Microsoft Windows DNS Security Vulnerability

Microsoft Windows DNS is a domain name resolution service from Microsoft. The Domain Name System DNS is one of the industry-standard suite of protocols that encompasses TCP/IP, and DNS clients and DNS servers work together to provide computers and users with name resolution services that map...

BeyondTrust Privilege Management Security Vulnerability

BeyondTrust Privilege Management is the BeyondTrust Privilege Management tool for Windows and Mac SaaS from BeyondTrust USA. A security vulnerability exists in BeyondTrust Privilege Management Windows versions prior to 5.7 SR1, which stems from the possibility of bypassing publisher application...

BeyondTrust Privilege Management Security Vulnerability

BeyondTrust Privilege Management is the BeyondTrust Privilege Management tool for Windows and Mac SaaS from BeyondTrust USA. A security vulnerability exists in BeyondTrust Privilege Management Windows versions prior to 5.6 SR2, which stems from a vulnerability that allows an attacker to bypass so...

PT-2023-7617 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Microsoft Windows affected versions not specified Description: The issue is related to insufficient access restrictions in the Local Security Authority Subsystem Service, which can be exploited to elevate privileges. This allows an attacker t...

BeyondTrust Privilege Management Security Vulnerability

BeyondTrust Privilege Management is the BeyondTrust Privilege Management tool for Windows and Mac SaaS from BeyondTrust USA. A security vulnerability exists in BeyondTrust Privilege Management Windows versions prior to 5.6 SR2, which stems from a vulnerability that could allow an attacker to...

BeyondTrust Privilege Management Security Vulnerability

BeyondTrust Privilege Management is the BeyondTrust Privilege Management tool for Windows and Mac SaaS from BeyondTrust USA. A security vulnerability exists in BeyondTrust Privilege Management Windows versions prior to 23.1 that originates from a vulnerability that allows an attacker to hijack a...

BeyondTrust Privilege Management Security Vulnerability

BeyondTrust Privilege Management is the BeyondTrust Privilege Management tool for Windows and Mac SaaS from BeyondTrust USA. A security vulnerability exists in BeyondTrust Privilege Management Windows versions prior to 22.3, which stems from an attacker being able to spawn processes with multiple...

Google Chrome Security Vulnerability

Google Chrome is a web browser from Google, Inc. A security vulnerability exists in Google Chrome before 120.0.6099.62 Linux, Mac, before 120.0.6099.62/.63 Windows, which stems from a post-release reuse issue in Media Stream...

The vulnerability of the Fortinet FortiClient security tool for Windows lies in its use of pre-installed user accounts, which allows a hacker to circumvent security restrictions.

The vulnerability of the Fortinet FortiClient security device for Windows relates to the use of pre-installed user accounts. Exploiting this vulnerability could allow a hacker to circumvent security restrictions...

The vulnerability of the Remote Registry Service (regsvc) in Microsoft Windows operating systems allows a perpetrator to execute arbitrary code.

The vulnerability of the Remote Registry Service regsvc in Microsoft Windows operating systems with integer overflow. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the Local Security Authority (LSA) service on Microsoft Windows operating systems, which allows a perpetrator to disclose protected information

The vulnerability of the Local Security Authority LSA service on Microsoft Windows operating systems is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker to disclose protected information...

The vulnerability of the Remote Registry Service (regsvc) in Microsoft Windows operating systems allows a perpetrator to execute arbitrary code.

The vulnerability of the Remote Registry Service regsvc in Microsoft Windows operating systems is related to integer overflow. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

CVE-2023-20084

A vulnerability in the endpoint software of Cisco Secure Endpoint for Windows could allow an authenticated, local attacker to evade endpoint protection within a limited time window. This vulnerability is due to a timing issue that occurs between various software components. An attacker could...

Vulnerability of Windows operating systems, related to insufficient validation of input data, allows attackers to execute arbitrary code.

The vulnerability of Windows operating systems is related to insufficient checking of input data during the processing of archived folders. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

The vulnerability of the implementation of the HMAC (Hash-based Message Authentication Code) algorithm in Windows operating systems allows attackers to circumvent security restrictions and enhance their privileges.

The vulnerability of the HMAC Hash-based Message Authentication Code algorithm implementation in Windows operating systems is related to deficiencies in access control during key generation. Exploiting this vulnerability can allow attackers to circumvent security restrictions and enhance their...

Privilege escalation

Windows DWM Core Library Elevation of Privilege Vulnerability...

CVE-2023-36405 Windows Kernel Elevation of Privilege Vulnerability

...

CVE-2023-36428 Microsoft Local Security Authority Subsystem Service Information Disclosure Vulnerability

...

VulnCheck KEV: CVE-2023-36033

Microsoft Windows Desktop Window Manager DWM Core Library contains an unspecified vulnerability that allows for privilege escalation...

Microsoft Windows Protected EAP Security Vulnerability

Microsoft Windows is a suite of operating systems for use on personal devices from the U.S.-based Microsoft Corporation Microsoft. A security vulnerability exists in Microsoft Windows Protected EAP PEAP. An attacker could exploit the vulnerability to remotely execute code. The following products...