4917 matches found
Microsoft Windows 安全漏洞
Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft USA. A security vulnerability exists in Microsoft Windows. An attacker exploiting this vulnerability could remotely execute code. The following products and editions are affected:Windows Server 2019,Windo...
Microsoft Windows BeginPaint Pen Use-After-Free Local Privilege Escalation Vulnerability
This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the win32kfull...
Microsoft Windows 代码问题漏洞
Microsoft Windows is a suite of operating systems for use on personal devices from the U.S.-based Microsoft Corporation Microsoft. A code issue vulnerability exists in Microsoft Windows. An attacker could exploit this vulnerability to gain elevated privileges. The following products and versions...
PT-2024-6266 · Microsoft · Windows
Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to the use of memory after it has been freed, which can allow an attacker to elevate their privileges. This can affect the system, potentially leading to unauthorized...
Microsoft Windows 代码问题漏洞
Microsoft Windows is a suite of operating systems for use on personal devices from the U.S.-based Microsoft Corporation Microsoft. A code issue vulnerability exists in Microsoft Windows. Attackers have exploited the vulnerability to cause a denial of service on the system. The following products...
PT-2024-6258 · Microsoft · Windows
Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to a buffer overflow in the "heap" of the Kernel Streaming Service Driver in Windows operating systems. This can allow an attacker to elevate their privileges. An...
CVE-2024-43402
Rust is a programming language. The fix for CVE-2024-24576, where std::process::Command incorrectly escaped arguments when invoking batch files on Windows, was incomplete. Prior to Rust version 1.81.0, it was possible to bypass the fix when the batch file name had trailing whitespace or periods...
PT-2024-38897 · Unknown +1 · Opa Go Library +1
Name of the Vulnerable Software and Affected Versions: OPA for Windows versions prior to 0.68.0 Description: A SMB force-authentication vulnerability exists due to improper input validation, allowing a user to pass an arbitrary SMB share instead of a Rego file as an argument to OPA CLI or to one ...
The vulnerability of the DEP Manager component of the Trend Micro VPN Proxy One Pro software protection solution for Windows operating systems allows attackers to enhance their privileges.
The vulnerability of the DEP Manager component of the Trend Micro VPN Proxy One Pro software protection suite for Windows operating systems is related to an incorrect definition of the link before accessing a file. Exploiting this vulnerability can allow attackers to enhance their privileges...
Exploit for Integer Underflow (Wrap or Wraparound) in Microsoft
CVE-2024-38063 - Windows TCP/IP Remote Code Execution Vulnerab...
The vulnerability of the WinSock driver in Windows operating systems allows attackers to increase their privileges.
The vulnerability of the WinSock driver in Windows operating systems relates to the possibility of using memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...
The vulnerability of the Windows WLAN operating system’s automatic configuration service allows attackers to increase their privileges.
The vulnerability of the Windows WLAN operating system’s automatic configuration service is related to the lack of authentication for critical functions. Exploiting this vulnerability can allow attackers to increase their privileges...
The vulnerability of the Windows Routing and Remote Access service (RRAS) on Windows operating systems allows a perpetrator to execute arbitrary code.
The vulnerability of the Windows Routing and Access Service RRAS on Windows operating systems is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the IP Routing Management Snapin for Windows operating systems allows a hacker to execute arbitrary code.
The vulnerability of the IP Routing Management Snapin for Windows operating systems is related to an overflow in the buffer in the “bucket”. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
The vulnerability of the IP Routing Management Snapin for Windows operating systems allows a hacker to execute arbitrary code.
The vulnerability of the IP Routing Management Snapin for Windows operating systems is related to an overflow in the buffer in the “bucket”. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...
The vulnerability of the TCP/IP protocol implementation in Microsoft Windows operating systems allows a perpetrator to execute arbitrary code.
The vulnerability of the TCP/IP protocol implementation in Microsoft Windows operating systems is related to integer overflow. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending specially crafted network packets over the IPv6 protocol from a remote locatio...
The vulnerability of the MoTw mechanism in Microsoft Windows operating systems allows a hacker to bypass the SmartScreen user interface.
The vulnerability of the MoTe-Web mechanism in Microsoft Windows operating systems is related to a breach of data protection mechanisms. Exploiting this vulnerability allows an attacker to bypass the SmartScreen user interface remotely, provided that the user opens a specially crafted file...
CVE-2024-38199
Windows Line Printer Daemon LPD Service Remote Code Execution Vulnerability...
