PT-2021-2364 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to insecure privilege management in the Windows operating system's Event Tracing component. It allows an attacker to potentially elevate their privileges...

The vulnerability of the NVIDIA Control Panel driver for graphics processors such as NVIDIA GeForce, Quadro, NVS, and Tesla for Windows operating systems allows a malicious individual to cause system failures or gain increased privileges.

The vulnerability of the NVIDIA Control Panel driver for graphics processors such as NVIDIA GeForce, Quadro, NVS, and Tesla on Windows operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to cause system failures or increase their...

CVE-2019-11684

Improper Access Control in the RCP+ server of the Bosch Video Recording Manager VRM component allows arbitrary and unauthenticated access to a limited subset of certificates, stored in the underlying Microsoft Windows operating system. The fixed versions implement modified authentication checks...

CVE-2021-25195

Windows PKU2U Elevation of Privilege Vulnerability...

The vulnerability of the Trust Verification API interface for Windows operating systems allows a perpetrator to trigger a service failure.

The vulnerability of the Trust Verification API for Windows operating systems is related to resource release errors. Exploiting this vulnerability could allow a malicious actor to cause service failures...

The vulnerability of the DxgkDdiEscape function in NVIDIA GeForce, Quadro, and Tesla graphics drivers for Windows operating systems allows a hacker to trigger a service failure or increase their privileges.

The vulnerability of the DxgkDdiEscape function in NVIDIA GeForce, Quadro, and Tesla graphics drivers for Windows operating systems is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability can allow an attacker to cause system failures or gain...

The vulnerability of Microsoft Windows operating systems’ Windows Defender protection, allowing attackers to enhance their privileges.

The vulnerability of Microsoft Windows operating systems’ Windows Defender protection lies in privilege management errors. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability of the Network File System (NFS) on Windows operating systems allows a hacker to cause a service failure.

The vulnerability of the Network File System NFS on Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

The vulnerability of the implementation of the Remote Procedure Call technology in Microsoft Windows operating systems allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the implementation of the Remote Procedure Call technology in Microsoft Windows operating systems is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected informati...

The vulnerability of the implementation of the PFX (PKCS#12 – Public-Key Cryptography Standards) cryptography technology in Microsoft Windows operating systems allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the PFX PKCS12 – Public-Key Cryptography Standards cryptographic technology implementation in Microsoft Windows operating systems is related to the lack of protection for confidential data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to...

The vulnerability of the Bluetooth service for Windows operating systems allows a perpetrator to increase their privileges and gain unauthorized access to protected information.

The vulnerability of the Bluetooth service for Windows operating systems is related to authentication errors. Exploiting this vulnerability can allow an attacker to increase their privileges and gain unauthorized access to protected information...

The vulnerability of the TCP/IP protocol implementation in Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the TCP/IP protocol implementation in Windows operating systems is related to the lack of protection for service data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

PT-2021-2027 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to errors in privilege management within the Win32k component of Microsoft Windows operating systems. It allows an attacker to potentially elevate their privileges...

The vulnerability of the Windows operating system’s network authentication protocol, NT LAN Manager (NTLM), allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Windows operating system’s network authentication protocol, NTLM, is related to security flaws in its mechanisms. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

The vulnerability of the file system driver in the Windows operating system allows a hacker to gain unauthorized access to protected information.

The vulnerability of the file system driver filter in the Windows operating system is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

The vulnerability of the Windows GDI+ component in Windows operating systems allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Windows GDI+ component in Windows operating systems is related to deficiencies in security mechanisms. Exploiting this vulnerability can allow an attacker, acting remotely, to gain unauthorized access to protected information...

Security Vulnerabilities fixed in Firefox 85.0.1 and Firefox ESR 78.7.1 — Mozilla

In the Angle graphics library, depth pitch computations did not take into account the block size and simply multiplied the row pitch with the pixel height. This caused the load functions to use a very high depth pitch, reading past the end of the user-supplied buffer.Note: This issue only affecte...

The vulnerability of the WLAN operating system in Windows, which allows a hacker to increase their privileges

The vulnerability of the Windows WLAN operating system is related to privilege management errors. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerability of AppX Deployment Extensions in Windows operating systems allows attackers to enhance their privileges.

The vulnerability of AppX Deployment Extensions in Windows operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges through a specially created application...

The vulnerability of the execution environment for remote process calls in the Windows operating system allows a perpetrator to execute arbitrary code.

The vulnerability of the execution environment for remote procedure calls in the Windows operating system exists due to insufficient checking of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...