The vulnerability in the implementation of the SMB protocol in Windows operating systems allows a perpetrator to trigger a service failure.

The vulnerability of the SMB protocol implementation in Windows operating systems is related to the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

The vulnerability of the Windows Virtual Hard Disk component of the Microsoft Windows operating system, which allows a hacker to trigger a service failure.

The vulnerability of the Windows Virtual Hard Disk component of the Microsoft Windows operating system is related to the use of unsafe mechanisms for processing authentication data in the operating system’s memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of NVIDIA’s graphics driver for Windows, related to reading data beyond the buffer in memory, allows attackers to execute arbitrary code, disclose sensitive information, cause system failures, or gain elevated privileges.

The vulnerability of NVIDIA’s graphics driver for Windows relates to reading data beyond the buffer limits in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code, disclose sensitive information, cause system failures, or gain elevated privileges...

PT-2024-8814 · Intel · Intel Sdp Tool For Windows

Name of the Vulnerable Software and Affected Versions: IntelR SDP Tool for Windows affected versions not specified Description: The issue is related to incorrect default permissions in the IntelR SDP Tool for Windows software, which may allow an authenticated user to enable escalation of privileg...

CVE-2024-43646

Windows Secure Kernel Mode Elevation of Privilege Vulnerability...

CVE-2024-43643

Windows USB Video Class System Driver Elevation of Privilege Vulnerability...

CVE-2024-43634

Windows USB Video Class System Driver Elevation of Privilege Vulnerability...

CVE-2024-43449

Windows USB Video Class System Driver Elevation of Privilege Vulnerability...

EUVD-2024-40384

Windows KDC Proxy Remote Code Execution Vulnerability...

CVE-2024-43624 Windows Hyper-V Shared Virtual Disk Elevation of Privilege Vulnerability

...

Microsoft Windows USB Video Class driver 缓冲区错误漏洞

Microsoft Windows USB Video Class driver is a driver for webcams or digital camcorders from Microsoft Corporation USA. A buffer error vulnerability exists in Microsoft Windows USB Video Class driver. An attacker could exploit the vulnerability to elevate privileges. The following products and...

Microsoft Win32k 安全漏洞

Microsoft Win32k is a system file for Windows multi-user management from Microsoft USA. A security vulnerability exists in Microsoft Win32k. An attacker can exploit the vulnerability to elevate privileges. The following products and editions are affected:Windows 10 Version 1809 for 32-bit...

Microsoft Visual Studio和Microsoft .NET 安全漏洞

Microsoft Visual Studio and Microsoft .NET are both products of Microsoft Corporation, USA. Microsoft Visual Studio is a family of development tool suites and a fundamentally complete set of development tools that includes most of the tools needed throughout the software lifecycle. Microsoft .NET...

Fortinet FortiClient 安全漏洞

Fortinet FortiClient is a mobile endpoint security solution from Fortinet, Inc. The solution provides IPsec and SSL encryption, WAN optimization, endpoint compliance, and two-factor authentication when connected to a FortiGate firewall appliance. A security vulnerability exists in Fortinet...

PT-2024-8685 · Intel · Intel Binary Configuration Tool

Name of the Vulnerable Software and Affected Versions: Intel Binary Configuration Tool versions prior to 3.4.5 Description: The issue is related to incorrect default permissions in the Intel Binary Configuration Tool software for Windows, which may allow an authenticated user to potentially enabl...

VulnCheck KEV: CVE-2024-43451

Microsoft Windows contains an NTLMv2 hash spoofing vulnerability that could result in disclosing a user's NTLMv2 hash to an attacker via a file open operation. The attacker could then leverage this hash to impersonate that user...

CVE-2024-8424 WatchGuard Endpoint Protection Privilege Escalation in PSANHost Enables Arbitrary File Delete as SYSTEM

Improper Privilege Management vulnerability in WatchGuard EPDR, Panda AD360 and Panda Dome on Windows PSANHost.exe module allows arbitrary file delete with SYSTEM permissions. This issue affects EPDR: before 8.00.23.0000; Panda AD360: before 8.00.23.0000; Panda Dome: before 22.03.00...

CVE-2024-51736

Symphony process is a module for the Symphony PHP framework which executes commands in sub-processes. On Windows, when an executable file named cmd.exe is located in the current working directory it will be called by the Process class when preparing command arguments, leading to possible hijackin...

PT-2024-34873 · Unknown · Symphony Php Framework

Name of the Vulnerable Software and Affected Versions: Symphony PHP framework versions prior to 5.4.46 Symphony PHP framework versions prior to 6.4.14 Symphony PHP framework versions prior to 7.1.7 Description: The Symphony process module in the Symphony PHP framework executes commands in...

The vulnerability of Internet Small Computer System Interface (iSCSI) operating systems for Windows, which allows a perpetrator to cause a service failure

The vulnerability of Internet Small Computer System Interface iSCSI operating systems for Windows involves an uncontrolled consumption of resources. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...