Schneider Electric EcoStruxure Process Expert 安全漏洞

Schneider Electric EcoStruxure Process Expert is a next-generation process automation system for designing, operating, and maintaining entire plants from Schneider Electric, France. A security vulnerability exists in Schneider Electric EcoStruxure Process Expert that stems from the inclusion of a...

The vulnerability of the SmartCardReader class in the Smart Cards for Windows service (formerly known as Smart Card Resource Manager) on Windows operating systems allows a malicious individual to disclose protected information.

The vulnerability of the SmartCardReader class in the Smart Cards for Windows service previously known as Smart Card Resource Manager in Windows operating systems is related to the use of an uninitialized resource. Exploiting this vulnerability could allow an attacker to disclose sensitive...

CVE-2025-21224 Windows Line Printer Daemon (LPD) Service Remote Code Execution Vulnerability

...

CVE-2025-21330 Windows Remote Desktop Services Denial of Service Vulnerability

...

Windows CSC Service Information Disclosure Vulnerability

...

Windows Geolocation Service Information Disclosure Vulnerability

...

Windows CSC Service Elevation of Privilege Vulnerability

...

PT-2025-1247 · Microsoft · Windows Csc Service +1

Name of the Vulnerable Software and Affected Versions: Windows CSC Service affected versions not specified Description: The issue is related to a buffer overflow in dynamic memory, which can allow an attacker to elevate their privileges. This can affect the system, potentially leading to...

PT-2025-1045 · Microsoft · Windows Printworkflowusersvc +1

Name of the Vulnerable Software and Affected Versions: Windows PrintWorkflowUserSvc affected versions not specified Description: The issue is related to an elevation-of-privilege vulnerability in the Windows PrintWorkflowUserSvc service. This vulnerability is caused by insufficient input...

Systeminformation has command injection vulnerability in getWindowsIEEE8021x (SSID)

Summary The SSID is not sanitized when before it is passed as a parameter to cmd.exe in the getWindowsIEEE8021x function. This means that malicious content in the SSID can be executed as OS commands. Details I have exploited this vulnerability in a Windows service using version 5.22.11 of the...

The vulnerability of the PrintWorkflowUserSvc service in Microsoft Windows operating systems allows a hacker to increase their privileges.

The vulnerability of the PrintWorkflowUserSvc service in Microsoft Windows operating systems is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...

CVE-2024-49104

Windows Routing and Remote Access Service RRAS Remote Code Execution Vulnerability...

CVE-2024-49099

Windows Wireless Wide Area Network Service WwanSvc Information Disclosure Vulnerability...

CVE-2024-49099

Windows Wireless Wide Area Network Service WwanSvc Information Disclosure Vulnerability...

CVE-2024-49103 Windows Wireless Wide Area Network Service (WwanSvc) Information Disclosure Vulnerability

...

CVE-2024-49103

CVE-2024-49103 affects Windows Wireless Wide Area Network Service (WwanSvc). It is an information disclosure vulnerability with CVSS 3.1 (AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N); attacker needs physical access (per the vector). The connected documents confirm the vulnerability description but do not...

CVE-2024-49098

CVE-2024-49098 affects Windows WWAN Service (WwanSvc). The vulnerability allows information disclosure in WWAN, with CVSS 3.1: AV Physical, AC Low, PR Low, UI None, S Unchanged, C High, I None, A None. Exploitation requires physical access and low complexity; attacker needs low privileges. Remedi...

Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability

...

Microsoft Windows Wireless Wide Area Network Service 安全漏洞

Microsoft Windows Wireless Wide Area Network Service is a key component in Windows 10 and Windows 11 from Microsoft Corporation USA that facilitates wireless communication over cellular networks. A security vulnerability exists in Microsoft Windows Wireless Wide Area Network Service. An attacker...

PT-2024-9441 · Microsoft · Windows Printworkflowusersvc +1

Name of the Vulnerable Software and Affected Versions: Windows PrintWorkflowUserSvc affected versions not specified Description: The issue is related to the use of memory after it has been freed in the Windows PrintWorkflowUserSvc service, which can allow an attacker to elevate their privileges...