can allow a malicious actor to increase their privileges remotely...

The vulnerability of the Remote Access Connection Manager in Windows operating systems allows a hacker to increase their privileges.

The vulnerability of the Remote Access Connection Manager in Windows operating systems is related to memory-walking attacks. Exploiting this vulnerability can allow a malicious actor to gain increased privileges remotely...

The vulnerability of the Tap-Windows6 software driver allows a hacker to execute arbitrary code.

The vulnerability of the Tap-Windows6 software’s OpenVPN driver in Windows operating systems is related to a numerical overflow issue. Exploiting this vulnerability allows an attacker to execute arbitrary code in the kernel space...

The vulnerability of Windows operating systems arises from improper external management of file names or file paths, allowing attackers to gain unauthorized access and modify the contents of compressed folders.

Vulnerabilities of Windows operating systems are related to incorrect external management of file names or file paths. Exploiting these vulnerabilities can allow an attacker, operating remotely, to gain unauthorized access and modify the contents of compressed folders...

PT-2024-25642

Name of the Vulnerable Software and Affected Versions Acronis Cyber Protect Cloud Agent Windows versions before build 38235 Description A local privilege escalation issue exists due to a DLL hijacking vulnerability. This can cause local privilege escalation. Recommendations For Acronis Cyber...

The vulnerability of the Remote Desktop Licensing Service for Windows operating systems allows for the execution of arbitrary code.

The vulnerability of the Remote Desktop Licensing Service for Windows operating systems is related to the use of an uninitialized resource. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

The vulnerability of the Mark of the Web mechanism in Windows operating systems allows attackers to circumvent existing security restrictions.

The vulnerability of the Mark of the Web mechanism in Windows operating systems is related to the breach of data protection mechanisms. Exploiting this vulnerability allows a remote attacker to circumvent existing security restrictions...

CVE-2024-5760

The Samsung Universal Print Driver for Windows is potentially vulnerable to escalation of privilege allowing the creation of a reverse shell in the tool. This is only applicable for products in the application released or manufactured before 2018...

Palo Alto Networks Cortex XDR 安全漏洞

Palo Alto Networks Cortex XDR is an extended detection and response platform that natively integrates network, endpoint, cloud, and third-party data from Palo Alto Networks, USA. A security vulnerability exists in Palo Alto Networks Cortex XDR that stems from an issue with the detection mechanism...

Vulnerabilities fixed in Microsoft Windows

Microsoft has fixed vulnerabilities in Windows. A malicious party can exploit the vulnerabilities to cause a denial-of-service, grant themselves elevated privileges, execute arbitrary code with the victim's privileges and potentially gain access to sensitive data. The most serious vulnerability h...

CVE-2024-43461

Windows MSHTML Platform Spoofing Vulnerability...

CVE-2024-38263

Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability...

CVE-2024-38248

Windows Storage Elevation of Privilege Vulnerability...

CVE-2024-38119

Windows Network Address Translation NAT Remote Code Execution Vulnerability...

CVE-2024-38253 Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability

...

PT-2024-6158

Name of the Vulnerable Software and Affected Versions Microsoft Windows versions prior to the fixed version Description The issue is related to a Windows MSHTML platform spoofing vulnerability, which allows attackers to execute arbitrary code remotely. This vulnerability has been exploited by the...

Microsoft Windows 安全漏洞

Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft USA. A security vulnerability exists in Microsoft Windows. An attacker exploiting this vulnerability could remotely execute code. The following products and editions are affected:Windows Server 2019,Windo...