Microsoft OneDrive Elevation of Privilege Vulnerability (Apr 2020)

This host is missing an important security update according to Microsoft Security Update for month of April. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

The vulnerability of the Windows Desktop Bridge component of the Windows operating system allows attackers to escalate their privileges.

The vulnerability of the Windows Desktop Bridge component of the operating system is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

CVE-2021-42954

Zoho Remote Access Plus Server Windows Desktop Binary fixed from 10.1.2121.1 is affected by incorrect access control. The installation directory is vulnerable to weak file permissions by allowing full control for Windows Everyone user group non-admin or any guest users, thereby allowing privilege...

CVE-2021-42955

Zoho Remote Access Plus Server Windows Desktop binary fixed in version 10.1.2132 is affected by an unauthorized password reset vulnerability. Because of the designed password reset mechanism, any non-admin Windows user can reset the password of the Remote Access Plus Server Admin account...

CVE-2021-42956

Zoho Remote Access Plus Server Windows Desktop Binary fixed in 10.1.2132.6 is affected by a sensitive information disclosure vulnerability. Due to improper privilege management, the process launches as the logged in user, so memory dump can be done by non-admin also. Remotely, an attacker can dum...

Information disclosure

Zoho Remote Access Plus Server Windows Desktop Binary fixed in 10.1.2132.6 is affected by a sensitive information disclosure vulnerability. Due to improper privilege management, the process launches as the logged in user, so memory dump can be done by non-admin also. Remotely, an attacker can dum...

CVE-2021-42954

Zoho Remote Access Plus Server Windows Desktop Binary fixed from 10.1.2121.1 is affected by incorrect access control. The installation directory is vulnerable to weak file permissions by allowing full control for Windows Everyone user group non-admin or any guest users, thereby allowing privilege...

CVE-2021-42956

Zoho Remote Access Plus Server Windows Desktop Binary fixed in 10.1.2132.6 is affected by a sensitive information disclosure vulnerability. Due to improper privilege management, the process launches as the logged in user, so memory dump can be done by non-admin also. Remotely, an attacker can dum...

Privilege escalation

Windows Desktop Bridge Elevation of Privilege Vulnerability...

CVE-2021-36957 Windows Desktop Bridge Elevation of Privilege Vulnerability

...

PT-2021-5044 · Microsoft · Windows Desktop Bridge +1

Name of the Vulnerable Software and Affected Versions: Windows Desktop Bridge affected versions not specified Description: The issue is related to insufficient access restrictions in the Windows Desktop Bridge component of the Windows operating system. It allows an attacker to elevate their...

Microsoft Windows Desktop Bridge 权限许可和访问控制问题漏洞

Microsoft Windows Desktop Bridge is an application from Microsoft Corporation USA. It provides a bridge between desktop applications and the common Windows platform. A vulnerability exists in Microsoft Windows Desktop Bridge with privilege permission and access control issues. The following...

CVE-2021-41334

Windows Desktop Bridge Elevation of Privilege Vulnerability...

CVE-2021-41334

Windows Desktop Bridge Elevation of Privilege Vulnerability...

CVE-2021-41334

Windows Desktop Bridge Elevation of Privilege Vulnerability...

Privilege escalation

Windows Desktop Bridge Elevation of Privilege Vulnerability...

PT-2021-4423 · Microsoft · Windows Desktop Bridge +1

Name of the Vulnerable Software and Affected Versions: Windows Desktop Bridge affected versions not specified Description: The issue is related to insufficient access restrictions in the Windows Desktop Bridge application converter, allowing an attacker to potentially elevate their privileges. Th...

CVE-2021-33759

Windows Desktop Bridge Elevation of Privilege Vulnerability...

CVE-2021-33759

Windows Desktop Bridge Elevation of Privilege Vulnerability...

Privilege escalation

Windows Desktop Bridge Elevation of Privilege Vulnerability...