firewall-cve

firewall-cve Vulnerabilidad de omisión de la función de seguridad de las reglas de firewall de AppContainer de Windows CVE-2021-41338 Vulnerabilidad de seguridad publicada: 12 de octubre de 2021 CNA asignado: Microsoft MITRE CVE-2021-41338 CVSS:3.1 5.5 / 5.0 Vector de ataque Local Complejidad de...

cve-2024-49039-task_scheduler_eop_reproduction

CVE-2024-49039: Windows 任务计划程序特权提升漏洞 概述 CVE-2024-49039 是一个 Windows 任务计划程序特权提升（EoP）漏洞，允许经过身份验证的攻击者逃离 AppContainer 沙箱，从低完整性（AppContainer）提升至中完整性。该漏洞的 CVSS 评分为 8.8，已被 RomCom 威胁组在野外积极利用。 CVE ID : CVE-2024-49039 CVSS 评分 : 8.8（高） CWE : CWE-287（认证不当） 发现者 : Google 威胁分析组（TAG） 利用者 : RomCom 组 影响 :...

Windows-AppResolver-LPE-PoC

Windows AppResolver LPE PoC Proof of concept for an AppResolv...

EUVD-2021-18834

Malware in sbrugna...

EUVD-2019-1325

Malware in sbrugna...

EUVD-2019-1673

Malware in sbrugna...

EUVD-2021-21114

Malware in sbrugna...

EUVD-2018-1626

Malware in sbrugna...

EUVD-2017-0597

Malware in sbrugna...

EUVD-2017-17453

Malware in sbrugna...

EUVD-2021-28367

Malicious code in bioql PyPI...

EUVD-2021-27653

Malicious code in bioql PyPI...

EUVD-2022-35372

Malicious code in bioql PyPI...

CVE-2019-0938

An elevation of privilege vulnerability exists in Microsoft Edge that could allow an attacker to escape from the AppContainer sandbox in the browser, aka 'Microsoft Edge Elevation of Privilege Vulnerability'...

VulnCheck KEV: CVE-2024-49039

Microsoft Windows Task Scheduler contains a privilege escalation vulnerability that can allow an attacker-provided, local application to escalate privileges outside of its AppContainer, and access privileged RPC functions...

Microsoft Windows Task Scheduler Privilege Escalation Vulnerability

Microsoft Windows Task Scheduler contains a privilege escalation vulnerability that can allow an attacker-provided, local application to escalate privileges outside of its AppContainer, and access privileged RPC functions...

September 10, 2024—KB5043050 (OS Build 17763.6293) - EXPIRED

None None...

September 10, 2024—KB5042881 (OS Build 20348.2700)

None None...

Vulnerability fixed in Microsoft System Center Defender for IoT

Microsoft has fixed a vulnerability in Defender for IoT. A malicious party can exploit the vulnerability to break out of the AppContainer for IoT devices and potentially execute arbitrary code on the system where the AppContainer is implemented. Microsoft Defender for IoT:...

PT-2023-2465 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Microsoft Windows affected versions not specified Description: The issue is related to an elevation-of-privilege vulnerability in the Windows CNG Key Isolation Service. This vulnerability is caused by synchronization errors when using a share...