4912 matches found
Improper access control
Cloudflare WARP client for Windows up to v2023.3.381.0 allowed a malicious actor to remotely access the warp-svc.exe binary due to an insufficient access control policy on an IPC Named Pipe. This would have enabled an attacker to trigger WARP connect and disconnect commands, as well as obtaining...
The vulnerability of the Resilient File System (ReFS) in Windows operating systems allows a perpetrator to execute arbitrary code.
The vulnerability of the Resilient File System ReFS in Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability allows an attacker to execute arbitrary code by installing a specially created VHD file...
The vulnerability of the Microsoft ODBC operating system driver allows a hacker to execute arbitrary code.
The vulnerability of the Microsoft ODBC operating system driver for Windows is related to insufficient validation of input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
CVE-2023-32214
Protocol handlers ms-cxh and ms-cxh-full could have been leveraged to trigger a denial of service. Note: This attack only affects Windows. Other operating systems are not affected. This vulnerability affects Firefox 113, Firefox ESR 102.11, and Thunderbird 102.11...
CVE-2023-34642
KioWare for Windows through v8.33 was discovered to contain an incomplete blacklist filter for blocked dialog boxes on Windows 10. This issue can allow attackers to open a file dialog box via the function showDirectoryPicker which can then be used to open an unprivileged command prompt...
CVE-2023-0009 GlobalProtect App: Local Privilege Escalation (PE) Vulnerability
A local privilege escalation PE vulnerability in the Palo Alto Networks GlobalProtect app on Windows enables a local user to execute programs with elevated privileges...
CVE-2023-29361
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability...
CVE-2023-32010
Windows Bus Filter Driver Elevation of Privilege Vulnerability...
CVE-2023-29364
Windows Authentication Elevation of Privilege Vulnerability...
Palo Alto Networks GlobalProtect 安全漏洞
Palo Alto Networks GlobalProtect is a suite of network protection software from Palo Alto Networks, USA. The software provides features such as firewall monitoring and threat prevention. A security vulnerability exists in Palo Alto Networks GlobalProtect versions prior to 6.1.1 windows, prior to...
Microsoft Windows CryptoAPI安全漏洞
Microsoft Windows CryptoAPI is a cryptographic compiler added to the Windows operating system by Microsoft. CryptoAPI supports synchronous and asynchronous key encryption and the management of digital certificates in the operating system as the basis for data encryption and decryption functions. ...
PT-2023-3130 · Microsoft · Windows
Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to a security feature bypass in the implementation of the Remote Desktop Protocol RDP in the Windows operating system, associated with insufficient access restrictions...
Zoom Client 数据伪造问题漏洞
Zoom Client is a video conferencing client application from Zoom USA that supports multiple platforms. A security vulnerability exists in Zoom for Windows clients versions prior to 5.13.5 that stems from incorrect cryptographic signature verification. An attacker can exploit this vulnerability to...
Microsoft Windows PGM 安全漏洞
Microsoft Windows is a suite of operating systems for use on personal devices from the U.S.-based Microsoft Corporation Microsoft. A security vulnerability exists in Microsoft Windows PGM. An attacker could exploit this vulnerability to remotely execute code. The following products and versions a...
Cisco AnyConnect Secure Mobility Client for Windows Privilege Escalation (cisco-sa-ac-csc-privesc-wx4U4Kw)
The version of Cisco AnyConnect Secure Mobility Client installed on the remote host is prior to 4.10.07061. It is, therefore, affected by a privilege escalation vulnerability that exists because improper permissions are assigned to a temporary directory that is created during the upgrade process...
Cisco AnyConnect Secure Mobility Client for Windows 安全漏洞
Cisco AnyConnect Secure Mobility Client for Windows is a Windows-based secure mobility client from Cisco that provides secure access to networks and applications from any device. A security vulnerability exists in Cisco AnyConnect Secure Mobility Client Software for Windows and Secure Client...
CVE-2022-35755
Windows Print Spooler Elevation of Privilege Vulnerability...
CVE-2022-35759
Windows Local Security Authority LSA Denial of Service Vulnerability...
