Microsoft Windows 信息泄露漏洞

Microsoft Windows is a suite of operating systems used by Microsoft Corporation USA for personal devices. An information disclosure vulnerability exists in Microsoft Windows Services for NFS ONCRPC XDR Driver. The following products and versions are affected:Windows 10 Version 1809 for 32-bit...

The vulnerability of the Compositing component in the Google Chrome web browser for Windows operating systems allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Compositing component in the Google Chrome web browser for Windows operating systems is related to improperly implemented security checks for standard elements. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information throug...

New PetitPotam NTLM Relay Attack Lets Hackers Take Over Windows Domains

A newly uncovered security flaw in the Windows operating system can be exploited to coerce remote Windows servers, including Domain Controllers, to authenticate with a malicious destination, thereby allowing an adversary to stage an NTLM relay attack and completely take over a Windows domain. The...

Nvidia GPU Display Driver 后置链接漏洞

Nvidia GPU Display Driver is a driver software from Nvidia, Inc. that is used for interactive support of graphics card display modules in operating systems. The Nvidia GPU Display Driver suffers from a backlink vulnerability that stems from the product's mishandling of hard links, which could all...

Microsoft Office security feature bypass vulnerability

Microsoft Office is a suite of office software developed by Microsoft Corporation based on the Windows operating system.Microsoft Office suffers from a security feature bypass vulnerability. An attacker can exploit this vulnerability to perform certain illegal operations...

CVE-2021-34446

Windows HTML Platforms Security Feature Bypass Vulnerability...

CVE-2021-33772

Windows TCP/IP Driver Denial of Service Vulnerability...

CVE-2021-22000

VMware Thinapp version 5.x prior to 5.2.10 contain a DLL hijacking vulnerability due to insecure loading of DLLs. A malicious actor with non-administrative privileges may exploit this vulnerability to elevate privileges to administrator level on the Windows operating system having VMware ThinApp...

Design/Logic Flaw

VMware Thinapp version 5.x prior to 5.2.10 contain a DLL hijacking vulnerability due to insecure loading of DLLs. A malicious actor with non-administrative privileges may exploit this vulnerability to elevate privileges to administrator level on the Windows operating system having VMware ThinApp...

CVE-2021-22000

VMware Thinapp version 5.x prior to 5.2.10 contain a DLL hijacking vulnerability due to insecure loading of DLLs. A malicious actor with non-administrative privileges may exploit this vulnerability to elevate privileges to administrator level on the Windows operating system having VMware ThinApp...

Microsoft Win32k 输入验证错误漏洞

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation USA.Microsoft Windows is a set of operating systems for personal devices.Microsoft Windows Server is a set of server operating systems. An elevation of privilege vulnerability exists in Win32k in Microsoft...

PT-2021-5715 · Microsoft · Windows Dns Server +1

Name of the Vulnerable Software and Affected Versions: Windows DNS Server affected versions not specified Description: The issue is related to incorrect code generation management in the DNS Server component of the Microsoft Windows operating system. It allows a remote attacker to execute arbitra...

PT-2021-5227 · Microsoft · Windows Remote Access Connection Manager +1

Name of the Vulnerable Software and Affected Versions: Windows Remote Access Connection Manager affected versions not specified Description: The issue is related to information disclosure in the Remote Access Connection Manager RASMan service of the Microsoft Windows operating system. It allows a...

Microsoft Windows Console Driver 权限许可和访问控制问题漏洞

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation USA, Microsoft Windows is an operating system for personal devices, and Microsoft Windows Server is a server operating system. An elevation of privilege vulnerability exists in the Windows Console Driver in...

PT-2021-5647 · Microsoft · Gdi+ +1

Name of the Vulnerable Software and Affected Versions: Microsoft Windows affected versions not specified Description: The issue is related to insufficient protection of internal data in the GDI+ graphics library of Microsoft Windows operating systems. This can allow an attacker to gain unauthoriz...

Vulnerability of Windows operating systems related to insecure management of privileges, allowing attackers to escalate their privileges

Vulnerabilities of Windows operating systems are related to insecure management of privileges. Exploiting these vulnerabilities can allow attackers, who operate remotely, to enhance their privileges...

Design/Logic Flaw

The TIBCO Spotfire Server and TIBCO Enterprise Runtime for R components of TIBCO Software Inc.'s TIBCO Enterprise Runtime for R - Server Edition, TIBCO Enterprise Runtime for R - Server Edition, TIBCO Enterprise Runtime for R - Server Edition, TIBCO Spotfire Analytics Platform for AWS Marketplace...

CVE-2021-29951

The Mozilla Maintenance Service granted SERVICESTART access to BUILTIN|Users which, in a domain network, grants normal remote users access to start or stop the service. This could be used to prevent the browser update service from operating if an attacker spammed the 'Stop' command; but also...

Command injection

The Mozilla Maintenance Service granted SERVICESTART access to BUILTIN|Users which, in a domain network, grants normal remote users access to start or stop the service. This could be used to prevent the browser update service from operating if an attacker spammed the 'Stop' command; but also...

CVE-2021-29951

The Mozilla Maintenance Service granted SERVICESTART access to BUILTIN|Users which, in a domain network, grants normal remote users access to start or stop the service. This could be used to prevent the browser update service from operating if an attacker spammed the 'Stop' command; but also...