PT-2022-1843 · Microsoft · Cluster Port Driver +1

Name of the Vulnerable Software and Affected Versions: Microsoft Cluster Port Driver affected versions not specified Description: The issue is related to insecure privilege management in the Microsoft Cluster Port Driver, which can be exploited to elevate privileges in the system. This allows an...

PT-2022-15169 · Microsoft · Active Directory Domain Services +1

Name of the Vulnerable Software and Affected Versions: Active Directory Domain Services affected versions not specified Description: An elevation-of-privilege issue allows attackers to affect the system. Recommendations: At the moment, there is no information about a newer version that contains a...

PT-2022-1502 · Microsoft · Windows Push Notifications Apps +1

Name of the Vulnerable Software and Affected Versions: Windows Push Notifications Apps affected versions not specified Description: The issue is related to insecure privilege management in the Windows Push Notifications Apps component of the Windows operating system. It allows an attacker to...

PT-2022-1526 · Microsoft · Windows User-Mode Driver Framework Reflector Driver +1

Name of the Vulnerable Software and Affected Versions: Windows User-mode Driver Framework Reflector Driver affected versions not specified Description: The issue is related to errors in privilege management, allowing an attacker to potentially elevate their privileges. This could enable an attack...

PT-2022-1551 · Microsoft · Windows Dwm Core Library +1

Name of the Vulnerable Software and Affected Versions: Windows DWM Core Library affected versions not specified Description: The issue is related to insufficient access restrictions in the Windows DWM Core Library, which can be exploited to elevate privileges. This allows an attacker to affect th...

PT-2022-1706 · Microsoft · Office Word +1

Name of the Vulnerable Software and Affected Versions: Microsoft Word affected versions not specified Description: The issue is related to incorrect code generation management in Microsoft Word. Exploitation of this issue may allow an attacker to execute arbitrary code. Recommendations: At the...

PT-2022-1685 · Microsoft · Windows Resilient File System +1

Name of the Vulnerable Software and Affected Versions: Windows Resilient File System ReFS affected versions not specified Description: The issue is related to incorrect code generation management in the Windows Resilient File System, which can be exploited to execute arbitrary code. This allows a...

PT-2022-2846 · Linux +9 · Linux Kernel +9

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A kernel information leak flaw was identified in the scsi ioctl function in drivers/scsi/scsi ioctl.c in the Linux kernel. This flaw allows a local attacker with special user privilege...

PT-2022-15185 · Microsoft · Directx +1

Name of the Vulnerable Software and Affected Versions: DirectX affected versions not specified Description: A denial-of-service issue allows attackers to affect the system. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability...

PT-2022-15181 · Microsoft · Directx +1

Name of the Vulnerable Software and Affected Versions: DirectX affected versions not specified Description: The issue allows remote attackers to execute arbitrary code and affect the system. Recommendations: At the moment, there is no information about a newer version that contains a fix for this...

PT-2022-1697 · Microsoft · Windows Resilient File System +1

Name of the Vulnerable Software and Affected Versions: Windows Resilient File System ReFS affected versions not specified Description: The issue is related to incorrect code generation management in the Windows Resilient File System ReFS. It allows remote attackers to execute arbitrary code,...

PT-2022-1563 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to insufficient access restrictions in the Windows GDI component, allowing an attacker to potentially elevate their privileges. This could impact the system, enabling...

Security Bulletin: IBM TRIRIGA Connector for Esri ArcGIS Indoors is vulnerable to arbitrary code execution due to Apache Log4j (CVE-2021-44228)

Summary IBM TRIRIGA Connector for Esri ArcGIS Indoors is affected by an Apache Log4j security vulnerability CVE-2021-44228. Apache Log4j is used by IBM TRIRIGA Connector for Esri ArcGIS Indoors as part of its logging infrastructure. This bulletin addresses this vulnerability by upgrading to Apach...

PT-2022-11149 · Unknown · Bone Voice Id Ta

Name of the Vulnerable Software and Affected Versions: bone voice ID TA affected versions not specified Description: The issue is related to a calculation error in buffer length, which may impact data confidentiality. Recommendations: At the moment, there is no information about a newer version...

PT-2022-9371 · Philips · Engage

Name of the Vulnerable Software and Affected Versions: Product affected versions not specified Description: The issue concerns an improper access control, potentially allowing an authenticated user to gain unauthorized access to sensitive data. Recommendations: At the moment, there is no...

PT-2022-11136 · Unknown · Bone Voice Id Trusted Application

Name of the Vulnerable Software and Affected Versions: bone voice ID trusted application TA affected versions not specified Description: The bone voice ID trusted application TA has a heap overflow issue. Successful exploitation of this issue may affect data confidentiality. Recommendations: At t...

PT-2022-11132 · Unknown · Bone Voice Id Ta

Name of the Vulnerable Software and Affected Versions: bone voice ID TA affected versions not specified Description: The bone voice ID TA has a heap overflow issue. Successful exploitation of this issue may result in malicious code execution. Recommendations: At the moment, there is no informatio...

PT-2022-11362 · Tcpslice +5 · Tcpslice +5

Name of the Vulnerable Software and Affected Versions: tcpslice affected versions not specified Description: The issue is related to a use after free in tcpslice, which triggers AddressSanitizer. There is no other confirmed impact. Recommendations: At the moment, there is no information about a...

PT-2022-14259 · Unknown · Vow Driver

Name of the Vulnerable Software and Affected Versions: vow driver affected versions not specified Description: The issue is related to a possible memory corruption due to a race condition in the vow driver. This could lead to local escalation of privilege, with System execution privileges needed...

PT-2022-14260 · Unknown · Vow Driver

Name of the Vulnerable Software and Affected Versions: vow driver affected versions not specified Description: The issue is related to a possible memory corruption in the vow driver due to improper input validation. This could lead to local escalation of privilege, with System execution privilege...