Lucene search
+L

133 matches found

CVE
CVE
added 2022/09/09 2:39 p.m.58 views

CVE-2022-39844

CVE-2022-39844 affects Samsung Smart Switch PC on Windows, prior to version 4.3.22083. The issue is improper validation of integrity checks in Smart Switch PC, enabling a local attacker to delete arbitrary directories via directory junctions. Impact is local, with no remote access or user interac...

7.1CVSS6.8AI score0.00149EPSS
Exploits0References1Affected Software1
CVE
CVE
added 2022/09/09 2:39 p.m.81 views

CVE-2022-39845

CVE-2022-39845 concerns Samsung Kies prior to 2.6.4.22074, where an improper validation of the integrity check enables a local attacker to delete arbitrary directories via a directory junction. The entry is corroborated across multiple sources (NVD entry details, Red Hat advisory, CVE records) in...

7.1CVSS6.8AI score0.00124EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2022/09/09 2:39 p.m.28 views

CVE-2022-39844

Improper validation of integrity check vulnerability in Smart Switch PC prior to version 4.3.22083 allows local attackers to delete arbitrary directory using directory junction...

5.5CVSS7AI score0.00149EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2022/07/12 2:15 p.m.3 views

CVE-2022-33711

Improper validation of integrity check vulnerability in Samsung USB Driver Windows Installer for Mobile Phones prior to version 1.7.56.0 allows local attackers to delete arbitrary directory using directory junction...

5.5CVSS5.9AI score0.00142EPSS
Exploits0References2
NVD
NVD
added 2022/07/12 2:15 p.m.19 views

CVE-2022-33711

Improper validation of integrity check vulnerability in Samsung USB Driver Windows Installer for Mobile Phones prior to version 1.7.56.0 allows local attackers to delete arbitrary directory using directory junction...

5.5CVSS0.00142EPSS
Exploits0References1
OSV
OSV
added 2022/07/12 2:15 p.m.5 views

CVE-2022-33711

Improper validation of integrity check vulnerability in Samsung USB Driver Windows Installer for Mobile Phones prior to version 1.7.56.0 allows local attackers to delete arbitrary directory using directory junction...

5.5CVSS5.9AI score0.00142EPSS
Exploits0References1
CVE
CVE
added 2022/07/11 1:37 p.m.50 views

CVE-2022-33711

The CVE-2022-33711 issue affects Samsung USB Driver Windows Installer for Mobile Phones prior to version 1.7.56.0, due to improper validation of an integrity check. This enables local attackers to delete arbitrary directories via a directory junction. Affected component: Samsung USB Driver Window...

5.5CVSS5.4AI score0.00142EPSS
Exploits0References1Affected Software1
NVD
NVD
added 2022/06/21 3:15 p.m.27 views

CVE-2022-34008

Comodo Antivirus 12.2.2.8012 has a quarantine flaw that allows privilege escalation. To escalate privilege, a low-privileged attacker can use an NTFS directory junction to restore a malicious DLL from quarantine into the System32 folder...

7.8CVSS0.00495EPSS
Exploits1References2
ATTACKERKB
ATTACKERKB
added 2022/06/21 3:15 p.m.2 views

CVE-2022-34008

Comodo Antivirus 12.2.2.8012 has a quarantine flaw that allows privilege escalation. To escalate privilege, a low-privileged attacker can use an NTFS directory junction to restore a malicious DLL from quarantine into the System32 folder...

7.8CVSS5.9AI score0.00495EPSS
Exploits1References3
OSV
OSV
added 2022/06/21 3:15 p.m.7 views

CVE-2022-34008

Comodo Antivirus 12.2.2.8012 has a quarantine flaw that allows privilege escalation. To escalate privilege, a low-privileged attacker can use an NTFS directory junction to restore a malicious DLL from quarantine into the System32 folder...

7.8CVSS5.8AI score0.00495EPSS
Exploits1References2
Prion
Prion
added 2022/06/21 3:15 p.m.22 views

Privilege escalation

Comodo Antivirus 12.2.2.8012 has a quarantine flaw that allows privilege escalation. To escalate privilege, a low-privileged attacker can use an NTFS directory junction to restore a malicious DLL from quarantine into the System32 folder...

7.2CVSS7.7AI score0.00495EPSS
Exploits1References2Affected Software1
Cvelist
Cvelist
added 2022/06/21 2:20 p.m.34 views

CVE-2022-34008

Comodo Antivirus 12.2.2.8012 has a quarantine flaw that allows privilege escalation. To escalate privilege, a low-privileged attacker can use an NTFS directory junction to restore a malicious DLL from quarantine into the System32 folder...

7.9AI score0.00495EPSS
Exploits1References2
CVE
CVE
added 2022/06/21 2:20 p.m.71 views

CVE-2022-34008

CVE-2022-34008 concerns Comodo Antivirus 12.2.2.8012. The vulnerability enables privilege escalation by a low-privileged user who uses an NTFS directory junction to restore a malicious DLL from quarantine into the System32 folder. Public sources classify exploitability as local with low complexit...

7.8CVSS7.7AI score0.00495EPSS
Exploits1References2Affected Software1
Positive Technologies
Positive Technologies
added 2022/06/21 12:0 a.m.8 views

PT-2022-21964 · Comodo · Comodo Antivirus

Name of the Vulnerable Software and Affected Versions: Comodo Antivirus version 12.2.2.8012 Description: The issue is related to a quarantine flaw that allows privilege escalation. A low-privileged attacker can exploit this by using an NTFS directory junction to restore a malicious DLL from...

7.8CVSS7.4AI score0.00495EPSS
Exploits1References4
GithubExploit
GithubExploit
added 2022/05/05 3:8 a.m.519 views

Exploit for Improper Access Control in Samsung Livewallpaperservice

Improper access control vulnerability in LiveWallpaperService...

5.3CVSS4.7AI score0.00747EPSS
Exploits1
ATTACKERKB
ATTACKERKB
added 2022/04/15 12:0 a.m.685 views

CVE-2022-26904

Windows User Profile Service Elevation of Privilege Vulnerability Recent assessments: gwillcox-r7 at March 30, 2022 4:52pm UTC reported: This is a bypass for CVE-2022-21919 which is in turn a bypass for CVE-2021-34484. As noted at https://twitter.com/billdemirkapi/status/1508527492285575172,...

7.8CVSS8.9AI score0.14393EPSS
In wildExploits2References3
Metasploit
Metasploit
added 2022/03/16 5:42 p.m.538 views

CVE-2022-21999 SpoolFool Privesc

The Windows Print Spooler has a privilege escalation vulnerability that can be leveraged to achieve code execution as SYSTEM. The SpoolDirectory, a configuration setting that holds the path that a printer's spooled jobs are sent to, is writable for all users, and it can be configured via...

7.8CVSS9.3AI score0.41683EPSS
Exploits4
Zero Day Initiative
Zero Day Initiative
added 2022/01/13 12:0 a.m.41 views

Microsoft Windows User Profile Service Directory Junction Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the User Profile...

7.8CVSS5.9AI score0.01227EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/01/06 12:0 a.m.37 views

Microsoft Windows Update Assistant Link Following Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. Additional user interaction is required in that an...

7CVSS8.1AI score0.01047EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/10/27 12:0 a.m.18 views

(0Day) Microsoft Windows Update Assistant Directory Junction Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within Windows Update...

7.3CVSS5.5AI score0.00743EPSS
Exploits0
Rows per page
Query Builder