PT-2023-2624 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Microsoft Windows versions prior to May 2023 Patch Tuesday Description: An elevation-of-privilege vulnerability exists in the Win32k component of Microsoft Windows. Exploitation of this vulnerability may allow an attacker to gain SYSTEM...

Microsoft Windows PGM 安全漏洞

Microsoft Windows is a suite of operating systems for use on personal devices from the U.S.-based Microsoft Corporation Microsoft. A security vulnerability exists in Microsoft Windows PGM. The following products and editions are affected:Windows 10 Version 1809 for 32-bit Systems,Windows 10 Versi...

Microsoft Windows Secure Boot 安全漏洞

Microsoft Windows Secure Boot is a secure boot from Microsoft Corporation USA. Microsoft Windows Secure Boot has a security vulnerability. The following products and editions are affected:Windows 10 Version 1809 for 32-bit Systems,Windows 10 Version 1809 for x64-based Systems,Windows 10 Version...

The vulnerability of antivirus protection tools such as Avast Antivirus, AVG Antivirus, and Avira Security for Windows operating systems allows a hacker to execute arbitrary files.

The vulnerability of antivirus protection tools such as Avast Antivirus, AVG Antivirus, and Avira Security for Windows operating systems is related to synchronization errors when using a common resource. Exploiting this vulnerability can allow an attacker to execute arbitrary files...

The vulnerability of the Universal Print Server software for virtualizing and delivering Citrix Virtual Apps and Desktops (formerly XenApp and XenDesktop) on Windows operating systems allows a malicious individual to escalate their privileges and execute arbitrary commands.

The vulnerability of the Universal Print Server software, which is used for virtualizing and delivering Citrix Virtual Apps and Desktops formerly XenApp and XenDesktop applications to Windows operating systems, is related to deficiencies in access control. Exploiting this vulnerability allows an...

CVE-2022-48482

3CX before 18 Update 2 Security Hotfix build 18.0.2.315 on Windows allows unauthenticated remote attackers to read certain files via /Electron/download directory traversal. Files may have credentials, full backups, call recordings, and chat logs...

The vulnerability of the Win32k.sys component of the Windows operating system, which allows a hacker to increase their privileges

The vulnerability of the Win32k.sys component of the Windows operating system is related to synchronization errors when using shared resources “Race Conditions”. Exploiting this vulnerability can allow an attacker to increase their privileges...

PT-2023-18921 · 42Gears · 42Gears Surelock

Name of the Vulnerable Software and Affected Versions: 42gears surelock windows versions 2.3.12 through 2.40.0 Description: The issue allows retrieval of admin user credentials due to plaintext passwords being stored in the registry. This is related to the surelockwinsetupv2.40.0.Exe on Windows,...

42Gears Surelock 安全漏洞

42Gears Surelock is an industry-leading tool from 42Gears USA that locks devices into kiosk mode. A security vulnerability exists in 42Gears Surelock Windows versions 2.3.12 through 2.40.0, which stems from a plaintext password in the registry that allows the retrieval of administrator user...

The vulnerability of the Remote Procedure Call component in Windows operating systems allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Remote Procedure Call component in Windows operating systems exists due to insufficient checking of input data. Exploiting this vulnerability can allow an attacker, working remotely, to gain unauthorized access to protected information...

CVE-2022-34292

Docker Desktop for Windows before 4.6.0 allows attackers to overwrite any file through a symlink attack on the hyperv/create dockerBackendV2 API by controlling the DataFolder parameter for DockerDesktop.vhdx, a similar issue to CVE-2022-31647...

CVE-2022-31647

Docker Desktop before 4.6.0 on Windows allows attackers to delete any file through the hyperv/destroy dockerBackendV2 API via a symlink in the DataFolder parameter, a different vulnerability than CVE-2022-26659...

Vulnerability of Windows operating systems, related to errors in information representation by the user interface, allows attackers to perform spear-phishing attacks

The vulnerability of Windows operating systems is related to errors in information representation by the user interface. Exploiting this vulnerability allows attackers to perform spear-phishing attacks using a specially created malicious HTA file...

The vulnerability in the implementation of the Secure Socket Tunneling Protocol (SSTP) on Windows operating systems allows a hacker to induce a service failure.

The vulnerability of the Secure Socket Tunneling Protocol SSTP implementation in Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures...

The vulnerability of the Remote Procedure Call component in Microsoft Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the Remote Procedure Call component in Microsoft Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

PT-2023-6812 · Nvidia · Nvidia Gpu Display Driver

Name of the Vulnerable Software and Affected Versions: NVIDIA GPU Display Driver for Windows affected versions not specified Description: The issue allows an attacker to write arbitrary data to privileged locations by using reparse points. A successful exploit may lead to code execution, denial o...

The vulnerability of the Kerberos protocol for Windows operating systems allows a perpetrator to carry out a “man-in-the-middle” attack and increase their privileges.

The vulnerability of the Kerberos protocol for Windows operating systems is related to the insecure use of the RC4 encryption algorithm with a MD4 hash function. Exploiting this vulnerability could allow an attacker to carry out a “man-in-the-middle” attack and increase their privileges...

The vulnerability of the PostScript Printer Driver (Pscript) and PCL6 Class Printer drivers for Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the PostScript Printer Driver PScript and PCL6 Class Printer operating systems for Windows is related to insufficient validation of input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

CVE-2023-28122

A local privilege escalation LPE vulnerability in UI Desktop for Windows Version 0.59.1.71 and earlier allows a malicious actor with local access to a Windows device running said application to submit arbitrary commands as SYSTEM.This vulnerability is fixed in Version 0.62.3 and later...

The vulnerability of remote desktop protocol (RDP) clients for Windows operating systems allows attackers to gain unauthorized access to protected information.

The vulnerability of remote desktop protocol RDP clients for Windows operating systems relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...