April 9, 2024—KB5036899 (OS Build 14393.6897) - EXPIRED

None None...

April 9, 2024—KB5036909 (OS Build 20348.2402)

None None...

Devolutions Remote Desktop Manager 安全漏洞

Devolutions Remote Desktop Manager is an application from Devolutions Canada Inc. It provides remote desktop management functionality. A security vulnerability exists in Devolutions Remote Desktop Manager version 2024.1.20 and earlier, which stems from improper handling of permissions in the vaul...

PT-2024-26506

Name of the Vulnerable Software and Affected Versions Devolutions Remote Desktop Manager versions 2024.1.20 and earlier Devolutions Server versions 2024.1.8 and earlier Description The issue is related to improper permission handling in the vault offline cache feature. This allows an attacker to...

CVE-2024-3545: Improper Preservation of Permissions

Improper permission handling in the vault offline cache feature in Devolutions Remote Desktop Manager 2024.1.20 and earlier on windows and Devolutions Server 2024.1.8 and earlier allows an attacker to access sensitive informations contained in the offline cache file by gaining access to a compute...

CVE-2024-27247: Improper Verification of Cryptographic Signature

Improper privilege management in the installer for Zoom Desktop Client for macOS before version 5.17.10 may allow a privileged user to conduct an escalation of privilege via local access...

Improper Control of Generation of Code ('Code Injection')

Overview Affected versions of this package are vulnerable to Improper Control of Generation of Code 'Code Injection' due to improper handling of object lifecycles during the failure of CPimcManager object creation. An attacker can execute arbitrary code on the target system by convincing a user t...

PT-2024-21773 · Zoom · Zoom Desktop Client For Macos

Name of the Vulnerable Software and Affected Versions: Zoom Desktop Client for macOS versions prior to 5.17.10 Description: The issue is related to improper privilege management in the installer, which may allow a privileged user to conduct an escalation of privilege via local access...

PT-2024-20494 · Zoom · Zoom Desktop Client For Windows

Name of the Vulnerable Software and Affected Versions: Zoom Desktop Client for Windows versions prior to 5.17.10 Description: The issue is related to improper privilege management in the installer, which may allow an authenticated user to conduct an escalation of privilege via local access...

Improper Control of Generation of Code ('Code Injection')

Overview Affected versions of this package are vulnerable to Improper Control of Generation of Code 'Code Injection' due to improper handling of object lifecycles during the failure of CPimcManager object creation. An attacker can execute arbitrary code on the target system by convincing a user t...

CVE-2024-27242: Improper Neutralization of Input During Web Page Generation

Cross site scripting in Zoom Desktop Client for Linux before version 5.17.10 may allow an authenticated user to conduct a denial of service via network access...

CVE-2024-24694: Improper Verification of Cryptographic Signature

Improper privilege management in the installer for Zoom Desktop Client for Windows before version 5.17.10 may allow an authenticated user to conduct an escalation of privilege via local access...

Zoom Client 安全漏洞

Zoom Desktop Client for Linux is a client application designed for virtualized desktop environments such as Windows 365 Cloud PC. A cross-site scripting vulnerability exists in Zoom Desktop Client for Linux, which stems from the application's lack of effective filtering and escaping of...

PT-2024-4754 · Docker · Docker Desktop

Name of the Vulnerable Software and Affected Versions: Docker Desktop versions prior to 4.29.0 Description: The issue is related to insufficient restriction of the communication channel for given endpoints, allowing an attacker who has gained access to the Docker Desktop VM through a container...

CVE-2023-25494

A potential vulnerability were reported in the BIOS of some Desktop, Smart Edge, and ThinkStation products that could allow a local attacker with elevated privileges to write to NVRAM variables...

CVE-2023-25493

A potential vulnerability was reported in the BIOS update tool driver for some Desktop, Smart Edge, Smart Office, and ThinkStation products that could allow a local user with elevated privileges to execute arbitrary code...

CVE-2023-25494

CVE-2023-25494 targets Lenovo BIOS across Desktop, Smart Edge, and ThinkStation products, allowing a local attacker with high privileges to write to NVRAM variables. The issue is BIOS-level and the documented impact includes potential compromise of confidentiality, integrity, and availability. No...

CVE-2023-25494

A potential vulnerability were reported in the BIOS of some Desktop, Smart Edge, and ThinkStation products that could allow a local attacker with elevated privileges to write to NVRAM variables...

CVE-2023-25494

A potential vulnerability were reported in the BIOS of some Desktop, Smart Edge, and ThinkStation products that could allow a local attacker with elevated privileges to write to NVRAM variables...

CVE-2023-25493

The CVE-2023-25493 entry describes a vulnerability in the BIOS update tool driver affecting Lenovo Desktop, Smart Edge, Smart Office, and ThinkStation products that could let a local, privileged attacker execute arbitrary code. Affected component: BIOS update tool driver; root cause details are n...