The vulnerability affects the runtime of procedure calls in the Microsoft Windows operating system, allowing an attacker to execute arbitrary code.

The vulnerability of remote procedure call runtime in the Microsoft Windows operating system is related to improper code generation management. Exploitation of this vulnerability can allow a malicious actor to execute arbitrary code remotely...

CVE-2022-24540

Windows ALPC Elevation of Privilege Vulnerability...

CVE-2022-24546

Windows DWM Core Library Elevation of Privilege Vulnerability...

CVE-2022-24488

Windows Desktop Bridge Elevation of Privilege Vulnerability...

CVE-2022-24496

Windows Local Security Authority LSA Elevation of Privilege Vulnerability...

CVE-2022-24487

Windows Local Security Authority Subsystem Service LSASS Remote Code Execution Vulnerability...

CVE-2022-24474

Windows Win32k Elevation of Privilege Vulnerability...

CVE-2022-24474

Windows Win32k Elevation of Privilege Vulnerability...

Privilege escalation

Windows Print Spooler Elevation of Privilege Vulnerability...

CVE-2022-26904 Windows User Profile Service Elevation of Privilege Vulnerability

...

CVE-2022-26807 Windows Work Folder Service Elevation of Privilege Vulnerability

...

CVE-2022-26784 Windows Cluster Shared Volume (CSV) Denial of Service Vulnerability

...

CVE-2022-24521 Windows Common Log File System Driver Elevation of Privilege Vulnerability

...

Amazon AWS VPN Client 安全漏洞

Amazon AWS VPN Client is a fully managed remote access VPN solution from Amazon.com, Inc. A security vulnerability exists in Amazon AWS VPN Client for Windows version 2.0.0, which stems from the disclosure of a user's Net-NTLMv2 hash when importing VPN configuration files. information, an attacke...

CVE-2022-0915

There is a Time-of-check Time-of-use TOCTOU Race Condition Vulnerability in Logitech Sync for Windows prior to 2.4.574. Successful exploitation of these vulnerabilities may escalate the permission to the system user...

Code injection

GitHub: Git for Windows' uninstaller vulnerable to DLL hijacking when run under the SYSTEM user account...

CVE-2022-24765 Uncontrolled search for the Git directory in Git for Windows

Git for Windows is a fork of Git containing Windows-specific patches. This vulnerability affects users working on multi-user machines, where untrusted parties have write access to the same hard disk. Those untrusted parties could create the folder C:.git, which would be picked up by Git operation...

Microsoft Windows Remote Desktop Protocol 代码注入漏洞

A remote code execution vulnerability exists in Microsoft Windows Remote Desktop Protocol RDP, an application used by Microsoft to connect to remote Windows desktops. The vulnerability stems from the failure of a networked system or product to properly filter special elements of code segments...

Logitech Sync for Windows 安全漏洞

Logitech Sync for Windows is a crossover application from Logitech Switzerland. A security vulnerability exists in Logitech Sync for Windows versions prior to 2.4.574, which could be exploited by an attacker to elevate privileges...

Microsoft Windows Common Log File System Driver输入验证错误漏洞

The Microsoft Windows Common Log File System Driver is Microsoft's Common Log File System CLFS API that provides a high-performance, general-purpose log file subsystem that can be used by specialized client applications and shared by multiple clients to optimize logging and access. access. A...