4902 matches found
CISA Orders Federal Agencies to Fix Actively Exploited Windows Bug
CISA is putting the thumbscrews on federal agencies to get them to patch an actively exploited Windows vulnerability. On Friday, the U.S. Cybersecurity and Infrastructure Security Agency CISA announced that it added the vulnerability – tracked as CVE-2022-21882 and with a CVSS criticality rating ...
CISA Orders Federal Agencies to Patch Actively Exploited Windows Vulnerability
The U.S. Cybersecurity and Infrastructure Security Agency CISA is urging federal agencies to secure their systems against an actively exploited security vulnerability in Windows that could be abused to gain elevated permissions on affected hosts. To that end, the agency has added CVE-2022-21882...
CVE-2021-4199
Incorrect Permission Assignment for Critical Resource vulnerability in the crash handling component BDReinit.exe as used in Bitdefender Total Security, Internet Security, Antivirus Plus, Endpoint Security Tools for Windows allows a remote attacker to escalate local privileges to SYSTEM. This issu...
PT-2022-2927 · Microsoft · Windows
Name of the Vulnerable Software and Affected Versions: Microsoft Windows affected versions not specified Description: The issue is related to the DiagTrack service in Microsoft Windows, which has insufficient access restrictions. This can be exploited by an attacker to elevate their privileges...
CVE-2021-29218
A local unquoted search path security vulnerability has been identified in HPE Agentless Management Service for Windows versions: Prior to 1.44.0.0, 10.96.0.0. This vulnerability could be exploited locally by a user with high privileges to execute malware that may lead to a loss of confidentialit...
HPE Agentless Management Service 代码问题漏洞
HPE Agentless Management Service is an agentless management service from hpe HPE in the United States. A security vulnerability exists in the version of HPE Agentless Management Service for Windows that can be exploited locally by a user with elevated privileges to execute malware, which could...
Apply those updates now: CVE bypass offers up admin privileges for Windows 10
If you’re running Windows 10, it’s time to stop delaying those patches and bring your systems up to date as soon as possible. Bleeping Computer reports that a researcher has come up with a bypass for an older bug, which could serve up some major headaches if left to fester. Those headaches will...
The vulnerability of the Win32k component in Windows operating systems arises from the insecure handling of privileges, allowing attackers to escalate their privileges.
The vulnerability of the Win32k component in Windows operating systems is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker to enhance their privileges...
VulnCheck KEV: CVE-2019-16647
Unquoted Search Path in Maxthon 5.1.0 to 5.2.7 Browser for Windows...
CVE-2022-21295
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is Prior to 6.1.32. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise...
UBUNTU-CVE-2022-21295
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is Prior to 6.1.32. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise...
CVE-2021-31854
A command Injection Vulnerability in McAfee Agent MA for Windows prior to 5.7.5 allows local users to inject arbitrary shell code into the file cleanup.exe. The malicious clean.exe file is placed into the relevant folder and executed by running the McAfee Agent deployment feature located in the...
CVE-2021-31854
A command Injection Vulnerability in McAfee Agent MA for Windows prior to 5.7.5 allows local users to inject arbitrary shell code into the file cleanup.exe. The malicious clean.exe file is placed into the relevant folder and executed by running the McAfee Agent deployment feature located in the...
Worktime 10.20 Build 4967 DLL Hijacking
/ Description: A vulnerability exists in windows that allows other applications dynamic link libraries to execute malicious code without the users consent, in the privelage context of the targeted application. Exploit Title: Worktime 10.20 Build 4967 DLL Hijacking Exploit Date: 15/01/2022 Author:...
First Patch Tuesday of 2022 Brings Fix for a Critical 'Wormable' Windows Vulnerability
Microsoft on Tuesday kicked off its first set of updates for 2022 by plugging 96 security holes across its software ecosystem, while urging customers to prioritize patching for what it calls a critical "wormable" vulnerability. Of the 96 vulnerabilities, nine are rated Critical and 89 are rated...
The vulnerability of the MSHTML platform on Microsoft Windows operating systems allows a hacker to execute arbitrary code.
The vulnerability of the MSHTML platform in Microsoft Windows systems is related to improper handling of code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code through a specially created web page...
The vulnerability of the DNS Server component of the Microsoft Windows operating system, which allows a perpetrator to execute arbitrary code.
The vulnerability of the DNS Server component of the Microsoft Windows operating system is related to improper code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the DirectWrite programming interface in Microsoft Windows operating systems allows a hacker to execute arbitrary code.
The vulnerability of the DirectWrite programming interface in Microsoft Windows operating systems is related to improper handling of code generation. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created file...