CVE-2023-36438 Windows TCP/IP Information Disclosure Vulnerability

...

CVE-2023-36605 Windows Named Pipe Filesystem Elevation of Privilege Vulnerability

...

PT-2023-5941 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to the implementation of the TCP/IP protocol stack in Windows operating systems, which lacks sufficient protection of service data. This can be exploited by a remote...

Microsoft Windows Layer 2 Tunneling Protocol 竞争条件问题漏洞

Microsoft Windows is a set of operating systems for use on personal devices from the American company Microsoft. A remote code execution vulnerability exists in the Microsoft Windows Layer 2 Tunneling Protocol, which can be exploited by an attacker to remotely execute code...

PT-2023-6153 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The vulnerability is related to insufficient input validation in the Windows Setup Files Cleanup component. It allows remote attackers to execute arbitrary code on the system...

Microsoft Windows Security Vulnerabilities

Microsoft Windows is a suite of operating systems for use on personal devices from the U.S.-based Microsoft Corporation. A security vulnerability exists in Microsoft Windows Mark of the Web MOTW. An attacker exploiting this vulnerability could bypass certain features. The following products and...

Microsoft Windows Layer 2 Tunneling Protocol 竞争条件问题漏洞

Microsoft Windows is a set of operating systems for use on personal devices from the American company Microsoft. A remote code execution vulnerability exists in the Microsoft Windows Layer 2 Tunneling Protocol, which can be exploited by an attacker to remotely execute code...

QNAP Systems QVPN Security Breach

QNAP Systems QVPN is a series of virtual private network software from QNAP Systems. A security vulnerability exists in QNAP Systems QVPN Device Client Windows versions prior to 2.2.0.0823, which stems from a Sensitive Information Explicit Transfer vulnerability that can be exploited by an attack...

VulnCheck KEV: CVE-2023-28229

Microsoft Windows Cryptographic Next Generation CNG Key Isolation Service contains an unspecified vulnerability that allows an attacker to gain specific limited SYSTEM privileges...

VulnCheck KEV: CVE-2023-21746

Windows NTLM Elevation of Privilege Vulnerability...

CVE-2023-40590 Untrusted search path on Windows systems leading to arbitrary code execution

GitPython is a python library used to interact with Git repositories. When resolving a program, Python/Windows look for the current working directory, and after that the PATH environment. GitPython defaults to use the git command, if a user runs GitPython from a repo has a git.exe or git...

The vulnerability of the Intel PROSet/Wireless WiFi network connection tool for Windows allows a hacker to gain increased privileges.

The vulnerability of the Intel PROSet/Wireless WiFi networking connectivity tool for Windows is related to access control deficiencies. Exploiting this vulnerability can allow attackers to gain increased privileges...

The vulnerability of the Bluetooth A2DP driver for the Windows operating system, which allows a hacker to increase their privileges

The vulnerability of the Bluetooth A2DP driver for the Windows operating system is related to deficiencies in access control. Exploiting this vulnerability can allow a remote attacker to gain increased privileges...

The vulnerability of the Windows Common Log File System (CLFS) driver in the Windows operating system allows a hacker to gain elevated privileges.

The vulnerability of the Windows Common Log File System CLFS driver in the Windows operating system is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to enhance their privileges...

The vulnerability of the Smart Card Resource Management Server, a server for managing smart card resources on the Windows operating system, allows a perpetrator to disclose protected information.

The vulnerability of the Smart Card Resource Management Server, a server for managing smart card resources on the Windows operating system, is related to the lack of protection for service data. Exploiting this vulnerability can allow attackers to disclose the protected information...

Intel NUC Security Vulnerability

Intel NUC is a small minicomputer from Intel Corporation USA. A security vulnerability exists in IntelR NUC Pro Software Suite for Windows prior to version 2.0.0.9 that originates from improper authorization management. An attacker can exploit the vulnerability to elevate privileges...

CVE-2023-36907

Windows Cryptographic Services Information Disclosure Vulnerability...

CVE-2023-36882

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability...

Zoom Client Code Issue Vulnerability

Zoom Client is a video conferencing client application from Zoom USA that supports multiple platforms. A security vulnerability previously existed in Zoom Desktop Client for Windows version 5.14.5, which stemmed from an untrusted search path issue in the installer...

PT-2023-4699 · Zoom · Zoom Desktop Client For Windows

Name of the Vulnerable Software and Affected Versions: Zoom Desktop Client for Windows versions prior to 5.15.5 Description: The issue is related to improper input validation, which may allow an authenticated user to enable information disclosure via network access. This could potentially permit ...