Lucene search
+L

415 matches found

Microsoft CVE
Microsoft CVE
added 2020/03/10 7:00 a.m.30 views

Windows Hard Link Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists when Windows improperly handles hard links. An attacker who successfully exploited this vulnerability could overwrite a targeted file leading to an elevated status. To exploit this vulnerability, an attacker would first have to log on to the system. ...

7.8CVSS2.7AI score0.00876EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2020/03/10 7:00 a.m.22 views

Windows Hard Link Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists when Windows improperly handles hard links. An attacker who successfully exploited this vulnerability could overwrite a targeted file leading to an elevated status. To exploit this vulnerability, an attacker would first have to log on to the system. ...

7.8CVSS2.7AI score0.00876EPSS
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2020/02/27 12:00 a.m.10 views

The vulnerability of the Windows Error Reporting (WER) error reporting service in Windows operating systems allows a hacker to escalate their privileges.

The vulnerability of the Windows Error Reporting WER error reporting service in Windows operating systems is related to errors in handling hard links. Exploiting this vulnerability can allow an attacker to enhance their privileges through a specially created application...

7.8CVSS7.2AI score0.00914EPSS
SaveExploits0References4
OSV
OSV
added 2020/02/11 10:15 p.m.6 views

CVE-2020-0678

An elevation of privilege vulnerability exists when Windows Error Reporting manager improperly handles hard links, aka 'Windows Error Reporting Manager Elevation of Privilege Vulnerability'...

7.8CVSS7.1AI score0.00914EPSS
SaveExploits0References1
OSV
OSV
added 2020/01/27 4:15 p.m.9 views

CVE-2019-17190

A Local Privilege Escalation issue was discovered in Avast Secure Browser 76.0.1659.101. The vulnerability is due to an insecure ACL set by the AvastBrowserUpdate.exe which is running as NT AUTHORITY\SYSTEM when AvastSecureBrowser.exe checks for new updates. When the update check is triggered, th...

7.8CVSS7.1AI score0.00522EPSS
SaveExploits1References3
Prion
Prion
added 2020/01/27 4:15 p.m.41 views

Privilege escalation

A Local Privilege Escalation issue was discovered in Avast Secure Browser 76.0.1659.101. The vulnerability is due to an insecure ACL set by the AvastBrowserUpdate.exe which is running as NT AUTHORITY\SYSTEM when AvastSecureBrowser.exe checks for new updates. When the update check is triggered, th...

7.2CVSS7.5AI score0.00522EPSS
SaveExploits1References3Affected Software1
Positive Technologies
Positive Technologies
added 2020/01/27 12:00 a.m.13 views

PT-2020-9879 · Avast · Avast Secure Browser

Name of the Vulnerable Software and Affected Versions: Avast Secure Browser version 76.0.1659.101 Description: A Local Privilege Escalation issue was discovered due to an insecure ACL set by the AvastBrowserUpdate.exe when AvastSecureBrowser.exe checks for new updates. The elevated process cleans...

7.8CVSS7.6AI score0.00522EPSS
SaveExploits1References5
OpenVAS
OpenVAS
added 2020/01/23 12:00 a.m.26 views

Huawei EulerOS: Security Advisory for systemd (EulerOS-SA-2019-1217)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS6.6AI score0.01065EPSS
SaveExploits5References2
CNVD
CNVD
added 2020/01/21 12:00 a.m.8 views

Microsoft Windows Denial of Service Vulnerability (CNVD-2020-07214)

Microsoft Windows is the popular computer operating system. A denial of service vulnerability exists when Windows does not properly handle hard links. An attacker could exploit this vulnerability by logging on to the system and running a specially crafted application to cause the target system to...

5.5CVSS6.6AI score0.01658EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2020/01/15 12:00 a.m.33 views

Microsoft Windows Device Management Enrollment Service Hard Link Denial-of-Service Vulnerability

This vulnerability allows local attackers to create a denial-of-service condition on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within t...

7.3CVSS4.3AI score0.01658EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2019/12/26 12:00 a.m.7 views

The vulnerability of the dropboxupdate update service for Windows users allows a hacker to escalate their privileges.

