Microsoft Office Remote Code Execution Vulnerability (CNVD-2023-18287)

Microsoft Office is a suite of office software based on the Windows operating system developed by Microsoft. A remote code execution vulnerability exists in Microsoft Office. An attacker could exploit this vulnerability to execute code on the target host...

The vulnerability of the print spooler daemon on Microsoft Windows operating systems allows attackers to escalate their privileges.

The vulnerability of the Windows Print Spooler in Microsoft Windows operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability of the Windows SMB Witness service in Microsoft Windows operating systems allows a perpetrator to increase their privileges.

The vulnerability of the Windows SMB Witness service in Microsoft Windows operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...

CVE-2023-21757

Windows Layer 2 Tunneling Protocol L2TP Denial of Service Vulnerability...

CVE-2023-21679

Windows Layer 2 Tunneling Protocol L2TP Remote Code Execution Vulnerability...

CVE-2023-21556

Windows Layer 2 Tunneling Protocol L2TP Remote Code Execution Vulnerability...

PT-2023-1091 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to insufficient access control in the Windows operating system kernel, which can be exploited to bypass security restrictions and elevate privileges. This allows...

Microsoft Windows 安全漏洞

Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft Corporation USA. A security vulnerability exists in the Microsoft Windows Layer 2 Tunneling Protocol. An attacker could exploit this vulnerability to cause a denial of service on the system...

PT-2023-1089 · Microsoft · Windows +1

Name of the Vulnerable Software and Affected Versions: Microsoft Message Queuing MSMQ affected versions not specified Description: The issue is related to insufficient access restrictions in Microsoft Message Queuing MSMQ in Microsoft Windows operating systems. Exploitation of this issue may allo...

PT-2023-1228 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to a synchronization error, specifically a "race condition," in the Overlay Filter component of Windows operating systems. This can allow an attacker to gain unauthoriz...

PT-2023-1229 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to insufficient access control in the Win32k component of the Windows operating system, which can be exploited to elevate privileges. This could allow an attacker to...

Microsoft Windows Installer 安全漏洞

Microsoft Windows Installer is a component of the Windows operating system from Microsoft. It provides a standard basis for installing and uninstalling software. A security vulnerability exists in Microsoft Windows Installer. An attacker could exploit the vulnerability to elevate privileges...

PT-2023-1093 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to a cryptographic information disclosure in Windows operating systems, which could allow an attacker to disclose protected information. This may enable the attacker to...

Microsoft Windows 安全漏洞

Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft Corporation USA. A security vulnerability exists in the Microsoft Windows Layer 2 Tunneling Protocol. An attacker could exploit the vulnerability to remotely execute code...

PT-2023-1134 · Microsoft · Cryptographic Services +1

Name of the Vulnerable Software and Affected Versions: Microsoft Cryptographic Services affected versions not specified Description: The issue is related to insufficient access restrictions in the Microsoft Cryptographic Services for Windows operating systems. It allows an attacker to potentially...

CVE-2022-34683

NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer nvlddmkm.sys handler for DxgkDdiEscape, where a null-pointer dereference occurs, which may lead to denial of service...

CVE-2022-22746

A race condition could have allowed bypassing the fullscreen notification which could have lead to a fullscreen window spoof being unnoticed.This bug only affects Firefox for Windows. Other operating systems are unaffected.. This vulnerability affects Firefox ESR 91.5, Firefox 96, and Thunderbird...

Microsoft Office Visio Remote Code Execution Vulnerability (CNVD-2022-89424)

Microsoft Office is a suite of office software developed by Microsoft Corporation based on the Windows operating system. Microsoft Office Visio is vulnerable to remote code execution. An attacker could exploit the vulnerability to execute code on the target host...

The vulnerability of the compatibility subsystem’s kernel allows for the execution of Linux applications on Windows operating systems through the Windows Subsystem for Linux (WSL2). This enables attackers to gain increased privileges.

The vulnerability of the compatibility subsystem’s kernel for running Linux applications, as provided by Windows Subsystem for Linux WSL2 on Windows operating systems, is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability of the Windows Graphics component in Windows operating systems allows attackers to exploit their privileges.

The vulnerability of the Windows Graphics component in Windows operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...