4902 matches found
The vulnerability of the Windows operating system, related to the exposure of protected information, allows a perpetrator to gain access to protected information.
The vulnerability of the Windows operating system is related to the exposure of protected information. Exploiting this vulnerability can allow an attacker to gain access to protected information...
The vulnerability of the Windows operating system, related to errors in security settings, allows a perpetrator to bypass the security mechanisms.
The vulnerability of the Windows operating system is related to security configuration errors. Exploiting this vulnerability can allow a remote attacker to bypass security measures...
The vulnerability of the Active Directory Federation Services (ADFS) on the Windows operating system allows a perpetrator to bypass the security measures.
The vulnerability of the Active Directory Federation Services AD FS on Windows operating systems is related to security configuration errors. Exploiting this vulnerability can allow a malicious actor to bypass security measures...
CVE-2021-26442 Windows HTTP.sys Elevation of Privilege Vulnerability
...
Microsoft Windows 输入验证错误漏洞
Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft Corporation USA. An input validation error vulnerability exists in Microsoft Windows Network Address Translation NAT. The following products and editions are affected:Windows 10 Version 1809 for 32-bit...
PT-2021-4372 · Microsoft · Windows Fast Fat File System Driver +1
Name of the Vulnerable Software and Affected Versions: Windows Fast FAT File System Driver affected versions not specified Description: The issue is related to the disclosure of protected information. It may allow an attacker to elevate their privileges and obtain sensitive information, potential...
PT-2021-4373 · Microsoft · Windows
Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to an elevation-of-privilege vulnerability in the Storage Spaces Controller, which is caused by errors in privilege management. This vulnerability can be exploited by a...
PT-2021-4385 · Microsoft · Windows
Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to errors in security settings, allowing a remote attacker to bypass the system's protection mechanism. This security-feature bypass vulnerability enables attackers to...
Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Microsoft
Usage Make sure Python and ncat are installed...
CVE-2021-37958
Inappropriate implementation in Navigation in Google Chrome on Windows prior to 94.0.4606.54 allowed a remote attacker to inject scripts or HTML into a privileged page via a crafted HTML page...
Exploit for CVE-2017-0144
This is a PoC exploit for CVE-2017-0144, also known as the EternalBlue vulnerability, which is a remote code execution vulnerability in the Windows SMBv1 protocol. The exploit is implemented as a Metasploit module, and it targets the Double Pulsar backdoor. The target product/service is the Windo...
ZOOM Zoom Client 安全漏洞
Zoom Client is a multi-platform video conferencing client application from Zoom ZOOM, a U.S. company. versions prior to Zoom Client for Meetings for Windows 5.4.0 contain a security vulnerability that could be exploited to launch Internet Explorer with elevated privileges...
CVE-2021-31847
Improper access control vulnerability in the repair process for McAfee Agent for Windows prior to 5.7.4 could allow a local attacker to perform a DLL preloading attack using unsigned DLLs. This would result in elevation of privileges and the ability to execute arbitrary code as the system user,...
Mcafee McAfee Agent 数据伪造问题漏洞
Mcafee McAfee Agent MA is a Mcafee client component that provides secure communication between ePolicy Orchestrator antivirus management platform and managed products. A Data Forgery Issue vulnerability previously existed in McAfee Agent for Windows version 5.7.4, which could allow a local user t...
Microsoft MSHTML Flaw Exploited by Ryuk Ransomware Gang
Criminals behind the Ryuk ransomware were early exploiters of the Windows MSHTML flaw, actively leveraging the bug in campaigns ahead of a patch released by Microsoft this week. Collaborative research by Microsoft and RiskIQ revealed campaigns by Ryuk threat actors early on that exploited the fla...
CVE-2021-38628
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability...
CVE-2021-36969
Windows Redirected Drive Buffering SubSystem Driver Information Disclosure Vulnerability...
Privilege escalation
Windows Redirected Drive Buffering System Elevation of Privilege Vulnerability...