firewall-cve

firewall-cve Windows AppContainer 防火墙规则安全功能绕过漏洞 CVE-2021-41338 安全漏洞 发布时间：2021年10月12日 分配 CNA：Microsoft MITRE CVE-2021-41338 CVSS:3.1 5.5 / 5.0 攻击向量 本地 攻击复杂度 低 所需权限 低 用户交互 无 影响范围 不变 机密性 高 完整性 无 可用性 无 利用代码成熟度 概念验证 修复级别 官方修复 报告置信度 已确认 有关这些指标定义的更多信息，请参阅通用漏洞评分系统。 可利用性 下表提供了此漏洞在最初发布时的可利用性评估。 是 否 利用可能性较低...

cve-2024-49039-task_scheduler_eop_reproduction

CVE-2024-49039: Windows タスクスケジューラの権限昇格の脆弱性 概要 CVE-2024-49039 は、Windows タスクスケジューラの権限昇格 EoP 脆弱性であり、認証された攻撃者が AppContainer サンドボックスを脱出し、Low 整合性 AppContainer から Medium 整合性に昇格することを可能にします。CVSS スコア 8.8 が割り当てられており、この脆弱性は RomCom 脅威グループによって実際に積極的に悪用されています。 CVE ID : CVE-2024-49039 CVSS Score : 8.8 高 CWE :...

Windows-AppResolver-LPE-PoC

Windows AppResolver LPE PoC Proof of concept for an AppResolv...

EUVD-2019-1325

Malware in sbrugna...

EUVD-2021-18834

Malware in sbrugna...

EUVD-2019-1673

Malware in sbrugna...

EUVD-2021-21114

Malware in sbrugna...

EUVD-2017-0597

Malware in sbrugna...

EUVD-2018-1626

Malware in sbrugna...

EUVD-2017-17453

Malware in sbrugna...

EUVD-2021-27653

Malicious code in bioql PyPI...

EUVD-2021-28367

Malicious code in bioql PyPI...

EUVD-2022-35372

Malicious code in bioql PyPI...

CVE-2019-0938

An elevation of privilege vulnerability exists in Microsoft Edge that could allow an attacker to escape from the AppContainer sandbox in the browser, aka 'Microsoft Edge Elevation of Privilege Vulnerability'...

VulnCheck KEV: CVE-2024-49039

Microsoft Windows Task Scheduler contains a privilege escalation vulnerability that can allow an attacker-provided, local application to escalate privileges outside of its AppContainer, and access privileged RPC functions...

Microsoft Windows Task Scheduler Privilege Escalation Vulnerability

Microsoft Windows Task Scheduler contains a privilege escalation vulnerability that can allow an attacker-provided, local application to escalate privileges outside of its AppContainer, and access privileged RPC functions...

September 10, 2024—KB5043050 (OS Build 17763.6293) - EXPIRED

None None...

September 10, 2024—KB5042881 (OS Build 20348.2700)

None None...

Vulnerability fixed in Microsoft System Center Defender for IoT

Microsoft has fixed a vulnerability in Defender for IoT. A malicious party can exploit the vulnerability to break out of the AppContainer for IoT devices and potentially execute arbitrary code on the system where the AppContainer is implemented. Microsoft Defender for IoT:...

PT-2023-2465

Name of the Vulnerable Software and Affected Versions Microsoft Windows affected versions not specified Description The issue is related to an elevation-of-privilege vulnerability in the Windows CNG Key Isolation Service. This vulnerability is caused by synchronization errors when using a shared...