4912 matches found
CVE-2023-23410
Windows HTTP.sys Elevation of Privilege Vulnerability...
CVE-2023-23385
Windows Point-to-Point Protocol over Ethernet PPPoE Elevation of Privilege Vulnerability...
PT-2023-1868 · Microsoft · Windows
Name of the Vulnerable Software and Affected Versions: Windows versions prior to the fixed version Description: The issue is related to insufficient input validation in the HTTP protocol stack implementation, specifically in the http.sys component of Windows operating systems. This can be exploit...
PT-2023-1785 · Microsoft · Postscript/Pcl6 Class Printer Driver +1
Name of the Vulnerable Software and Affected Versions: Microsoft PostScript and PCL6 Class Printer Driver affected versions not specified Description: The issue is related to insufficient input validation in the PCL6 Class Printer Driver for Windows operating systems. This allows a remote attacke...
Security Vulnerabilities fixed in Firefox ESR 102.9 — Mozilla
Sometimes, when invalidating JIT code while following an iterator, the newly generated code could be overwritten incorrectly. This could lead to a potentially exploitable crash. Dragging a URL from a cross-origin iframe that was removed during the drag could have led to user confusion and website...
PT-2023-1778 · Microsoft · Windows
Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to insufficient input validation in the Remote Procedure Call Runtime. It allows remote attackers to execute arbitrary code on the system. Recommendations: At the momen...
PT-2023-1724 · Microsoft · Postscript/Pcl6 Class Printer Driver +1
Name of the Vulnerable Software and Affected Versions: Microsoft PostScript and PCL6 Class Printer Driver affected versions not specified Description: The issue is related to insufficient access restrictions in the PCL6 Class Printer Driver for Windows operating systems. It allows a remote attack...
Microsoft Internet Control Message Protocol 安全漏洞
Microsoft Internet Control Message Protocol ICMP is a remote code execution vulnerability in Microsoft Internet Control Message Protocol ICMP, an ICMP protocol used in Windows. A remote code execution vulnerability exists in Microsoft Internet Control Message Protocol ICMP, which could be exploit...
PT-2023-1745 · Microsoft · Postscript/Pcl6 Class Printer Driver +1
Name of the Vulnerable Software and Affected Versions: Microsoft PostScript and PCL6 Class Printer Driver affected versions not specified Description: The issue is related to insufficient input validation in the PCL6 Class Printer Driver for Windows operating systems. This allows a remote attacke...
PT-2023-1730 · Microsoft · Windows
Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to insufficient input validation in the Secure Channel Schannel component of Windows operating systems. This can be exploited to cause a denial of service...
The vulnerability of the win32kfull driver in the Windows operating system allows a hacker to execute arbitrary code.
The vulnerability of the win32kfull driver in the Windows operating system is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to execute arbitrary code with system privileges...
CVE-2022-41722
A path traversal vulnerability exists in filepath.Clean on Windows. On Windows, the filepath.Clean function could transform an invalid path such as "a/../c:/b" into the valid path "c:\b". This transformation of a relative if invalid path into an absolute path could enable a directory traversal...
CVE-2022-41722 Path traversal on Windows in path/filepath
A path traversal vulnerability exists in filepath.Clean on Windows. On Windows, the filepath.Clean function could transform an invalid path such as "a/../c:/b" into the valid path "c:\b". This transformation of a relative if invalid path into an absolute path could enable a directory traversal...
CVE-2022-3884 Directory Permission Vulnerability in Hitachi Ops Center Analyzer
Incorrect Default Permissions vulnerability in Hitachi Ops Center Analyzer on Windows Hitachi Ops Center Analyzer RAID Agent component allows local users to read and write specific files.This issue affects Hitachi Ops Center Analyzer: from 10.9.0-00 before 10.9.0-01...
The vulnerability of the Internet Storage Name Service (iSNS) for Windows operating systems allows a perpetrator to cause service failures.
The vulnerability of the Internet Storage Name Service iSNS on Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service failures remotely...
The vulnerability of the PostScript Printer Driver (Pscript) in Windows operating systems allows a hacker to gain unauthorized access to protected information.
The vulnerability of the PostScript Printer Driver Pscript on Windows operating systems is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...
The vulnerability of the Internet Storage Name Service (iSNS) for Windows operating systems allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the Internet Storage Name Service iSNS for Windows operating systems is related to insufficient protection of service data due to operations going beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected...
SUSE CVE-2023-0932
Use after free in WebRTC in Google Chrome on Windows prior to 110.0.5481.177 allowed a remote attacker who convinced the user to engage in specific UI interactions to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...
The vulnerability of the Protected Extensible Authentication Protocol (PEAP) implementation in Windows operating systems allows a perpetrator to execute arbitrary code.
The vulnerability of the Protected Extensible Authentication Protocol PEAP implementation in Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...