Information disclosure

Client Server Run-Time Subsystem CSRSS Information Disclosure Vulnerability...

CVE-2023-23409 Client Server Run-Time Subsystem (CSRSS) Information Disclosure Vulnerability

...

CVE-2023-23394 Client Server Run-Time Subsystem (CSRSS) Information Disclosure Vulnerability

...

Client Server Run-Time Subsystem (CSRSS) Information Disclosure Vulnerability

...

KLA48553 Multiple vulnerabilities in Microsoft Windows

Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to gain privileges, execute arbitrary code, obtain sensitive information, spoof user interface, cause denial of service, bypass security restrictions. Below is a complete list of...

CVE-2023-23409: Improper Input Validation

Client Server Run-Time Subsystem CSRSS Information Disclosure Vulnerability...

CVE-2023-23394: Untrusted Pointer Dereference

Client Server Run-Time Subsystem CSRSS Information Disclosure Vulnerability...

Microsoft Windows Multiple Vulnerabilities (KB5021235)

This host is missing an important security update according to Microsoft KB5021235 SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

CVE-2022-44673

Windows Client Server Run-time Subsystem CSRSS Elevation of Privilege Vulnerability...

CVE-2022-44673: Undefined Security Weakness

Windows Client Server Run-time Subsystem CSRSS Elevation of Privilege Vulnerability...

Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability

...

CVE-2022-37987: Undefined Security Weakness

Windows Client Server Run-time Subsystem CSRSS Elevation of Privilege Vulnerability...

CVE-2022-37989: Undefined Security Weakness

Windows Client Server Run-time Subsystem CSRSS Elevation of Privilege Vulnerability...

CVE-2022-22049 Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability

...

CVE-2022-22026

CVE-2022-22026 is a Windows CSRSS Elevation of Privilege vulnerability. The connected document confirms it as one of the CSRSS issues fixed during the July 2022 Patch Tuesday cycle, noting that two other CSRSS flaws (CVE-2022-22047 and CVE-2022-22049) were also fixed. The exact affected product s...

PT-2022-3591 · Microsoft · Windows Client Server Run-Time Subsystem +1

Name of the Vulnerable Software and Affected Versions: Windows Client Server Run-time Subsystem CSRSS affected versions not specified Description: The issue is related to insufficient access restrictions in the Client Server Run-time Subsystem CSRSS of the Windows operating system. It allows an...

CVE-2022-22047: Untrusted Search Path

Windows Client Server Run-time Subsystem CSRSS Elevation of Privilege Vulnerability...

CVE-2022-22049: Out-of-bounds Write

Windows Client Server Run-time Subsystem CSRSS Elevation of Privilege Vulnerability...

CVE-2022-22026: Out-of-bounds Write

Windows Client Server Run-time Subsystem CSRSS Elevation of Privilege Vulnerability...

Microsoft Windows CSRSS Security Feature Bypass Vulnerability

The Client-Server Run-time Subsystem CSRSS in Microsoft mismanages process tokens, which allows local users to gain privileges via a crafted application...