CVE-2024-8233 vulnerabilities

Vulnerabilities for packages: gitlab-cng-fips...

CVE-2024-12570 vulnerabilities

Vulnerabilities for packages: gitlab-cng-fips...

CVE-2024-12292 vulnerabilities

Vulnerabilities for packages: gitlab-cng-fips...

CVE-2024-11274 vulnerabilities

Vulnerabilities for packages: gitlab-cng-fips...

CVE-2024-42367 vulnerabilities

Vulnerabilities for packages: checkov, dask-gateway, py3-cassandra-medusa, airflow, kserve, request-1276, nemo...

CVE-2024-30031

Windows CNG Key Isolation Service Elevation of Privilege Vulnerability...

CVE-2024-30031 Windows CNG Key Isolation Service Elevation of Privilege Vulnerability

...

PT-2024-3705 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to a use-after-free memory error in the CNG Key Isolation service of Windows operating systems. This can be exploited by a remote attacker to elevate their privileges...

KLA67433 Multiple vulnerabilities in Microsoft Windows

Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to execute arbitrary code, gain privileges, cause denial of service, obtain sensitive information, bypass security restrictions. Below is a complete list of vulnerabilities: 1. A remote cod...

Microsoft Windows CNG Key Isolation Service Privilege Escalation Vulnerability

Microsoft Windows Cryptographic Next Generation CNG Key Isolation Service contains an unspecified vulnerability that allows an attacker to gain specific limited SYSTEM privileges...

Amazon Linux 2 : python38 (ALASPYTHON3.8-2023-009)

The version of python38 installed on the remote host is prior to 3.8.5-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2PYTHON3.8-2023-009 advisory. The CryptProtectMemory function in cng.sys aka the Cryptography Next Generation driver in the kernel- mode driver...

Medium: python38

Issue Overview: The CryptProtectMemory function in cng.sys aka the Cryptography Next Generation driver in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, an...

CVE-2023-35340

Windows CNG Key Isolation Service Elevation of Privilege Vulnerability...

Privilege escalation

Windows CNG Key Isolation Service Elevation of Privilege Vulnerability...

CVE-2023-35340 Windows CNG Key Isolation Service Elevation of Privilege Vulnerability

...

CVE-2023-35340

Microsoft Windows CVE-2023-35340 affects the CNG Key Isolation Service and is a local elevation-of-privilege vulnerability. It has a CVSS v3.1 base score of 7.8 (AV:L, AC:H, PR:L, UI:N, S:C, C:H, I:H, A:H). The provided documents identify the affected component and impact but do not include explo...

CVE-2023-28229

Windows CNG Key Isolation Service Elevation of Privilege Vulnerability...

Privilege escalation

Windows CNG Key Isolation Service Elevation of Privilege Vulnerability...

CVE-2023-28229

CVE-2023-28229 is a Windows vulnerability in the Cryptographic Next Generation (CNG) Key Isolation Service described as a privilege-escalation flaw. The CVE entry is linked to active exploitation in practice (CISA KEV) and is categorized with a high impact vector (local access, total impact on co...

PT-2023-2465 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Microsoft Windows affected versions not specified Description: The issue is related to an elevation-of-privilege vulnerability in the Windows CNG Key Isolation Service. This vulnerability is caused by synchronization errors when using a share...