CVE-2022-4294 Norton, Avira, Avast and AVG Antivirus for Windows Privilege Escalation

Norton, Avira, Avast and AVG Antivirus for Windows may be susceptible to a Privilege Escalation vulnerability, which is a type of issue whereby an attacker may attempt to compromise the software application to gain elevated access to resources that are normally protected from an application or us...

PT-2023-1230 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to a cryptographic information disclosure in Windows operating systems, allowing an attacker to disclose protected information. This could enable an attacker to gain...

PT-2023-1158 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to a cryptographic information disclosure in Windows operating systems, which could allow an attacker to reveal protected information. This may enable the attacker to...

PT-2023-1092 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to insufficient protection of service data in the Microsoft Cryptographic Services. It allows an attacker to elevate their privileges. Recommendations: At the moment,...

PT-2023-1162 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to insufficient protection of service data in the Windows Event Tracing service, which can allow an attacker to gain unauthorized access to protected information. This...

VulnCheck KEV: CVE-2023-21674

Microsoft Windows Advanced Local Procedure Call ALPC contains an unspecified vulnerability that allows for privilege escalation...

EUVD-2023-25841

Windows Advanced Local Procedure Call ALPC Elevation of Privilege Vulnerability...

PT-2023-1045 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to the implementation of the Layer 2 Tunneling Protocol L2TP in Microsoft Windows, specifically involving the use of memory after it has been freed. This can be exploit...

AVG Technologies AVG Antivirus 安全漏洞

AVG Technologies AVG Antivirus is a suite of antivirus software from the Czech company AVG Technologies. A security vulnerability exists in AVG Antivirus for Windows. An attacker exploiting this vulnerability could attempt to compromise a software application in order to gain elevated access...

Avira Security 代码问题漏洞

Avira Security is a software suite from the German company Avira. It includes antivirus protection, ransomware protection, and more. A security vulnerability exists in Avira Security for Windows that originates from the inclusion of an unreferenced service path, resulting in a denial of service...

ISC BIND DoS Vulnerability (CVE-2012-5689) - Windows

ISC BIND is prone to a denial of service DoS vulnerability. Copyright C 2023 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; y...

CVE-2022-34672

NVIDIA Control Panel for Windows contains a vulnerability where an unauthorized user or an unprivileged regular user can compromise the security of the software by gaining privileges, reading sensitive information, or executing commands...

CVE-2022-34672

NVIDIA Control Panel for Windows contains a vulnerability where an unauthorized user or an unprivileged regular user can compromise the security of the software by gaining privileges, reading sensitive information, or executing commands...

CVE-2022-34681

NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer nvlddmkm.sys handler, where improper input validation of a display-related data structure may lead to denial of service...

PT-2022-22285 · Nvidia · Nvidia Control Panel

Name of the Vulnerable Software and Affected Versions: NVIDIA Control Panel for Windows affected versions not specified Description: The issue allows an unauthorized user or an unprivileged regular user to compromise the security of the software by gaining privileges, reading sensitive informatio...

PT-2022-7675 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to a buffer overflow in the FASTFAT component of the Windows operating system. This could allow an attacker to read data from remote files on the operating system by...

CVE-2022-34478

The ms-msdt, search, and search-ms protocols deliver content to Microsoft applications, bypassing the browser, when a user accepts a prompt. These applications have had known vulnerabilities, exploited in the wild although we know of none exploited through Thunderbird, so in this release...

PT-2022-24508 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue concerns the encryption of operator credentials on Windows systems. In specific scenarios, the credentials may be encrypted in a manner that is not completely machine-dependent...

CVE-2022-4326

Improper preservation of permissions vulnerability in Trellix Endpoint Agent xAgent prior to V35.31.22 on Windows allows a local user with administrator privileges to bypass the product protection to uninstall the agent via incorrectly applied permissions in the removal protection functionality...

UBUNTU-CVE-2022-45141

Since the Windows Kerberos RC4-HMAC Elevation of Privilege Vulnerability was disclosed by Microsoft on Nov 8 2022 and per RFC8429 it is assumed that rc4-hmac is weak, Vulnerable Samba Active Directory DCs will issue rc4-hmac encrypted tickets despite the target server supporting better encryption...