227 matches found
Information disclosure
Windows Clustered Shared Volume Information Disclosure Vulnerability...
EUVD-2022-27167
Windows Lightweight Directory Access Protocol LDAP Remote Code Execution Vulnerability...
Windows WLAN AutoConfig Service Information Disclosure Vulnerability
...
Windows Failover Cluster Information Disclosure Vulnerability
...
Remote code execution
Windows Fax Compose Form Remote Code Execution Vulnerability...
Privilege escalation
Windows Common Log File System Driver Elevation of Privilege Vulnerability...
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
...
The vulnerability of the basic Windows DWM library in Microsoft Windows operating systems allows attackers to escalate their privileges.
The vulnerability of the basic Windows DWM library in Microsoft Windows is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker to enhance their privileges...
Privilege escalation
Windows Devices Human Interface Elevation of Privilege Vulnerability...
Privilege escalation
Windows Remote Access Connection Manager Elevation of Privilege Vulnerability...
HP Print and Scan Doctor has an elevation of privilege vulnerability
HP Print and Scan Doctor is a free tool for Windows from Hewlett-Packard HP that helps solve printing and scanning problems. HP Print and Scan Doctor has a security vulnerability that could be exploited by an attacker to potentially allow local privilege escalation...
Concealed Position - Bring Your Own Print Driver Privilege Escalation Tool
Concealed Position is a local privilege escalation attack against Windows using the concept of "Bring Your Own Vulnerability". Specifically, Concealed Position CP uses the as designed package point and print logic in Windows that allows a low privilege user to stage and install printer drivers. C...
Windows Redirected Drive Buffering SubSystem Driver Information Disclosure Vulnerability
...
Microsoft Windows Key Storage Provider安全特征问题特征问题漏洞
Microsoft Windows Key Storage Provider is a Next Generation CNG from Microsoft Corporation USA that separates the encryption provider from the key storage provider KSP. A security feature issue vulnerability exists in Microsoft Windows Key Storage Provider. The following products and editions are...
Windows Cryptographic Primitives Library Information Disclosure Vulnerability
...
CVE-2020-17088 Windows Common Log File System Driver Elevation of Privilege Vulnerability
...
CVE-2020-7323
Authentication Protection Bypass vulnerability in McAfee Endpoint Security ENS for Windows prior to 10.7.0 September 2020 Update allows physical local users to bypass the Windows lock screen via triggering certain detection events while the computer screen is locked and the McTray.exe is running...
Privilege escalation
An elevation of privilege vulnerability exists when the Windows Common Log File System CLFS driver improperly handles objects in memory, aka 'Windows Common Log File System Driver Elevation of Privilege Vulnerability'...
CVE-2018-4299
Multiple memory corruption issues were addressed with improved memory handling. This issue affected versions prior to iOS 12, tvOS 12, watchOS 5, Safari 12, iTunes 12.9 for Windows, iCloud for Windows 7.7...
Microsoft .NET Framework 4.7 DLL Hijacking
Hi @ll, the executable installers for .NET Framework 4.7 released about 2 months ago NDP47-KB3186500-Web.exe, Microsoft .NET Framework 4.7 Web Installer for Windows 7 SP1 etc., available from , NDP47-KB3186497-x86-x64-AllOS-ENU.exe, Microsoft .NET Framework 4.7 Offline Installer for Windows 7 SP1...