Lucene search
K

18 matches found

CISA KEV Catalog
CISA KEV Catalog
added 2022/03/28 12:0 a.m.30 views

Microsoft Windows Privilege Escalation Vulnerability

Microsoft Windows COM Aggregate Marshaler allows for privilege escalation when an attacker runs a specially crafted application...

7.3CVSS5.9AI score0.92573EPSS
In wildExploits13
Tenable Nessus
Tenable Nessus
added 2019/03/13 12:0 a.m.86 views

KB4467702: Windows 10 Version 1803 and Windows Server Version 1803 November 2018 Security Update

The remote Windows host is missing security update 4467702. It is, therefore, affected by multiple vulnerabilities : - A security feature bypass vulnerability exists in Microsoft JScript that could allow an attacker to bypass Device Guard. CVE-2018-8417 - An elevation of privilege vulnerability...

10CVSS8.1AI score0.74168EPSS
Exploits9References18
Tenable Nessus
Tenable Nessus
added 2019/03/13 12:0 a.m.71 views

KB4467708: Windows 10 Version 1809 and Windows Server 2019 November 2018 Security Update

The remote Windows host is missing security update 4467708. It is, therefore, affected by multiple vulnerabilities : - A security feature bypass vulnerability exists in Microsoft JScript that could allow an attacker to bypass Device Guard. CVE-2018-8417 - A remote code execution vulnerability...

10CVSS7.8AI score0.74168EPSS
Exploits12References30
VulnCheck KEV
VulnCheck KEV
added 2018/12/21 12:0 a.m.0 views

VulnCheck KEV: CVE-2017-0213

Microsoft Windows COM Aggregate Marshaler allows for privilege escalation when an attacker runs a specially crafted application...

7.3CVSS6.7AI score0.92573EPSS
Exploits13References1
CNVD
CNVD
added 2018/11/15 12:0 a.m.1 views

Microsoft Windows COM Aggregate Marshaler Elevation of Privilege Vulnerability

Microsoft Windows Server 2019 and others are operating systems released by Microsoft Corporation USA.Windows COM Aggregate Marshaler is one of the components. An elevation of privilege vulnerability exists in Microsoft Windows COM Aggregate Marshaler. An attacker can exploit this vulnerability an...

7.8CVSS8.8AI score0.09636EPSS
Exploits4References1
OSV
OSV
added 2018/11/14 1:29 a.m.1 views

CVE-2018-8550

An elevation of privilege exists in Windows COM Aggregate Marshaler, aka "Windows COM Elevation of Privilege Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows...

7.8CVSS7.3AI score0.09636EPSS
Exploits4References4
ATTACKERKB
ATTACKERKB
added 2018/11/14 1:29 a.m.1 views

CVE-2018-8550

An elevation of privilege exists in Windows COM Aggregate Marshaler, aka "Windows COM Elevation of Privilege Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows...

7.8CVSS5.5AI score0.09636EPSS
Exploits4References5
CVE
CVE
added 2018/11/14 1:0 a.m.162 views

CVE-2018-8550

CVE-2018-8550 is a local elevation-of-privilege flaw in Windows COM Aggregate Marshaler. The vulnerability allows an attacker with local access to run code with elevated privileges on affected Windows versions (Windows 7, Windows 8.1/10 family, and corresponding Server SKUs). Public references (e...

7.8CVSS7.2AI score0.09636EPSS
Exploits4References4Affected Software8
OpenVAS
OpenVAS
added 2018/11/14 12:0 a.m.172 views

Microsoft Windows Multiple Vulnerabilities (KB4467697)

This host is missing a critical security update according to Microsoft KB4467697. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

10CVSS7AI score0.74168EPSS
Exploits10References1
Microsoft CVE
Microsoft CVE
added 2018/11/13 8:0 a.m.36 views

Windows COM Elevation of Privilege Vulnerability

An elevation of privilege exists in Windows COM Aggregate Marshaler. An attacker who successfully exploited the vulnerability could run arbitrary code with elevated privileges. To exploit the vulnerability, an attacker could run a specially crafted application that could exploit the vulnerability...

7.8CVSS5.6AI score0.09636EPSS
Exploits4
Tenable Nessus
Tenable Nessus
added 2018/11/13 12:0 a.m.236 views

KB4467106: Windows 7 and Windows Server 2008 R2 November 2018 Security Update

The remote Windows host is missing security update 4467106 or cumulative update 4467107. It is, therefore, affected by multiple vulnerabilities : - A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer. The vulnerability...

10CVSS8.3AI score0.74168EPSS
Exploits10References17
Exploit DB
Exploit DB
added 2017/05/17 12:0 a.m.128 views

Microsoft Windows - COM Aggregate Marshaler/IRemUnknown2 Type Confusion Privilege Escalation

/ Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1107 Windows: COM Aggregate Marshaler/IRemUnknown2 Type Confusion EoP Platform: Windows 10 10586/14393 not tested 8.1 Update 2 Class: Elevation of Privilege Summary: When accessing an OOP COM object using IRemUnknown2 the local...

7.2CVSS7AI score0.01396EPSS
Exploits4
NVD
NVD
added 2017/05/12 2:29 p.m.22 views

CVE-2017-0213

Windows COM Aggregate Marshaler in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an elevation privilege vulnerability when an attacker runs a speciall...

7.3CVSS5.7AI score0.92573EPSS
Exploits13References5
Prion
Prion
added 2017/05/12 2:29 p.m.35 views

Privilege escalation

Windows COM Aggregate Marshaler in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an elevation privilege vulnerability when an attacker runs a speciall...

1.9CVSS5.6AI score0.92573EPSS
Exploits14References4Affected Software3
CVE
CVE
added 2017/05/12 2:0 p.m.1329 views

CVE-2017-0213

CVE-2017-0213 is a Windows privilege-escalation flaw in the COM Aggregate Marshaler that can be triggered by a specially crafted application to gain elevated privileges locally. Public documentation confirms affected OS ranges including Windows 7 SP1, Windows Server 2008 SP2/R2 SP1, Windows 8.1, ...

7.3CVSS5.9AI score0.92573EPSS
In wildExploits13References5Affected Software10
Cvelist
Cvelist
added 2017/05/12 2:0 p.m.29 views

CVE-2017-0213

Windows COM Aggregate Marshaler in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an elevation privilege vulnerability when an attacker runs a speciall...

6AI score0.92573EPSS
Exploits13References4
ATTACKERKB
ATTACKERKB
added 2017/05/12 12:0 a.m.112 views

CVE-2017-0213

Windows COM Aggregate Marshaler in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an elevation privilege vulnerability when an attacker runs a speciall...

7.3CVSS5.9AI score0.92573EPSS
In wildExploits14References6
Tenable Nessus
Tenable Nessus
added 2017/05/09 12:0 a.m.340 views

KB4019472: Windows 10 Version 1607 and Windows Server 2016 May 2017 Cumulative Update

The remote Windows host is missing security update KB4019472. It is, therefore, affected by multiple vulnerabilities : - A security bypass vulnerability exists in Internet Explorer due to an unspecified flaw. An unauthenticated, remote attacker can exploit this, by convincing a user to visit a...

9.3CVSS7.6AI score0.92573EPSS
Exploits22References42
Rows per page
Query Builder