HPESBNW04527 rev.2 - Multiple Vulnerabilities in HPE Aruba Networking Virtual Intranet Access (VIA) Windows Client

Potential Security Impact: Local: Creation and Deletion of Arbitrary Files, Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. Aruba Virtual Intranet Access VIA Windows Client Only - All versions 4.5 and lower CVSS Scores: | CVE | CVSS Vector | Base Score | |...

CVE-2023-39211

Improper privilege management in Zoom Desktop Client for Windows and Zoom Rooms for Windows before 5.15.5 may allow an authenticated user to enable an information disclosure via local access...

CVE-2023-36541

Insufficient verification of data authenticity in Zoom Desktop Client for Windows before 5.14.5 may allow an authenticated user to enable an escalation of privilege via network access...

PT-2023-4701 · Zoom · Zoom Desktop Client For Windows +1

Name of the Vulnerable Software and Affected Versions: Zoom Desktop Client for Windows versions prior to 5.15.5 Zoom Rooms for Windows versions prior to 5.15.5 Description: The issue is related to improper privilege management, which may allow an authenticated user to enable information disclosur...

PT-2023-4962 · Zoom · Zoom Desktop Client For Windows

Name of the Vulnerable Software and Affected Versions: Zoom Desktop Client for Windows versions prior to 5.14.7 Description: The issue is related to insufficient input validation, which can be exploited by a remote attacker to gain elevated privileges. This can potentially allow an unauthenticate...

PT-2023-21198 · Cloudflare · Cloudflare Warp Client For Windows

Name of the Vulnerable Software and Affected Versions: Cloudflare WARP client for Windows affected versions not specified Description: The Cloudflare WARP client for Windows assigns loopback IPv4 addresses for the DNS Servers, as it acts as a local DNS server that performs DNS queries in a secure...

CVE-2023-32232

An issue was discovered in Vasion PrinterLogic Client for Windows before 25.0.0.836. During client installation and repair, a PrinterLogic binary is called by the installer to configure the device. This window is not hidden, and is running with elevated privileges. A standard user can break out o...

CVE-2023-32232

An issue was discovered in Vasion PrinterLogic Client for Windows before 25.0.0.836. During client installation and repair, a PrinterLogic binary is called by the installer to configure the device. This window is not hidden, and is running with elevated privileges. A standard user can break out o...

PT-2023-23675 · Vasion · Vasion Printerlogic Client

Name of the Vulnerable Software and Affected Versions: Vasion PrinterLogic Client for Windows versions prior to 25.0.0.818 Description: An issue was discovered in the Vasion PrinterLogic Client for Windows. During installation, binaries are executed out of a subfolder in C:WindowsTemp. A standard...

Vasion PrinterLogic Client 安全漏洞

Vasion PrinterLogic Client is a print management solution from Vasion. A security vulnerability exists in Vasion PrinterLogic Client Windows versions prior to 25.0.0.836 that originates during client installation and repair, where the installer calls the PrinterLogic binary to configure the devic...

CVE-2023-24491

A vulnerability has been discovered in the Citrix Secure Access client for Windows which, if exploited, could allow an attacker with access to an endpoint with Standard User Account that has the vulnerable client installed to escalate their local privileges to that of NT AUTHORITY\SYSTEM...

Microsoft Windows Kernel 安全漏洞

Microsoft Windows Kernel is the kernel of the Windows operating system by Microsoft Corporation USA. A security vulnerability exists in Microsoft Windows Kernel. An attacker can exploit the vulnerability to elevate privileges. The following products and versions are affected:Windows Server...

Microsoft Windows Routing and Remote Access Service (RRAS) 安全漏洞

Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft Corporation USA. A security vulnerability exists in Microsoft Windows Routing and Remote Access Service RRAS. An attacker exploiting this vulnerability could remotely execute code. The following products...

Microsoft Windows Online Certificate Status Protocol (OCSP) SnapIn 安全漏洞

Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft Corporation USA. A security vulnerability exists in Microsoft Windows Online Certificate Status Protocol OCSP SnapIn. An attacker could exploit the vulnerability to remotely execute code. The following...

Microsoft Windows Routing and Remote Access Service (RRAS) 安全漏洞

Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft Corporation USA. A security vulnerability exists in Microsoft Windows Routing and Remote Access Service RRAS. An attacker exploiting this vulnerability could remotely execute code. The following products...

PT-2023-3995 · Citrix · Citrix Secure Access Client For Windows

Name of the Vulnerable Software and Affected Versions: Citrix Secure Access client for Windows affected versions not specified Description: A vulnerability has been discovered in the Citrix Secure Access client for Windows, which, if exploited, could allow an attacker with access to an endpoint...

Microsoft Windows Partition Management Driver 安全漏洞

Microsoft Windows Partition Management Driver is a partition management driver from Microsoft Corporation USA. A security vulnerability exists in Microsoft Windows Partition Management Driver. An attacker could exploit the vulnerability to elevate privileges. The following products and editions a...

Microsoft Windows Kernel 竞争条件问题漏洞

Microsoft Windows Kernel is the kernel of the Windows operating system by Microsoft Corporation USA. A security vulnerability exists in Microsoft Windows Kernel. An attacker can exploit the vulnerability to elevate privileges. The following products and versions are affected:Windows 10 Version 16...

CVE-2023-1862

Cloudflare WARP client for Windows up to v2023.3.381.0 allowed a malicious actor to remotely access the warp-svc.exe binary due to an insufficient access control policy on an IPC Named Pipe. This would have enabled an attacker to trigger WARP connect and disconnect commands, as well as obtaining...

PT-2023-3411 · Cloudflare · Cloudflare Warp Client For Windows

Name of the Vulnerable Software and Affected Versions: Cloudflare WARP client for Windows versions up to 2023.3.381.0 Description: The issue is related to insufficient access control policy on an IPC Named Pipe, allowing a malicious actor to remotely access the warp-svc.exe binary. This could...