4916 matches found
CVE-2023-35633
Windows Kernel Elevation of Privilege Vulnerability...
CVE-2020-12615
An issue was discovered in BeyondTrust Privilege Management for Windows through 5.6. When adding the Add Admin token to a process, and specifying that it runs at medium integrity with the user owning the process, this security token can be stolen and applied to arbitrary processes...
Microsoft Windows USB Mass Storage Class Driver Security Vulnerability
Microsoft Windows is a suite of operating systems used by Microsoft Corporation USA for personal devices. A security vulnerability exists in the Microsoft Windows USB Mass Storage Class Driver. An attacker could exploit the vulnerability to remotely execute code. The following products and editio...
Microsoft Windows DNS Security Vulnerability
Microsoft Windows DNS is a domain name resolution service from Microsoft. The Domain Name System DNS is one of the industry-standard suite of protocols that encompasses TCP/IP, and DNS clients and DNS servers work together to provide computers and users with name resolution services that map...
BeyondTrust Privilege Management Security Vulnerability
BeyondTrust Privilege Management is the BeyondTrust Privilege Management tool for Windows and Mac SaaS from BeyondTrust USA. A security vulnerability exists in BeyondTrust Privilege Management Windows versions prior to 5.7 SR1, which stems from the possibility of bypassing publisher application...
BeyondTrust Privilege Management Security Vulnerability
BeyondTrust Privilege Management is the BeyondTrust Privilege Management tool for Windows and Mac SaaS from BeyondTrust USA. A security vulnerability exists in BeyondTrust Privilege Management Windows versions prior to 5.6 SR2, which stems from a vulnerability that allows an attacker to bypass so...
PT-2023-7617 · Microsoft · Windows
Name of the Vulnerable Software and Affected Versions: Microsoft Windows affected versions not specified Description: The issue is related to insufficient access restrictions in the Local Security Authority Subsystem Service, which can be exploited to elevate privileges. This allows an attacker t...
BeyondTrust Privilege Management Security Vulnerability
BeyondTrust Privilege Management is the BeyondTrust Privilege Management tool for Windows and Mac SaaS from BeyondTrust USA. A security vulnerability exists in BeyondTrust Privilege Management Windows versions prior to 5.6 SR2, which stems from a vulnerability that could allow an attacker to...
BeyondTrust Privilege Management Security Vulnerability
BeyondTrust Privilege Management is the BeyondTrust Privilege Management tool for Windows and Mac SaaS from BeyondTrust USA. A security vulnerability exists in BeyondTrust Privilege Management Windows versions prior to 23.1 that originates from a vulnerability that allows an attacker to hijack a...
PT-2023-7616 · Microsoft · Windows
Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to insufficient input validation in the Internet Connection Sharing ICS function of the Windows operating system. This can be exploited by a remote attacker to execute...
BeyondTrust Privilege Management Security Vulnerability
BeyondTrust Privilege Management is the BeyondTrust Privilege Management tool for Windows and Mac SaaS from BeyondTrust USA. A security vulnerability exists in BeyondTrust Privilege Management Windows versions prior to 22.3, which stems from an attacker being able to spawn processes with multiple...
Google Chrome Security Vulnerability
Google Chrome is a web browser from Google, Inc. A security vulnerability exists in Google Chrome before 120.0.6099.62 Linux, Mac, before 120.0.6099.62/.63 Windows, which stems from a post-release reuse issue in Media Stream...
The vulnerability of the Fortinet FortiClient security tool for Windows lies in its use of pre-installed user accounts, which allows a hacker to circumvent security restrictions.
The vulnerability of the Fortinet FortiClient security device for Windows relates to the use of pre-installed user accounts. Exploiting this vulnerability could allow a hacker to circumvent security restrictions...
The vulnerability of the Remote Registry Service (regsvc) in Microsoft Windows operating systems allows a perpetrator to execute arbitrary code.
The vulnerability of the Remote Registry Service regsvc in Microsoft Windows operating systems with integer overflow. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the Local Security Authority (LSA) service on Microsoft Windows operating systems, which allows a perpetrator to disclose protected information
The vulnerability of the Local Security Authority LSA service on Microsoft Windows operating systems is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker to disclose protected information...
The vulnerability of the Remote Registry Service (regsvc) in Microsoft Windows operating systems allows a perpetrator to execute arbitrary code.
The vulnerability of the Remote Registry Service regsvc in Microsoft Windows operating systems is related to integer overflow. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
CVE-2023-20084
A vulnerability in the endpoint software of Cisco Secure Endpoint for Windows could allow an authenticated, local attacker to evade endpoint protection within a limited time window. This vulnerability is due to a timing issue that occurs between various software components. An attacker could...
Vulnerability of Windows operating systems, related to insufficient validation of input data, allows attackers to execute arbitrary code.
The vulnerability of Windows operating systems is related to insufficient checking of input data during the processing of archived folders. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
The vulnerability of the implementation of the HMAC (Hash-based Message Authentication Code) algorithm in Windows operating systems allows attackers to circumvent security restrictions and enhance their privileges.
The vulnerability of the HMAC Hash-based Message Authentication Code algorithm implementation in Windows operating systems is related to deficiencies in access control during key generation. Exploiting this vulnerability can allow attackers to circumvent security restrictions and enhance their...
