2585 matches found
CVE-2021-0166
Exposure of Sensitive Information to an Unauthorized Actor in firmware for some IntelR PROSet/Wireless Wi-Fi in multiple operating systems and some KillerTM Wi-Fi in Windows 10 and 11 may allow a privileged user to potentially enable escalation of privilege via local access...
CVE-2021-0066
Improper input validation in firmware for IntelR PROSet/Wireless Wi-Fi in multiple operating systems and KillerTM Wi-Fi in Windows 10 and 11 may allow an unauthenticated user to potentially enable escalation of privilege via local access...
CVE-2022-21994
Windows DWM Core Library Elevation of Privilege Vulnerability...
CVE-2022-21984
Windows DNS Server Remote Code Execution Vulnerability...
CVE-2022-21971
Windows Runtime Remote Code Execution Vulnerability Recent assessments: Assessed Attacker Value: 0 Assessed Attacker Value: 0Assessed Attacker Value: 0...
The vulnerability of the Windows IKE extension of the Windows operating system, which allows a hacker to trigger a service failure.
The vulnerability of the Windows IKE extension in the Windows operating system is related to improper cleaning or release of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...
The driver’s vulnerability related to the functionality of Storage Spaces controllers in Windows operating systems allows attackers to exploit it to increase their privileges. This vulnerability stems from errors in memory object handling.
The vulnerability of the driver for enabling Storage Spaces on Windows operating systems is related to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...
The vulnerability of the MSHTML platform in Microsoft Windows operating systems, related to improper code generation, allows a hacker to execute arbitrary code.
The vulnerability of the MSHTML platform in Microsoft Windows operating systems is related to improper code generation management. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially created file...
The vulnerability of the Windows IKE extension of the Windows operating system, which allows a hacker to trigger a service failure.
The vulnerability of the Windows IKE extension in the Windows operating system is related to improper cleaning or release of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...
The vulnerability of the Windows operating system’s DNS server, related to errors in handling DNS requests, allows a hacker to cause a service failure.
The vulnerability of the Windows operating system’s DNS server is related to errors in handling DNS requests. Exploiting this vulnerability can allow a malicious actor to cause service interruptions through a specially crafted DNS request...
PT-2022-2787 · Microsoft · Endpoint Configuration Manager +1
Name of the Vulnerable Software and Affected Versions: Microsoft Endpoint Configuration Manager affected versions not specified Description: The issue is related to insufficient access control in the Microsoft Endpoint Configuration Manager, part of the Microsoft Windows operating system. This ca...
PT-2022-2928 · Microsoft · Windows
Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to insufficient access control in the Win32k component of the Microsoft Windows operating system. This can be exploited to elevate privileges. There is no information...
The vulnerability of the web page rendering modules in WebKitGTK and WPE for Apple operating systems such as iPadOS, watchOS, iOS, tvOS, as well as in browsers like Safari, multimedia player iTunes, and iCloud service for Windows operating systems, allows attackers to execute cross-site scripting attacks.
The vulnerability of the web page rendering modules in WebKitGTK and WPE for Apple operating systems such as iPadOS, watchOS, iOS, tvOS, the Safari browser, the multimedia player iTunes, and the iCloud service for Windows operating systems is related to the lack of measures taken to protect the...
The vulnerability of the web page rendering modules in WebKitGTK and WPE for Apple operating systems such as iPadOS, watchOS, iOS, tvOS, as well as in browsers like Safari, multimedia player iTunes, and iCloud service for Windows operating systems, allows a perpetrator to execute arbitrary code on the target system.
The vulnerability of the web page rendering modules in WebKitGTK and WPE for Apple’s iPadOS, watchOS, iOS, tvOS, Safari browser, multimedia player iTunes, and iCloud service for Windows operating systems is related to writing beyond the buffer limit in memory. Exploiting this vulnerability could...
The vulnerability of Adobe Audition for Windows and macOS, related to reading data beyond the buffer in memory, allows attackers to escalate their privileges and gain unauthorized access to protected information.
The vulnerability of Adobe Audition for Windows and macOS relates to reading data beyond the buffer limit in memory. Exploiting this vulnerability can allow a malicious actor to enhance their privileges and gain unauthorized access to protected information through a specially created MP4 file...
PT-2022-1969 · Microsoft · Windows Dwm Core Library +1
Name of the Vulnerable Software and Affected Versions: Windows DWM Core Library affected versions not specified Description: The issue is related to the use of a shared resource with incorrect synchronization in the Windows DWM library of the Microsoft Windows operating system. This can allow an...
The vulnerability of the Active Directory Federation Services (AD FS) for Windows operating systems allows a perpetrator to circumvent security restrictions and enhance their privileges.
The vulnerability of the Active Directory Federation Services AD FS for Windows operating systems is related to security configuration errors. Exploiting this vulnerability can allow a malicious actor to bypass security restrictions and increase their privileges...
The vulnerability of the HTTP Protocol Stack of Microsoft Windows operating systems arises from the possibility of operations going beyond the buffer in memory, allowing an attacker to execute arbitrary code.
The vulnerability of the HTTP Protocol Stack in Microsoft Windows operating systems is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
The vulnerability of the Windows GDI component in Microsoft Windows operating systems allows attackers to escalate their privileges and execute arbitrary code.
The vulnerability of the Windows GDI component in Microsoft Windows systems is related to deficiencies in access control when processing raster objects. Exploiting this vulnerability can allow attackers to enhance their privileges and execute arbitrary code...
The vulnerability of the DNS Server component of the Microsoft Windows operating system, which allows a perpetrator to execute arbitrary code.
The vulnerability of the DNS Server component of the Microsoft Windows operating system is related to improper code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...