1733 matches found
SELinux 资源管理错误漏洞
SELinux is a Linux subsystem from the National Security Agency that uses a secure architecture that allows administrators to better control who has access to the system. A security vulnerability exists in SELinux version 3.2, which stems from a use-after-free in the SELinux CIL compiler in the...
SELinux 缓冲区错误漏洞
SELinux is a Linux subsystem from the National Security Agency that uses a secure architecture that allows administrators to better control who has access to the system. A security vulnerability exists in SELinux version 3.2, which stems from a heap-based buffer overflow in the CIL compiler in...
3 Major Benefits of Cloud Migration: Visibility
On the fence about migrating to the cloud because security seems complex and abstract? Let go of your on-premises point products and discover how using a platform with enhanced visibility can help smooth the security for your cloud journey...
USN-4985-1 intel-microcode vulnerabilities
It was discovered that some Intel processors may not properly invalidate cache entries used by Intel Virtualization Technology for Directed I/O VT-d. This may allow a local user to perform a privilege escalation attack. CVE-2020-24489 Joseph Nuzman discovered that some Intel processors may not...
hw: improper isolation of shared resources in some Intel Processors
Microcode misconfiguration in some Intel processors may cause EIBRS mitigation CVE-2017-5715 to be incomplete. As a consequence, this issue may allow an authenticated user to potentially enable information disclosure via local access...
CVE-2021-31201
Microsoft Enhanced Cryptographic Provider Elevation of Privilege Vulnerability...
CVE-2021-31201
Microsoft Enhanced Cryptographic Provider Elevation of Privilege Vulnerability...
Privilege escalation
Microsoft Enhanced Cryptographic Provider Elevation of Privilege Vulnerability...
CVE-2021-31199
CVE-2021-31199 is a Windows Elevation of Privilege vulnerability in the Microsoft Enhanced Cryptographic Provider. The CVE affects Windows components and is driven by local exploitation (local access required) with low privileges needed, and no user interaction, but yields high impact on confiden...
CVE-2021-31201
CVE-2021-31201 is a Windows privilege-escalation vulnerability affecting the Enhanced Cryptographic Provider . The available documents confirm it enables local privilege escalation (local access required) and classify the impact as elevation of privileges; exact root-cause details are not provide...
Microsoft & Adobe Patch Tuesday (June 2021) – Microsoft 50 Vulnerabilities with 5 Critical, Adobe 21 Critical Vulnerabilities
Microsoft Patch Tuesday – June 2021 Microsoft patched 50 CVEs in their June 2021 Patch Tuesday release, and five of them are rated as critical severity. Six have applicable exploits. Critical Microsoft Vulnerabilities Patched CVE-2021-31985 – Microsoft Defender Remote Code Execution Vulnerability...
VulnCheck KEV: CVE-2021-31199
Microsoft Enhanced Cryptographic Provider contains an unspecified vulnerability that allows for privilege escalation...
PT-2021-3270 · Microsoft · Enhanced Cryptographic Provider +1
Name of the Vulnerable Software and Affected Versions: Microsoft Enhanced Cryptographic Provider affected versions not specified Description: The issue is related to insecure privilege management in the Microsoft Enhanced Cryptographic Provider, which can be exploited to elevate privileges. This...
CVE-2021-31199
Microsoft Enhanced Cryptographic Provider Elevation of Privilege Vulnerability Recent assessments: gwillcox-r7 at June 17, 2021 4:20pm UTC reported: Not got much to contribute due to limited public information at this time but I did want to note that the Confidentiality and Integrity scores for...
VulnCheck KEV: CVE-2021-31201
Microsoft Enhanced Cryptographic Provider contains an unspecified vulnerability that allows for privilege escalation...
KLA12202 Multiple vulnerabilities in Microsoft Windows
Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to obtain sensitive information, execute arbitrary code, gain privileges, bypass security restrictions, cause denial of service. Below is a complete list of vulnerabilities: 1. An informati...
Google Chrome to Help Users Identify Untrusted Extensions Before Installation
Google on Thursday said it's rolling out new security features to Chrome browser aimed at detecting suspicious downloads and extensions via its Enhanced Safe Browsing feature, which it launched a year ago. To this end, the search giant said it will now offer additional protections when users...
Rockwell Automation Micro 1400 安全漏洞
The Rockwell Automation MicroLogix 1400 is a programmable logic controller from Rockwell Automation, USA. A security vulnerability exists in the Rockwell Automation Micro800 and MicroLogix 1400. An attacker could use this vulnerability to intercept a password change request message containing a...
Weak Password Vulnerability in AiTech's 2nd Generation Enhanced Firewalls
Ltd. is a small and medium-sized network solution provider and service provider in China. Atech's second-generation Enhanced Firewall has a weak password vulnerability that allows an attacker to utilize the default account to access the management interface and obtain sensitive information...
