PT-2024-8812 · Intel · Intel Quartus Prime Pro Edition

Name of the Vulnerable Software and Affected Versions: IntelR QuartusR Prime Pro Edition software for Windows versions prior to 24.2 Description: The issue is related to an uncontrolled search path in the Intel Quartus Prime Pro software, which may allow an authenticated user to potentially enabl...

OESA-2024-1715 libarchive security update

is an open-source BSD-licensed C programming library that provides streaming access to a variety of different archive formats, including tar, cpio, pax, zip, and ISO9660 images. The distribution also includes bsdtar and bsdcpio, full-featured implementations of tar and cpio that use . Security...

CVE-2024-0089

NVIDIA GPU Display Driver for Windows contains a vulnerability where the information from a previous client or another process could be disclosed. A successful exploit of this vulnerability might lead to code execution, information disclosure, or data tampering...

Black Basta Ransomware Suspected of Exploiting Windows 0-day Before Patch

The cybersecurity researchers at Symantec have found "strong evidence" suggesting that the Black Basta ransomware gang exploited a critical Windows vulnerability CVE-2024-26169 before it was patched by Microsoft on March 12, 2024, through its regular Patch Tuesday updates...

PT-2024-4212 · Palo Alto Networks · Palo Alto Networks Cortex Xdr Agent

Name of the Vulnerable Software and Affected Versions: Palo Alto Networks Cortex XDR Agent affected versions not specified Description: A privilege escalation vulnerability in the Palo Alto Networks Cortex XDR agent on Windows devices allows a local user to execute programs with elevated...

CVE-2024-30087

Win32k Elevation of Privilege Vulnerability...

CVE-2024-30084

Windows Kernel-Mode Driver Elevation of Privilege Vulnerability...

CVE-2024-30083 Windows Standards-Based Storage Management Service Denial of Service Vulnerability

...

PT-2024-4475 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to a use-after-free vulnerability in the Win32k component of the Windows operating system, which can allow an attacker to elevate their privileges. This vulnerability i...

PT-2024-4270

Name of the Vulnerable Software and Affected Versions Microsoft Streaming Service affected versions not specified Windows affected versions not specified Description The issue is related to a use-after-free vulnerability in the Microsoft Streaming Service of Windows operating systems, which can...

PT-2024-4172

Name of the Vulnerable Software and Affected Versions Windows 10 versions 1809 through 22H2 Windows 11 versions 21H2 through 23H2 Windows Server 2019 Windows Server 2022 Windows Server 2025 Server Core versions prior to February 2025 updates Description A local privilege escalation issue exists i...

PT-2024-4139

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description The vulnerability allows remote attackers to execute arbitrary code and affect the system. It is related to errors in processing input data in the Windows Wi-Fi driver. An unauthenticated...

CVE-2024-5102

A sym-linked file accessed via the repair function in Avast Antivirus troubleshooting - repair feature, which attempts to delete a file in the current user's AppData directory as NT AUTHORITY\SYSTEM. A low-privileged user can make a pseudo-symlink and a junction folder and point to a file on the...

CVE-2024-37385

Roundcube Webmail before 1.5.7 and 1.6.x before 1.6.7 on Windows allows command injection via imconvertpath and imidentifypath. NOTE: this issue exists because of an incomplete fix for CVE-2020-12641...

The vulnerability of the NVIDIA GPU Display Driver for Windows software allows a hacker to execute arbitrary code, disclose sensitive information, cause system failures, or gain increased privileges.

The vulnerability of the NVIDIA GPU Display Driver for Windows software lies in reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code, disclose sensitive information, cause system failures, or gain elevated privileges...

The vulnerability of the Remote Access Connection Manager (RASMan) service for Windows operating systems allows a hacker to compromise and disclose sensitive information.

The vulnerability of the Remote Access Connection Manager RASMan service for Windows operating systems is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow an attacker to disclose sensitive information that is protected by the system’s...

The vulnerability of the Windows Common Log File System (CLFS) driver in Windows operating systems allows a hacker to gain elevated privileges.

The vulnerability of the Windows Common Log File System CLFS driver in Windows operating systems is related to operations that go beyond the buffer in memory. Exploiting this vulnerability can allow a remote attacker to gain increased privileges...

Nicomsoft WinI2C/DDC 安全漏洞

Nicomsoft WinI2C/DDC is a professional tool from Nicomsoft that allows you to control display devices via the DDC/CI protocol in a Windows environment. A security vulnerability exists in Nicomsoft WinI2C/DDC version v3.7.4.0, which originates from a security flaw in the component ddcdrv.sys. The...

HYPR 安全漏洞

HYPR is a security application from HYPR that implements Passwordless. A security vulnerability exists in HYPR Passwordless versions prior to 9.1 that stems from a cryptographic signature vulnerability in HYPR Passwordless on Windows that improperly verifies allowing malware updates...

The vulnerability in the web interface of the operating system administrator FortiOS allows a perpetrator to execute arbitrary commands.

The vulnerability in the Windows operating system’s administrator web interface, FortiOS.sv, relates to operations that go beyond buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands by sending specially crafted HTTP or HTTPS requests...