Privilege escalation

An Improper Privilege Management vulnerability in Trellix GetSusp prior to version 5.0.0.27 allows a local, low privilege attacker to gain access to files that usually require a higher privilege level. This is caused by GetSusp not correctly protecting a directory that it creates during execution...

Unsynchronized Access to Shared Data Vulnerability in Multiple Siemens Products in a Multi-Threaded Context

The SCALANCE M-800, MUM-800 and S615 and the RUGGEDCOM RM1224 are industrial routers.The SCALANCE W products are wireless communication devices for connecting industrial components, such as Programmable Logic Controllers PLCs or Human Machine Interfaces HMIs, that comply with the IEEE 802.11...

CVE-2023-41718

When a particular process flow is initiated, an attacker may be able to gain unauthorized elevated privileges on the affected system when having control over a specific file...

flatpak: Metadata with ANSI control codes can cause misleading terminal output

A flaw was found in Flatpak, a system for building, distributing, and running sandboxed desktop applications on Linux. Suppose an attacker publishes a Flatpak app with elevated permissions. In that case, they can hide those permissions from users of the flatpak1 command-line interface by setting...

Intel In-Band Manageability Security Vulnerability

Intel In-Band Manageability is a software from Intel Corporation USA. It helps to manage individual devices and uses extensions to allow control of multiple nodes through Intel Architecture hosts. A security vulnerability exists in the Intel In-Band Manageability software. An attacker exploiting...

Intel Rapid Storage Technology Security Vulnerability

Intel Rapid Storage Technology RST is a fast storage technology from Intel Corporation USA that consists of firmware, hardware and software RAID systems. A security vulnerability exists in Intel Rapid Storage Technology. An attacker exploiting this vulnerability could result in elevated privilege...

Microsoft DWM Core Library Security Vulnerability

Microsoft DWM Core Library is a core library for Microsoft windows from Microsoft Corporation. A security vulnerability exists in Microsoft DWM Core Library. An attacker could exploit this vulnerability to gain elevated privileges. The following products and editions are affected:Windows 10 Versi...

PT-2023-28059 · Ivanti · Secure Access +1

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue allows an attacker to gain unauthorized elevated privileges on the affected system when a particular process flow is initiated and they have...

Intel Arc Security Vulnerability

Intel Arc is a series of graphics cards from Intel Corporation USA. A security vulnerability exists in Intel Arc RGB Controller. An attacker exploiting this vulnerability could result in elevated privileges...

Microsoft Windows Search Component Security Vulnerability

Microsoft Windows is a suite of operating systems for use on personal devices from the U.S.-based Microsoft Corporation Microsoft. A security vulnerability exists in Microsoft Windows Search Component. An attacker could exploit this vulnerability to gain elevated privileges. The following product...

Vulnerabilities fixed in Microsoft System Center

Microsoft has fixed vulnerabilities in System Center. A malicious party could exploit the vulnerabilities to gain elevated permissions or gain access to sensitive data. For successful abuse, the malicious party needs local access. Open Management Infrastructure:...

Intel NUC BIOS firmware security vulnerability

The Intel NUC is a small minicomputer from Intel Corporation USA. A security vulnerability exists in the Intel NUC BIOS firmware. An attacker exploiting this vulnerability could result in elevated privileges or information disclosure...

Intel NUC BIOS firmware security vulnerability

The Intel NUC is a small minicomputer from Intel Corporation USA. A security vulnerability exists in the Intel NUC BIOS firmware. An attacker exploiting this vulnerability could result in elevated privileges or information disclosure...

The vulnerability of the component responsible for checking installed operating system packages “Aurora” allows a hacker to execute code with elevated privileges.

The vulnerability of the “Avora” operating system’s installed package checking component is related to deficiencies in the control of the parameters of these installed packages. Exploiting this vulnerability allows an attacker to execute arbitrary code with elevated privileges using a specially...

CVE-2023-41138

The AppsAnywhere macOS client-privileged helper can be tricked into executing arbitrary commands with elevated permissions by a local user process...

CVE-2023-41138

The AppsAnywhere macOS client-privileged helper can be tricked into executing arbitrary commands with elevated permissions by a local user process...

CVE-2023-41138

The vulnerability CVE-2023-41138 affects the AppsAnywhere macOS client-privileged helper. A local user process can trick this helper into executing arbitrary commands with elevated permissions, enabling local privilege escalation. Affected product: AppsAnywhere macOS client (privileged helper). R...

CVE-2023-41138

The AppsAnywhere macOS client-privileged helper can be tricked into executing arbitrary commands with elevated permissions by a local user process...

CVE-2023-41138

The AppsAnywhere macOS client-privileged helper can be tricked into executing arbitrary commands with elevated permissions by a local user process...

PT-2023-27818 · Unknown · Appsanywhere Macos Client

Name of the Vulnerable Software and Affected Versions: AppsAnywhere macOS client affected versions not specified Description: The issue allows a local user process to trick the AppsAnywhere macOS client-privileged helper into executing arbitrary commands with elevated permissions. Recommendations...