Nomachine NoMachine 输入验证错误漏洞

NoMachine is a remote desktop access tool from NoMachine Luxembourg. A security vulnerability exists in NoMachine Enterprise Client, which can be exploited by a local attacker to cause a denial of service memory corruption and OS crash by executing arbitrary code in kernel mode or via specially...

Nomachine NoMachine 安全漏洞

NoMachine is a remote desktop access tool from NoMachine Luxembourg. A security vulnerability exists in NoMachine Server, which can be exploited by an attacker to execute arbitrary code in kernel mode or cause a denial of service memory corruption and operating system crash via specially crafted...

Nomachine NoMachine 安全漏洞

NoMachine is a remote desktop access tool from Luxembourg-based NoMachine. A security vulnerability exists in NoMachine Enterprise Client, which can be exploited by attackers to execute arbitrary code in kernel mode or cause a denial of service memory corruption and OS crash via specially crafted...

Accops HyWorks 输入验证错误漏洞

Accops HyWorks is a suite of solutions consisting of software and hardware from Accops India. It is used to instantly and securely access enterprise applications remotely from anywhere, on any device and from any network. An integer overflow vulnerability exists in Accops HyWorks DVM Tools, which...

CVE-2021-42976: Buffer Copy without Checking Size of Input

NoMachine Enterprise Desktop is affected by Buffer Overflow. IOCTL Handler 0x22001B in the NoMachine Enterprise Desktop above 4.0.346 and below 7.7.4 allow local attackers to execute arbitrary code in kernel mode or cause a denial of service memory corruption and OS crash via specially crafted I/...

PT-2021-23708

Name of the Vulnerable Software and Affected Versions NoMachine Enterprise Client versions 4.0.346 through 7.7.4 Description The issue allows local attackers to execute arbitrary code in kernel mode or cause a denial of service, resulting in memory corruption and OS crash, via specially crafted I...

Amzetta Technologies Amzetta zPortal 安全漏洞

Amzetta Technologies Amzetta Zportal is a virtual desktop and application controller from Amzetta Technologies, Inc. It is used by administrators to create and manage hosted applications, virtual desktops, shared hosted desktops, and auditing services, provide resources for virtual desktops, prox...

PT-2021-23713

Name of the Vulnerable Software and Affected Versions FlexiHub For Windows versions 2.0.4340 through 5.3.14268 Description The issue allows local attackers to execute arbitrary code in kernel mode or cause a denial of service, resulting in memory corruption and OS crash, via specially crafted I/O...

Nomachine NoMachine输入验证错误漏洞

NoMachine is a remote desktop access tool from Luxembourg-based NoMachine. NoMachine Enterprise Desktop suffers from a security vulnerability that could be exploited by attackers to execute arbitrary code in kernel mode or cause a denial of service memory corruption and OS crash via specially...

PT-2021-23898

Name of the Vulnerable Software and Affected Versions: Amazon WorkSpaces agent versions prior to 1.0.1.1537 Description: The issue is related to an Integer Overflow in the Amazon WorkSpaces agent. It affects the IOCTL Handler 0x22001B, allowing local attackers to execute arbitrary code in kernel...

Accops HyWorks 输入验证错误漏洞

Accops HyWorks is a suite of solutions consisting of software and hardware from Accops India. It is used for instant and secure remote access to enterprise applications from anywhere, on any device and from any network. An integer overflow vulnerability exists in Accops HyWorks DVM Tools, which c...

NVIDIA Windows GPU Display Driver (October 2021)

A display driver installed on the remote Windows host is affected by multiple vulnerabilities: - NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer nvlddmkm.sys handler for private IOCTLs, where an attacker with local unprivileged system access may cause a NUL...

AMD μProf 安全漏洞

AMD μProf is a performance analysis tool from AMD for applications running on Windows, Linux and FreeBSD operating systems. A security vulnerability exists in AMD μProf, which stems from the fact that the AMDPowerProfiler.sys driver may allow a low-privileged user to access the MSR in the kernel,...

CVE-2020-12964

A potential privilege escalation/denial of service issue exists in the AMD Radeon Kernel Mode driver Escape 0x2000c00 Call handler. An attacker with low privilege could potentially induce a Windows BugCheck or write to leak information...

CVE-2020-12964

CVE-2020-12964 affects the AMD Radeon Kernel Driver Escape 0x2000c00 Call handler. A local attacker could escalate privileges, trigger a DoS via Windows BugCheck, or leak information. AMD’s bulletin AMD-SB-1000 associates mitigations with specific driver versions: AMD Radeon Software for Windows ...

CVE-2020-12964

A potential privilege escalation/denial of service issue exists in the AMD Radeon Kernel Mode driver Escape 0x2000c00 Call handler. An attacker with low privilege could potentially induce a Windows BugCheck or write to leak information...

PT-2021-9517

Name of the Vulnerable Software and Affected Versions AMD Radeon Kernel Mode driver affected versions not specified Description A potential issue exists in the AMD Radeon Kernel Mode driver Escape 0x2000c00 Call handler, which could allow an attacker with low privilege to induce a Windows BugChec...

CVE-2020-12964: Undefined Security Weakness

A potential privilege escalation/denial of service issue exists in the AMD Radeon Kernel Mode driver Escape 0x2000c00 Call handler. An attacker with low privilege could potentially induce a Windows BugCheck or write to leak information...

Microsoft Win32k Privilege Escalation Vulnerability

Microsoft Win32k fails to properly handle objects in memory causing privilege escalation. Successful exploitation allows an attacker to run code in kernel mode...

Microsoft Win32k Privilege Escalation Vulnerability

Microsoft Win32k contains an unspecified vulnerability due to it failing to properly handle objects in memory causing privilege escalation. Successful exploitation allows an attacker to run code in kernel mode...