CVE-2021-28311

Windows Application Compatibility Cache Denial of Service Vulnerability...

Microsoft Windows Remote Procedure Call Runtime 代码注入漏洞

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation, an operating system for personal devices, and Microsoft Windows Server is a server operating system. Microsoft Windows and Windows Server have a remote code execution vulnerability that can be exploited by...

PT-2021-2684 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to an elevation of privilege vulnerability. It is associated with errors in managing privileges. Exploitation of this vulnerability could allow an attacker to elevate...

PT-2021-2736 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Microsoft Windows affected versions not specified Description: The issue is related to errors in code generation management in the Remote Procedure Call Runtime. It allows remote attackers to execute arbitrary code and affect the system...

PT-2021-2738 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to incorrect code generation management in the GDI+ component of Windows operating systems. It allows remote attackers to execute arbitrary code, affecting the system...

PT-2021-2658 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Microsoft Windows affected versions not specified Description: The issue is related to insufficient access restrictions in the Diagnostics Hub Standard Collector Service of Microsoft Windows operating systems. This can allow an attacker to...

PT-2021-2719 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to incorrect code generation management in the GDI+ component of Microsoft Windows operating systems. It allows remote attackers to execute arbitrary code using a...

PT-2021-2659

Name of the Vulnerable Software and Affected Versions Microsoft Windows affected versions not specified Description The issue is related to insufficient access restrictions in the Diagnostics Hub Standard Collector Service of Microsoft Windows operating systems. This can be exploited to elevate...

PT-2021-2693 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to errors in security settings of the Early Launch Antimalware ELAM driver in Microsoft Windows operating systems. This allows an attacker to bypass security features...

PT-2021-2623 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to the implementation of the Server Message Block SMB protocol in Microsoft Windows, which lacks sufficient protection of service data. This can allow a remote attacker...

Microsoft Windows WLAN AutoConfig Service 安全特征问题漏洞

Microsoft Windows WLAN AutoConfig Service is a wireless network card configuration service for Windows Vista and above operating systems from Microsoft Corporation USA. The Microsoft Windows WLAN AutoConfig Service is vulnerable to a security feature issue. Windows 10 Version 1809 for x64-based...

PT-2021-2590

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description The issue is related to insufficient protection of service data in the port mapping configuration of Microsoft Windows, allowing an attacker to gain unauthorized access to protected...

PT-2021-2617 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Microsoft Windows affected versions not specified Description: The issue is related to incorrect code generation management in the Procedure Call Runtime component of Microsoft Windows operating systems. This can be exploited by a remote...

CVE-2021-21196

Heap buffer overflow in TabStrip in Google Chrome on Windows prior to 89.0.4389.114 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

Vulnerabilities fixed in ClamAV

Vulnerabilities have been fixed in ClamAV. A malicious party could vulnerabilities potentially exploit them to cause a denial-of-service cause or execute arbitrary code with the permissions with which the service is running. By exploiting the vulnerability with CVE attribute CVE-2021-1386, a...

The vulnerability of the ActiveX Installer Service on the Windows operating system, which allows a hacker to increase their privileges

The vulnerability of the ActiveX Installer Service component in the Windows operating system is related to insecure management of privileges. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability of the Media Foundation component in Windows operating systems, which allows a hacker to execute arbitrary code.

The vulnerability of the Media Foundation component in Windows operating systems is related to insecure management of privileges. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the Windows operating system, related to the lack of protection for service data, allows attackers to disclose the protected information.

The vulnerability of the Windows operating system is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker to disclose the protected information...

The vulnerability of the Windows Print Spooler component in Windows operating systems allows attackers to exploit their privileges.

The vulnerability of the Windows Print Spooler component in Windows operating systems is related to insecure management of privileges. Exploiting this vulnerability can allow attackers to enhance their privileges...

Cisco Jabber for Windows 安全漏洞

Cisco Jabber is a web conferencing and instant messaging application that allows users to send messages over the Extensible Messaging and Status Protocol XMPP. Cisco Jabber suffers from a code execution vulnerability that stems from an email content validation error. An attacker could exploit thi...