Дырка в API Windows NT 4.0 (GetFullPathName buffer overflow)

Переполнение буфера в GetFullPathName...

CVE-2022-32510

An issue was discovered on certain Nuki Home Solutions devices. The HTTP API exposed by a Bridge used an unencrypted channel to provide an administrative interface. A token can be easily eavesdropped by a malicious actor to impersonate a legitimate user and gain access to the full set of API...

Security Update for Windows XP (KB935839)

A security issue has been identified that could allow an attacker to compromise your Windows-based system using a Windows kernel API and gain control over it. You can help protect your computer by installing this update from Microsoft. After you install this item, you may have to restart your...

Security Update for Windows Server 2003 (KB935839)

A security issue has been identified that could allow an attacker to compromise your Windows-based system using a Windows kernel API and gain control over it. You can help protect your computer by installing this update from Microsoft. After you install this item, you may have to restart your...