2815 matches found
Microsoft Windows Local Security Authority Subsystem Service 安全特征问题漏洞
The Microsoft Windows Local Security Authority Subsystem Service is an internal Microsoft program that runs Windows system security policies. It authenticates users when they log on to a computer standalone or server, manages user password changes, and generates access characters. It also leaves...
PT-2022-1504 · Microsoft · Windows Accounts Control +1
Name of the Vulnerable Software and Affected Versions: Windows Accounts Control affected versions not specified Description: The issue is related to insecure privilege management in the Windows Accounts Control component of the Windows operating system. It allows an attacker to elevate their...
The vulnerability in the Google Updater application for browser-based downloads in Google Chrome and the Windows operating system arises from insecure privilege management. This allows a malicious individual to escalate their privileges through a created file.
The vulnerability of the Google Updater application for browser-based downloads in Google Chrome and Windows operating systems is related to insecure management of privileges. Exploiting this vulnerability allows a malicious actor to elevate their privileges through a specially created file...
The vulnerability of the isolated programming environment AppContainer in Microsoft Windows operating systems allows attackers to circumvent security restrictions and gain increased privileges.
The vulnerability of the isolated programming environment AppContainer in Microsoft Windows operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to circumvent security restrictions and enhance their privileges...
The vulnerability of the GDI+ graphic library in Microsoft Windows operating systems allows attackers to gain unauthorized access to protected information.
The vulnerability of the GDI+ graphics library in Microsoft Windows operating systems is related to insufficient protection of service data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...
CVE-2021-44554
Thinfinity VirtualUI before 3.0 allows a malicious actor to enumerate users registered in the OS Windows through the /changePassword URI. By accessing the vector, an attacker can determine if a username exists thanks to the message returned; it can be presented in different languages according to...
The vulnerability of the Hyper-V hardware virtualization system of the Microsoft Windows operating system, which allows a hacker to trigger a service failure.
The vulnerability of the Hyper-V hardware virtualization technology of the Microsoft Windows operating system is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...
The vulnerability of the Hyper-V hardware virtualization system of the Microsoft Windows operating system, which allows a hacker to trigger a service failure.
The vulnerability of the Hyper-V hardware virtualization technology of the Microsoft Windows operating system is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...
The vulnerability of the Microsoft Windows Media Foundation component in the Windows operating system allows a hacker to execute arbitrary code.
The vulnerability of the Microsoft Windows Media Foundation component in the Windows operating system is related to improper code generation. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
The vulnerability of the Windows operating system arises from insufficient validation of input data, allowing attackers to trigger a service failure.
The vulnerability of the Windows operating system exists due to insufficient checking of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...
The vulnerability of Remote Desktop Services (RDS) on the Microsoft Windows operating system allows a perpetrator to execute arbitrary code.
The vulnerability of Remote Desktop Services RDS on the Microsoft Windows operating system arises due to errors in checking RDS service requests when connecting via the RDP protocol. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the DNS Server component of the Microsoft Windows operating system, which allows a perpetrator to execute arbitrary code.
The vulnerability of the DNS Server component of the Microsoft Windows operating system is related to improper code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
CVE-2021-43229
Windows NTFS Elevation of Privilege Vulnerability...
December 14, 2021—KB5008206 (OS Build 18363.1977)
None None...
PT-2021-6190 · Microsoft · Windows +1
Name of the Vulnerable Software and Affected Versions: Microsoft Message Queuing MSMQ affected versions not specified Description: The issue is related to an information disclosure in the error data area of Microsoft Message Queuing MSMQ in the Microsoft Windows operating system. It may allow a...
Microsoft Windows Common Log File System Driver 权限许可和访问控制问题漏洞
The Microsoft Windows Common Log File System Driver is Microsoft's Common Log File System CLFS API that provides a high-performance, general-purpose log file subsystem that can be used by specialized client applications and shared by multiple clients to optimize logging and access. access. A...
The vulnerability of the Remote Access Connection Manager (RASMan) service in the Microsoft Windows operating system allows a hacker to compromise and disclose sensitive information.
The vulnerability of the Remote Access Connection Manager RASMan service in the Microsoft Windows operating system is related to the disclosure of information. Exploiting this vulnerability could allow a attacker to disclose the protected information...
Amzetta Technologies Amzetta Zportal 安全漏洞
Amzetta Zportal is a virtual desktop and application controller from Amzetta Technologies, USA. It is used by administrators to create and manage hosted applications, virtual desktops, shared hosted desktops, and auditing services, provide resources for virtual desktops, proxy connections, and...
The vulnerability of the Windows Hyper-V component of the Windows operating system, which allows a hacker to trigger a service failure
The vulnerability of the Windows Hyper-V component of the operating system exists due to insufficient testing of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures by transmitting specially crafted input data to the application...
The vulnerability in the socket implementation of the Microsoft Windows operating system allows a hacker to cause a service failure. [source-iocs-preserved const=AF_UNIX]
The vulnerability of the socket implementation in Microsoft Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker, working remotely, to cause service failures by sending specially crafted input data to the application...