Windows Local Security Authority Subsystem Service (LSASS) Remote Code Execution Vulnerability

...

Windows Common Log File System Driver Elevation of Privilege Vulnerability

...

PT-2024-9428 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Microsoft Windows affected versions not specified Description: The issue is related to a buffer overflow in memory, which can be exploited to elevate privileges. This can potentially allow an attacker to gain higher privileges on the system...

PT-2024-9468 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The vulnerability in the Windows Local Security Authority Subsystem Service LSASS is related to the use of insecure mechanisms for handling authentication data in the operating system's...

PT-2024-9357

The Windows Remote Desktop Services is affected by a critical security flaw that allows remote attackers to execute arbitrary code and impact the system. This issue is present in Windows Remote Desktop Services, but the specific vulnerable versions are not specified in the given text. The exploit...

PT-2024-9325 · Microsoft · Microsoft/Muzic

Name of the Vulnerable Software and Affected Versions: Microsoft/Muzic affected versions not specified Description: The issue is related to a remote code execution flaw in the deserialization mechanism of the Microsoft/Muzic media player in Windows operating systems. This could allow an attacker ...

PT-2024-9422 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to the implementation of the Lightweight Directory Access Protocol LDAP in Windows operating systems and is associated with pointer dereference errors. Exploitation of...

Microsoft Windows Remote Desktop Services 安全漏洞

Microsoft Windows Remote Desktop Services is a collection of features from Microsoft USA that allow users to remotely access graphical desktops and Windows applications. A remote code execution vulnerability exists in Microsoft Windows Remote Desktop Services, which is caused by a flaw in the...

CVE-2024-55579

An issue was discovered in Qlik Sense Enterprise for Windows before November 2024 IR. An unprivileged user with network access may be able to create connection objects that trigger execution of arbitrary EXE files. This is fixed in November 2024 IR, May 2024 Patch 10, February 2024 Patch 14,...

Proactively Managing High-Risk Vulnerabilities with TruRisk Mitigate™

In late 2024, organizations faced over 65 million detections from three critical vulnerabilities—CVE-2013-2900, CVE-2024-38122, and CVE-2024-30078—underscoring the urgent need for proactive vulnerability management. Adding to these challenges, the Qualys Threat Research Unit TRU uncovered five...

Veeam Agent for Windows 安全漏洞

Veeam Agent for Windows is a data protection and disaster recovery solution for physical and virtual machines from Veeam USA. A security vulnerability exists in Veeam Agent for Windows 6.2 and prior versions 6.X. The vulnerability stems from the presence of a DLL injection vulnerability, which...

The vulnerability of the Mark of the Web mechanism in Windows operating systems allows a hacker to circumvent existing security restrictions.

The vulnerability of the Mark of the Web mechanism in Windows operating systems is related to the breach of data protection mechanisms. Exploiting this vulnerability allows a remote attacker to circumvent existing security restrictions...

The vulnerability of the Intel Quartus Prime Standard automated system design for Windows operating systems lies in its uncontrolled search path, which allows attackers to exploit their privileges.

The vulnerability of Intel Quartus Prime Standard software for operating systems running on Windows is related to an uncontrolled element in the search process. Exploiting this vulnerability can allow attackers to increase their privileges...

The vulnerability of the Intel Assistive Context-Aware Toolkit (ACAT) for people with disabilities in Windows operating systems arises from an uncontrolled element in the search process, allowing attackers to exploit their privileges.

The vulnerability of the Intel Assistive Context-Aware Toolkit ACAT for people with disabilities on Windows operating systems is related to an uncontrollable element in the search process. Exploiting this vulnerability can allow attackers to gain increased privileges...

PT-2024-8905 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to a flaw in the Mark of the Web mechanism of Windows operating systems, which compromises data protection. Exploitation of this flaw could allow a remote attacker to...

The vulnerability of the Trend Micro Deep Security Agent anti-virus protection system in Windows operating systems arises from the failure to take measures to neutralize certain special elements. This vulnerability allows attackers to enhance their privileges and execute arbitrary code.

The vulnerability of the Trend Micro Deep Security Agent anti-virus protection software for Windows operating systems is related to the lack of measures taken to neutralize its special elements. Exploiting this vulnerability allows a malicious actor to enhance their privileges and execute arbitra...

The vulnerability of the VPN server for corporate networks of Ivanti Secure Access Client (ISAC), previously known as Pulse Secure Desktop Client, on Windows operating systems arises from incorrect verification of the cryptographic signature. This vulnerability allows attackers to escalate their privileges.

The vulnerability of the Ivanti Secure Access Client ISAC, previously known as Pulse Secure Desktop Client, for corporate networks running on Windows operating systems is related to an improper verification of the cryptographic signature. Exploiting this vulnerability can allow attackers to...

Arbitrary Code Injection

Overview Affected versions of this package are vulnerable to Arbitrary Code Injection due to the improper handling of URI schemes in the openExternal function. Note: This is exploitable only for Windows environments. Remediation Upgrade @joplin/utils to version 2.14.1 or higher. References - GitH...

IBM DB2 DoS (7175943) (Windows)

According to its self-reported version number, IBM Db2 on Windows is vulnerable to a denial of service when querying certain tables using a specially crafted statement. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number...

Adobe Lightroom Classic < 13.5.1 Memory leak (APSB24-78)

The version of Adobe Lightroom Classic installed on the remote Windows host is prior to 13.5.1. It is, therefore, affected by a vulnerability as referenced in the APSB24-78 advisory. - Lightroom Desktop versions 7.4.1, 13.5, 12.5.1 and earlier are affected by an out-of-bounds read vulnerability...