CVE-2023-41766: Untrusted Search Path

Windows Client Server Run-time Subsystem CSRSS Elevation of Privilege Vulnerability...

CVE-2023-23409

Client Server Run-Time Subsystem CSRSS Information Disclosure Vulnerability...

CVE-2023-23394

Client Server Run-Time Subsystem CSRSS Information Disclosure Vulnerability...

CVE-2023-23394

Client Server Run-Time Subsystem CSRSS Information Disclosure Vulnerability...

CVE-2023-23409 Client Server Run-Time Subsystem (CSRSS) Information Disclosure Vulnerability

...

CVE-2023-23409

CVE-2023-23409 corresponds to a CSRSS Information Disclosure vulnerability. The available data indicate a local attack vector with low attack complexity and low privileges required, yielding a high confidentiality impact (CVSS 3.1: AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N). The description notes CSRSS...

CVE-2023-23394 Client Server Run-Time Subsystem (CSRSS) Information Disclosure Vulnerability

...

CVE-2023-23394

Technical details for CVE-2023-23394 are not provided in the connected documents. They reference CSRSS generally and Windows updates (DCOM hardening, LSASS, domain join issues) but do not specify affected products/versions or exploit details. Monitor for updates.

CVE-2023-23409: Improper Input Validation

Client Server Run-Time Subsystem CSRSS Information Disclosure Vulnerability...

CVE-2023-23394: Untrusted Pointer Dereference

Client Server Run-Time Subsystem CSRSS Information Disclosure Vulnerability...

KLA48553 Multiple vulnerabilities in Microsoft Windows

Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to gain privileges, execute arbitrary code, obtain sensitive information, spoof user interface, cause denial of service, bypass security restrictions. Below is a complete list of...

KLA48554 Multiple vulnerabilities in Microsoft Products (ESU)

Multiple vulnerabilities were found in Microsoft Products Extended Security Update. Malicious users can exploit these vulnerabilities to gain privileges, execute arbitrary code, cause denial of service, obtain sensitive information. Below is a complete list of vulnerabilities: 1. An elevation of...

CVE-2022-44673

Windows Client Server Run-time Subsystem CSRSS Elevation of Privilege Vulnerability...

Privilege escalation

Windows Client Server Run-Time Subsystem CSRSS Elevation of Privilege Vulnerability...

CVE-2022-44673 Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability

...

CVE-2022-44673: Undefined Security Weakness

Windows Client Server Run-time Subsystem CSRSS Elevation of Privilege Vulnerability...

CVE-2022-44673 Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability

...

CVE-2022-44673

CVE-2022-44673 affects Windows CSRSS (Windows Client Server Run-time Subsystem) with Elevation of Privilege. The provided data lists a CVSSv3.1 base score of 7.0 (HIGH) with LOCAL attack vector, HIGH confidentiality, integrity, and availability impact, and LOW privileges required with no user int...

The vulnerability of the Client Server Run-Time Subsystem (CSRSS) in the Windows operating system, which allows a hacker to increase their privileges

The vulnerability of the Client Server Run-Time Subsystem CSRSS in the Windows operating system is related to an uncontrolled DLL search process. Exploiting this vulnerability can allow a perpetrator to execute arbitrary code...

Microsoft Windows CSRSS Activation Context Cache Poisoning Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the CSRSS.exe...