Heap-based Buffer Overflow

Overview Affected versions of this package are vulnerable to Heap-based Buffer Overflow. An attacker can execute arbitrary code by sending malicious requests designed to exploit the vulnerability. Remediation Upgrade Microsoft.NETCore.App.Runtime.win-arm64 to version 9.0.1 or higher. References -...

Heap-based Buffer Overflow

Overview Affected versions of this package are vulnerable to Heap-based Buffer Overflow due to a stack buffer overrun in the Double Parse routine. An attacker can execute arbitrary code by supplying a specially crafted input that triggers the buffer overrun. Remediation Upgrade...

The vulnerability of the Windows Runtime component of the Windows operating system, which allows a hacker to increase their privileges

The vulnerability of the Windows Runtime component of the Windows operating system is related to synchronization errors when using a shared resource “Race Condition”. Exploiting this vulnerability can allow an attacker to increase their privileges...

CVE-2023-36902

Windows Runtime Remote Code Execution Vulnerability...

CVE-2023-36711

Windows Runtime C++ Template Library Elevation of Privilege Vulnerability...

Privilege escalation

Windows Runtime C++ Template Library Elevation of Privilege Vulnerability...

Windows Runtime C++ Template Library Elevation of Privilege Vulnerability

...

PT-2023-6069 · Microsoft · Windows Runtime C++ Template Library +1

Name of the Vulnerable Software and Affected Versions: Windows Runtime C++ Template Library affected versions not specified Description: The issue is related to insufficient access control in the standard C++ library of Windows operating systems. It allows an attacker to elevate their privileges,...

Microsoft Windows Runtime C++ Template Library Security Vulnerability

Microsoft Windows Runtime .net framework is an essential functional support library for the Windows operating system from Microsoft Corporation, USA. A security vulnerability exists in the Microsoft Windows Runtime C++ Template Library. An attacker could exploit the vulnerability to elevate...

PT-2023-6158 · Microsoft · Windows Runtime +1

Name of the Vulnerable Software and Affected Versions: Windows Runtime affected versions not specified Description: The issue is related to synchronization errors when using a shared resource, specifically a "race condition" situation. This can allow an attacker to elevate their privileges. The...

Privilege Escalation

Overview Affected versions of this package are vulnerable to Privilege Escalation. A vulnerability exists in .NET when deserializing a DataSet or DataTable from XML which may result in elevation of privileges. Remediation Upgrade Microsoft.NETCore.App.Runtime.win-arm to version 6.0.18, 7.0.7 or...

Remote Code Execution (RCE)

Overview Affected versions of this package are vulnerable to Remote Code Execution RCE by allowing an attacker to load a runtime DLL from an unexpected location. Remediation Upgrade Microsoft.NETCore.App.Runtime.win-x64 to version 6.0.16, 7.0.5 or higher. References - Advisory - GitHub Commit -...

VulnCheck KEV: CVE-2022-21971

Microsoft Windows Runtime contains an unspecified vulnerability that allows for remote code execution...

Denial of Service (DoS)

Overview Affected versions of this package are vulnerable to Denial of Service DoS when creating HTTPS web requests while building X509 certificate chains. Details Denial of Service DoS describes a family of attacks, all aimed at making a system inaccessible to its intended and legitimate users...

The vulnerability of the Windows Runtime component of the Windows operating system, allowing a hacker to execute arbitrary code

The vulnerability of the Windows Runtime component of the Windows operating system is related to improper code generation management. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

CVE-2022-21971

Windows Runtime Remote Code Execution Vulnerability...

CVE-2022-21971 Windows Runtime Remote Code Execution Vulnerability

...

CVE-2022-21971 Windows Runtime Remote Code Execution Vulnerability

...

PT-2022-1667 · Microsoft · Windows 11 +4

Name of the Vulnerable Software and Affected Versions: Microsoft Windows versions prior to the fixed version windows10 windows 11 win srv 19 win srv 22 Description: The issue is related to incorrect code generation management in the Windows Runtime component of the Windows operating system. This...

Microsoft Windows Runtime 缓冲区错误漏洞

Microsoft Windows Runtime .net framework is a necessary feature support library for the Windows operating system from Microsoft USA.Microsoft Windows Runtime has a remote code execution vulnerability for which no details of the vulnerability are currently available...