The vulnerability of the dropboxupdate update service for Windows users of the Dropbox storage service is related to access control deficiencies. Exploiting this vulnerability could allow an attacker to elevate their privileges to root status using a specially created hard link...

7.8CVSS5.5AI score
SaveExploits0References3Affected Software1
Packet Storm
Packet Storm
added 2019/12/11 12:00 a.m.258 views

AppXSvc 17763 Arbitrary File Overwrite

Exploit Title: AppXSvc 17763 - Arbitrary File Overwrite DoS Date: 2019-10-28 Exploit Author: Gabor Seljan Vendor Homepage: https://www.microsoft.com/ Version: 17763.1.amd64fre.rs5release.180914-1434 Tested on: Windows 10 Version 1809 for x64-based Systems CVE: CVE-2019-1476 Summary: AppXSvc...

7.2CVSS0.9AI score0.414EPSS
SaveExploits21
exploitpack
exploitpack
added 2019/12/11 12:00 a.m.124 views

AppXSvc 17763 - Arbitrary File Overwrite (DoS)

AppXSvc 17763 - Arbitrary File Overwrite DoS Exploit Title: AppXSvc 17763 - Arbitrary File Overwrite DoS Date: 2019-10-28 Exploit Author: Gabor Seljan Vendor Homepage: https://www.microsoft.com/ Version: 17763.1.amd64fre.rs5release.180914-1434 Tested on: Windows 10 Version 1809 for x64-based...

7.2CVSS0.7AI score0.414EPSS
SaveExploits21
Zero Day Initiative
Zero Day Initiative
added 2019/12/11 12:00 a.m.40 views

Microsoft Windows AppX Deployment Service Hard Link Escalation of Privilege Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the AppX Deploymen...

7CVSS5.4AI score0.01751EPSS
SaveExploits0References1
Exploit DB
Exploit DB
added 2019/12/11 12:00 a.m.393 views

AppXSvc 17763 - Arbitrary File Overwrite (DoS)

Exploit Title: AppXSvc 17763 - Arbitrary File Overwrite DoS Date: 2019-10-28 Exploit Author: Gabor Seljan Vendor Homepage: https://www.microsoft.com/ Version: 17763.1.amd64fre.rs5release.180914-1434 Tested on: Windows 10 Version 1809 for x64-based Systems CVE: CVE-2019-1476 Summary: AppXSvc...

7.8CVSS7AI score0.414EPSS
SaveExploits21
Zero Day Initiative
Zero Day Initiative
added 2019/11/13 12:00 a.m.26 views

Microsoft Windows InstallService Hard Link Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the Microsoft Stor...

7.8CVSS5.6AI score0.01333EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2019/11/13 12:00 a.m.44 views

Microsoft Windows IP Helper Service Hard Link Denial-of-Service Vulnerability

This vulnerability allows local attackers to create a denial-of-service condition on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within t...

5.3CVSS3.4AI score0.02076EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2019/10/24 12:00 a.m.9 views

The vulnerability of the Windows Error Reporting service in Windows operating systems allows a perpetrator to increase their privileges.

The vulnerability of the Windows Error Reporting service in Windows operating systems is related to the handling of hard links. Exploiting this vulnerability can allow an attacker to increase their privileges...

7.8CVSS5.5AI score0.01318EPSS
SaveExploits0References2
GithubExploit
GithubExploit
added 2019/10/13 9:20 a.m.139 views

Exploit for CVE-2019-6329

Local Privilege Escalation in HP Support Assistant A local pri...

7.8CVSS7.8AI score0.0163EPSS
SaveExploits1
zdt
zdt
added 2019/09/16 12:00 a.m.193 views

AppXSvc - Privilege Escalation Vulnerability

----------------------------------------------------------------------------- Exploit Title: AppXSvc - Arbitrary File Security Descriptor Overwrite EoP Exploit Author: Gabor Seljan Vendor Homepage: https://www.microsoft.com/ Version: 17763.1.amd64fre.rs5release.180914-1434 Tested on: Windows 10...

7.8CVSS0.9AI score0.414EPSS
SaveExploits22
Rows per page
Query Builder