Microsoft Windows 竞争条件问题漏洞

Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft Corporation USA. A competitive conditions issue vulnerability exists in Microsoft Windows Advanced Local Procedure Call. The following products and versions are affected:Windows 10 Version 1607 for...

The vulnerability of the System Control Interface and AsusSwitch drivers for Windows operating systems allows attackers to enhance their privileges.

The vulnerability of the System Control Interface and AsusSwitch drivers for Windows operating systems is related to incorrect default permissions. Exploiting this vulnerability can allow an attacker to increase their privileges within the system...

The vulnerability of the kernel-level driver nvlddmkm.sys from NVIDIA’s graphics processing units, including GeForce, Quadro, NVS, and Tesla, for Windows operating systems, allows attackers to cause system failures or gain unauthorized access to protected information.

The vulnerability of the kernel mode driver nvlddmkm.sys of NVIDIA’s graphics processing unit software products such as GeForce, Quadro, NVS, and Tesla for Windows operating systems is related to reading data beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to caus...

The vulnerability of the kernel-level driver nvlddmkm.sys from NVIDIA’s graphics processing unit software products such as GeForce, Quadro, NVS, and Tesla for Windows operating systems allows a malicious actor to cause system failures, gain unauthorized access to protected information, or enhance their privileges.

The vulnerability of the kernel-level driver nvlddmkm.sys from NVIDIA’s graphics processing units, including GeForce, Quadro, NVS, and Tesla, for Windows operating systems is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability can allow attackers to cause syst...

CVE-2022-37986

Windows Win32k Elevation of Privilege Vulnerability...

Microsoft Windows 安全漏洞

Microsoft Windows is a set of operating systems for personal devices from Microsoft Corporation USA...

Microsoft Windows Group Policy Preference Client 安全漏洞

Microsoft Windows is a set of operating systems for personal devices used by the U.S. Microsoft Windows Group Policy Preference Client has an elevation of privilege vulnerability, for which no details are available...

Microsoft Windows Group Policy Preference Client 安全漏洞

Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft Corporation USA. A security vulnerability exists in the Microsoft Windows Group Policy Preference Client. The following products and editions are affected:Windows 10 Version 21H2 for 32-bit Systems,Window...

Microsoft Windows ALPC 竞争条件问题漏洞

Microsoft Windows ALPC is a process-to-process communication tool for high-speed messaging from Microsoft, Inc. An elevation of privilege vulnerability exists in Microsoft Windows ALPC, which stems from improper privilege assignment in the application and can be exploited by an attacker to cause ...

Microsoft Windows Point-to-Point Tunneling Protocol 竞争条件问题漏洞

Microsoft Windows Point-to-Point Tunneling Protocol PPTP is a network protocol from Microsoft Corporation that allows secure transmission of data from a remote client to a private enterprise server by creating a virtual private network VPN over a TCP/IP-based data network. A remote code execution...

Microsoft Windows Active Directory Certificate Services 安全漏洞

Microsoft Windows Active Directory is a centralized directory management service from Microsoft Corporation USA that is responsible for architecting large network environments. Microsoft Windows Active Directory is vulnerable to a certificate service security feature bypass. No details of the...

Microsoft Windows NTLM 安全漏洞

Microsoft Windows is a set of operating systems for personal devices from the U.S. Microsoft Windows NTLM has a spoofing vulnerability that could be exploited by an attacker to compromise the confidentiality of the system...

Microsoft Graphics Component 安全漏洞

Microsoft Graphics Component is a graphics driver component from Microsoft Corporation USA. A security vulnerability exists in Microsoft Graphics Component. The following products and versions are affected: Windows 7 for x64-based Systems Service Pack 1,Windows 8.1 for 32-bit systems,Windows 8.1...

The vulnerability in the implementation of the Internet Key Exchange (IKE) protocol in the Microsoft Windows operating system allows a hacker to induce a service failure.

The vulnerability of the Internet Key Exchange IKE protocol implementation in Microsoft Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures by sending specially crafted IKEv1 packets...

The vulnerability of Microsoft Edge browser on Windows operating systems, related to synchronization errors when using a shared resource, allows attackers to perform spear-phishing attacks.

The vulnerability of Microsoft Edge browser on Windows operating systems is related to synchronization errors when using a shared resource. Exploiting this vulnerability allows a remote attacker to perform spear-phishing attacks...

The vulnerability of Mozilla Firefox and Mozilla Firefox ESR browsers for Windows, related to the lack of measures taken to clean data at the operating level, allows attackers to execute arbitrary commands.

The vulnerability of Mozilla Firefox and Mozilla Firefox ESR browsers for Windows is related to the lack of measures taken to clean data at the operating level. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands remotely...

CVE-2022-34718

Windows TCP/IP Remote Code Execution Vulnerability...

PT-2022-5733 · Microsoft · Directx Graphics Kernel +1

Name of the Vulnerable Software and Affected Versions: DirectX Graphics Kernel affected versions not specified Description: The issue is related to unsafe privilege management in the DirectX Graphics Kernel driver of Microsoft Windows operating systems. This can allow an attacker to execute...

Microsoft ODBC Driver 安全漏洞

Microsoft ODBC Driver is a driver from Microsoft. It allows applications to access data in a database management system DBMS using SQL as the standard for accessing data. A security vulnerability exists in the Microsoft Windows ODBC Driver. The following products and versions are affected:Windows...

PT-2022-5745 · Microsoft · Windows +1

Name of the Vulnerable Software and Affected Versions: Microsoft WDAC OLE DB provider for SQL Server affected versions not specified Description: The issue exists due to insufficient input validation in the OLE DB driver for SQL Server on the Windows operating system. This allows a remote attacke...