Iobit IOBit Advanced SystemCare 访问控制错误漏洞

Advanced SystemCare Ultimate is a Windows optimization suite from Iobit that analyzes system performance bottlenecks. advanced SystemCare Ultimate version 14.2.0.220 contains an elevation of privilege vulnerability. An attacker can exploit the vulnerability by sending a malicious I/O request pack...

Microsoft Windows 安全漏洞

Microsoft Windows is an operating system for personal devices from Microsoft Corporation USA. Microsoft Windows is vulnerable to an access control error, which stems from an elevation of privilege vulnerability because the system has an overly loose access control list for multiple system files. ...

Vulnerability found in Microsoft Windows

There is a vulnerability in the Printer Spooler service from Microsoft. The vulnerability allows an authenticated malicious person able to execute arbitrary code and obtain elevated privileges. obtain. By exploiting the vulnerability, it is possible to take over a Domain Controller. Earlier this...

CVE-2021-35448

Emote Interactive Remote Mouse 3.008 on Windows allows attackers to execute arbitrary programs as Administrator by using the Image Transfer Folder feature to navigate to cmd.exe. It binds to local ports to listen for incoming connections...

Out-of-bounds

A locally-installed hostile program could send WMCOPYDATA messages that Firefox would process incorrectly, leading to an out-of-bounds read. This bug only affects Firefox on Windows. Other operating systems are unaffected.. This vulnerability affects Thunderbird 78.11, Firefox 89, and Firefox ESR...

The vulnerability of the dynamically linked script handler library (jscript9.dll) in Microsoft Windows operating systems allows a perpetrator to execute arbitrary code.

The vulnerability of the dynamically linked script handler library jscript9.dll in Microsoft Windows operating systems is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

Cisco AnyConnect Secure Mobility Client for Windows Denial of Service Vulnerability (CNVD-2021-45151)

The Cisco AnyConnect Secure Mobility Client is a virtual private network VPN client for a variety of operating systems and hardware configurations. A denial of service vulnerability exists in Cisco AnyConnect Secure Mobility Client for Windows versions prior to 4.10.01075. The vulnerability stems...

Vulnerabilities fixed in Cisco Jabber for Windows

Vulnerabilities have been fixed in Cisco Jabber for Windows. A malicious party could exploit the vulnerabilities to obtain sensitive information or to cause a denial-of-service to the recipient of a specially prepared XMPP message. Cisco has released updates to fix the vulnerabilities. For more...

CVE-2021-34551

PHPMailer before 6.5.0 on Windows allows remote code execution if langpath is untrusted data and has a UNC pathname...

PT-2021-3319 · Cisco · Cisco Anyconnect Secure Mobility Client For Windows

Name of the Vulnerable Software and Affected Versions: Cisco AnyConnect Secure Mobility Client for Windows affected versions not specified Description: A vulnerability in the DLL loading mechanism could allow an authenticated, local attacker to perform a DLL hijacking attack on an affected device...

Cisco AnyConnect Secure Mobility Client 安全漏洞

The Cisco AnyConnect Secure Mobility Client is a virtual private network VPN client for a variety of operating systems and hardware configurations. A denial of service vulnerability exists in Cisco AnyConnect Secure Mobility Client for Windows versions prior to 4.10.01075. The vulnerability stems...

PT-2021-4650 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Microsoft Windows affected versions not specified Description: The issue is related to an integer overflow in the storport.sys driver component, which provides functionality for Storage Spaces in Microsoft Windows operating systems. This can ...

The vulnerability of the Group Policy Services in the Windows operating system allows a perpetrator to increase their privileges.

The vulnerability of the Windows Group Policy Services relates to privilege management errors. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerability in the implementation of the network authentication protocol NT LAN Manager (NTLM) on Windows operating systems allows a perpetrator to increase their privileges.

The vulnerability of the Windows operating system’s Network Authentication Protocol NTLM implementation is related to privilege management errors. Exploiting this vulnerability can allow a malicious actor to elevate their privileges remotely...

AMD Graphics Driver 输入验证错误漏洞

AMD Graphics Driver is an integrated graphics driver from AMD. AMD Graphics Driver suffers from a security vulnerability that stems from an insufficient pointer validation vulnerability in the AMD Graphics Driver for Windows 10, which could lead to privilege escalation or denial of service...

CVE-2021-33742 Windows MSHTML Platform Remote Code Execution Vulnerability

...

PT-2021-3461

Name of the Vulnerable Software and Affected Versions Microsoft Windows versions affected versions not specified Description This issue concerns a remote code execution flaw in the Windows Print Spooler service, also known as PrintNightmare. The vulnerability allows remote attackers to execute...

Design/Logic Flaw

A vulnerability in Cisco Webex Meetings Desktop App for Windows, Cisco Webex Meetings Server, Cisco Webex Network Recording Player for Windows, and Cisco Webex Teams for Windows could allow an authenticated, local attacker to perform a DLL injection attack on an affected device. To exploit this...

OpenText Brava! 安全漏洞

OpenText Brava! Desktop is a Windows-based viewing and collaboration tool that lets you easily view and collaborate on almost any file. An untrusted pointer dereference vulnerability exists in the parsing of DWF files in OpenText Brava! Desktop. The vulnerability stems from failure to properly...

OpenText Brava! 缓冲区错误漏洞

OpenText Brava! Desktop is a Windows-based viewing and collaboration tool that lets you easily view and collaborate on almost any file. An out-of-bounds write vulnerability exists in the parsing of DWF files in OpenText Brava! Desktop. The vulnerability stems from a lack of proper validation of...