Experts Unveil Exploit for Recent Windows Vulnerability Under Active Exploitation

Details have emerged about a now-patched actively exploited security flaw in Microsoft Windows that could be abused by a threat actor to gain elevated privileges on affected systems. The vulnerability, tracked as CVE-2023-29336, is rated 7.8 for severity and concerns an elevation of privilege bug...

CVE-2022-41784

Improper access control in kernel mode driver for the IntelR OFU software before version 14.1.30 may allow an authenticated user to potentially enable escalation of privilege via local access...

Improper access control

Improper access control in kernel mode driver for the IntelR OFU software before version 14.1.30 may allow an authenticated user to potentially enable escalation of privilege via local access...

Improper access control

Improper access control in kernel mode driver for the IntelR OFU software before version 14.1.30 may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2022-42465

Improper access control in kernel mode driver for the IntelR OFU software before version 14.1.30 may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2022-41784

Improper access control in kernel mode driver for the IntelR OFU software before version 14.1.30 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2022-42465: Improper Access Control

Improper access control in kernel mode driver for the IntelR OFU software before version 14.1.30 may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2022-41784: Improper Access Control

Improper access control in kernel mode driver for the IntelR OFU software before version 14.1.30 may allow an authenticated user to potentially enable escalation of privilege via local access...

PT-2023-14036

Name of the Vulnerable Software and Affected Versions IntelR OFU software versions prior to 14.1.30 Description The issue is related to improper access control in kernel mode driver, which may allow an authenticated user to potentially enable escalation of privilege via local access...

PT-2023-14120

Name of the Vulnerable Software and Affected Versions IntelR OFU software versions prior to 14.1.30 Description The issue is related to improper access control in kernel mode driver, which may allow a privileged user to potentially enable escalation of privilege via local access. Recommendations...

Intel® OFU Software Advisory

Summary: Potential security vulnerabilities in the Intel® One Boot Flash Update OFU software may allow escalation of privilege. Intel is releasing software updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2022-41784 Description: Improper access control in...

UBUNTU-CVE-2023-0195

NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer driver nvlddmkm.sys, where an can cause CWE-1284, which may lead to hypothetical Information leak of unimportant data such as local variable data of the driver...

K21882212: Intel software vulnerabilities CVE-2020-8750 CVE-2020-12355

Security Advisory Description CVE-2020-8750 Use after free in Kernel Mode Driver for IntelR TXE versions before 3.1.80 and 4.0.30 may allow an authenticated user to potentially enable escalation of privilege via local access. CVE-2020-12355 Authentication bypass by capture-replay in RPMB protocol...

CVE-2022-25949

The kernel mode driver kwatch3 of KINGSOFT Internet Security 9 Plus Version 2010.06.23.247 fails to properly handle crafted inputs, leading to stack-based buffer overflow...

CVE-2022-25949

The kernel mode driver kwatch3 of KINGSOFT Internet Security 9 Plus Version 2010.06.23.247 fails to properly handle crafted inputs, leading to stack-based buffer overflow...

CVE-2022-25949

CVE-2022-25949 affects KINGSOFT Internet Security 9 Plus (kernel-mode driver kwatch3, version 2010.06.23.247). The issue is a stack-based buffer overflow triggered by crafted inputs in the driver, potentially enabling local code execution with kernel privileges and impacting system integrity/avai...

CVE-2022-25949: Stack-based Buffer Overflow

The kernel mode driver kwatch3 of KINGSOFT Internet Security 9 Plus Version 2010.06.23.247 fails to properly handle crafted inputs, leading to stack-based buffer overflow...

Microsoft Win32k Memory Corruption Vulnerability

The kernel-mode driver in Microsoft Windows OS and Server allows local users to gain privileges via a crafted application...

Microsoft Win32k Privilege Escalation Vulnerability

An unspecified vulnerability exists in the Win32k.sys kernel-mode driver in Microsoft Windows Server that allows a local attacker to execute arbitrary code with elevated privileges...

Microsoft Win32k Privilege Escalation Vulnerability

Microsoft Win32k contains a privilege escalation vulnerability due to the Windows kernel-mode driver failing to properly handle objects in memory...