CVE-2023-36701 Microsoft Resilient File System (ReFS) Elevation of Privilege Vulnerability

...

CVE-2023-36713 Windows Common Log File System Driver Information Disclosure Vulnerability

...

CVE-2023-36713 Windows Common Log File System Driver Information Disclosure Vulnerability

...

CVE-2023-36713

The CVE-2023-36713 entry concerns a vulnerability in the Windows Common Log File System Driver that leads to Information Disclosure. According to the NVD entry, the issue has a CVSSv3.1 base score of 5.5 (Medium) with Confidentiality Impact High, and it is a Local, Low-Complexity attack requiring...

CVE-2023-36729

CVE-2023-36729 is a Local Elevation of Privilege vulnerability related to the Named Pipe File System. CVSS 3.1 base score 7.8 (High) with LOCAL attack vector, LOW privileges required, no user interaction, and implications for confidentiality, integrity, and availability all rated High. The availa...

CVE-2023-36729 Named Pipe File System Elevation of Privilege Vulnerability

...

Advisory ROSA-SA-2023-2241

Software: kernel 3.10.0 OS: rosa-server79 packageevrstring: kernel-3.10.0-1160.83.1.el7 CVE-ID: CVE-2023-3397 BDU-ID: 2023-03779 CVE-Crit: MEDIUM CVE-DESC.: A vulnerability in the JFS file system of the Linux operating system kernel is related to the reuse of previously freed memory due to...

Windows Common Log File System Driver Information Disclosure Vulnerability

...

Named Pipe File System Elevation of Privilege Vulnerability

...

Microsoft Resilient File System (ReFS) Elevation of Privilege Vulnerability

...

Microsoft Windows Common Log File System Driver Security Vulnerability

The Microsoft Windows Common Log File System Driver is Microsoft's Common Log File System CLFS API that provides a high-performance, general-purpose log file subsystem that can be used by specialized client applications and shared by multiple clients to optimize logging and access. access. A...

Microsoft Windows Named Pipe File System Security Vulnerability

Microsoft Windows Named Pipe File System is a named pipe file system from Microsoft Corporation USA. A security vulnerability exists in Microsoft Windows Named Pipe File System. An attacker could exploit the vulnerability to elevate privileges. The following products and editions are...

PT-2023-6067 · Microsoft · Refs +1

Name of the Vulnerable Software and Affected Versions: Microsoft Resilient File System ReFS affected versions not specified Description: The issue is related to insecure privilege management in the Windows Resilient File System, which can be exploited to elevate privileges. This allows an attacke...

PT-2023-6157 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to insufficient access control in the Named Pipe File System component of the Windows operating system. Exploitation of this issue may allow an attacker to elevate thei...

APSB23-50 : Security update available for Adobe Commerce

Adobe has released a security update for Adobe Commerce and Magento Open Source. This update resolves critical and important vulnerabilities. Successful exploitation could lead to arbitrary code execution, privilege escalation, arbitrary file system read, security feature bypass and application...

Microsoft Windows Named Pipe File System Security Vulnerability

Microsoft Windows Named Pipe File System is a named pipe file system from Microsoft Corporation USA. A security vulnerability exists in Microsoft Windows Named Pipe File System. An attacker could exploit the vulnerability to elevate privileges. The following products and versions are affected:...

PT-2023-5979 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to the file system of the Windows operating system and is associated with inadequate access control. It allows an attacker to elevate their privileges. There is no...

PT-2023-9765 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to a format-overflow warning in the f2fs component of the Linux kernel. The warning occurs when using the gcc compiler with the W=1 option. The problem is in the...

Ubuntu: Security Advisory (USN-6396-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Rocky Linux 8 : kernel (RLSA-2023:4517)

The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2023:4517 advisory. - There are use-after-free vulnerabilities in the Linux kernel's net/bluetooth/l2capcore.c's l2capconnect and l2capleconnectreq functions which may allo...