Privilege escalation

Windows WLAN Service Elevation of Privilege Vulnerability...

Windows WLAN Service Elevation of Privilege Vulnerability

...

CVE-2022-37984

CVE-2022-37984 is a Windows WLAN Service privilege elevation vulnerability. Public sources describe it as an improper privilege assignment in the Windows WLAN Service that allows a local attacker to elevate to higher privileges (impact: increased entitlements). The CNVD/ENISA entries corroborate ...

PT-2022-5245 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to an elevation-of-privilege vulnerability in the Windows WLAN Service, which is caused by errors in privilege management. This vulnerability can be exploited by an...

Microsoft Windows WLAN Service 安全漏洞

Microsoft Windows is a set of operating systems for personal devices from Microsoft Corporation USA.An elevation of privilege vulnerability exists in Microsoft Windows WLAN Service, which stems from improper privilege assignment in the application and can be exploited by an attacker to cause an...

CVE-2022-37984: Undefined Security Weakness

Windows WLAN Service Elevation of Privilege Vulnerability...

CVE-2022-37984 Windows WLAN Service Elevation of Privilege Vulnerability

...

PT-2022-1381

Name of the Vulnerable Software and Affected Versions Linux kernel versions 5.2 through 5.19.x before 5.19.16 Description A use-after-free issue in the mac80211 stack when parsing a multi-BSSID element could be exploited by attackers able to inject WLAN frames to crash the kernel and potentially...

PT-2022-1380

Name of the Vulnerable Software and Affected Versions Linux kernel versions 5.1 through 5.19.x before 5.19.16 Description The issue is related to refcounting bugs in the multi-BSS handling in the mac80211 stack, which could allow local attackers to trigger use-after-free conditions and potentiall...

Multiple MediaTek chip wlan local privilege elevation vulnerabilities

MediaTek Inc. is the world's fourth largest fab semiconductor company and a market leader in mobile devices, smart home applications, wireless connectivity technologies and IoT products, with approximately 1.5 billion devices a year with MediaTek chips built into them available around the world...

CVE-2022-32590

In wlan, there is a possible use after free due to an incorrect status check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07299425; Issue ID: ALPS07299425...

CVE-2022-32590

In wlan, there is a possible use after free due to an incorrect status check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07299425; Issue ID: ALPS07299425...

CVE-2022-26475

In wlan, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07310743; Issue ID: ALPS07310743...

CVE-2022-26475

In wlan, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07310743; Issue ID: ALPS07310743...

Out-of-bounds

In wlan, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07310743; Issue ID: ALPS07310743...

Design/Logic Flaw

In wlan, there is a possible use after free due to an incorrect status check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07299425; Issue ID: ALPS07299425...

Android vulnerabilities could allow arbitrary code execution

Several vulnerabilities have been patched in the Google Android operating system OS, the most severe of which could allow for arbitrary code execution. None of the vulnerabilities have been spotted in the wild. Operating systems contain and manage all the programs and applications that a computer...

CVE-2022-32590: Improper Check for Unusual or Exceptional Conditions

In wlan, there is a possible use after free due to an incorrect status check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07299425; Issue ID: ALPS07299425...

CVE-2022-32590

CVE-2022-32590 describes a use-after-free in the WLAN path that could enable local privilege escalation with SYSTEM privileges, requiring no user interaction. The description and Red Hat/NVD entries consistently reference a patch/Issue ID ALPS07299425. Connected documents confirm the issue is tie...

CVE-2022-26475

In wlan, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07310743; Issue ID: ALPS07310743...