Microsoft Windows UMPDDrvLineTo Use-After-Free Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the win32kfull...

CVE-2023-36123

CVE-2023-36123 concerns a Directory Traversal in Hex-Dragon Plain Craft Launcher 2, version Alpha 1.3.9. The connected documents identify the affected software as Hex-Dragon Plain Craft Launcher 2 and specify the vulnerability arises from a directory traversal flaw that enables local attackers to...

CVE-2023-36123

Directory Traversal vulnerability in Hex-Dragon Plain Craft Launcher 2 version Alpha 1.3.9, allows local attackers to execute arbitrary code and gain sensitive information...

CVE-2023-36123

Directory Traversal vulnerability in Hex-Dragon Plain Craft Launcher 2 version Alpha 1.3.9, allows local attackers to execute arbitrary code and gain sensitive information...

CVE-2023-30735

Improper Preservation of Permissions vulnerability in SAssistant prior to version 8.7 allows local attackers to access backup data in SAssistant...

CVE-2023-30692

Improper input validation vulnerability in Evaluator prior to SMR Oct-2023 Release 1 allows local attackers to launch privileged activities...

Input validation

Improper input validation vulnerability in Evaluator prior to SMR Oct-2023 Release 1 allows local attackers to launch privileged activities...

Input validation

Improper input validation vulnerability in Duo prior to SMR Oct-2023 Release 1 allows local attackers to launch privileged activities...

Design/Logic Flaw

Improper Preservation of Permissions vulnerability in SAssistant prior to version 8.7 allows local attackers to access backup data in SAssistant...

CVE-2023-30735

The CVE-2023-30735 entry concerns SAssistant and affects versions prior to 8.7. The root cause is an improper preservation of permissions that governs backup data, enabling local attackers to access sensitive backup information stored by SAssistant. Documents consistently describe the impact as l...

CVE-2023-30735

Improper Preservation of Permissions vulnerability in SAssistant prior to version 8.7 allows local attackers to access backup data in SAssistant...

CVE-2023-30692

Improper input validation vulnerability in Evaluator prior to SMR Oct-2023 Release 1 allows local attackers to launch privileged activities...

CVE-2023-30692

Improper input validation vulnerability in Evaluator prior to SMR Oct-2023 Release 1 allows local attackers to launch privileged activities...

CVE-2023-30692

CVE-2023-30692 affects Samsung SMR Oct-2023 Release 1: Evaluator with improper input validation, enabling local attackers to launch privileged activities. Affected: Evaluator versions prior to SMR Oct-2023 Release 1. Impact: local privilege escalation; exploitation details are not provided in the...

CVE-2023-30690

Improper input validation vulnerability in Duo prior to SMR Oct-2023 Release 1 allows local attackers to launch privileged activities...

CVE-2023-30690

Improper input validation vulnerability in Duo prior to SMR Oct-2023 Release 1 allows local attackers to launch privileged activities...

CVE-2023-30690

CVE-2023-30690 relates to an improper input validation vulnerability in Samsung Duo prior to SMR Oct-2023 Release 1. The issue enables local attackers to perform privileged activities by exploiting input validation flaws in the Duo component on affected Samsung mobile devices. Affected software i...

PT-2023-22889 · Duo · Duo

Name of the Vulnerable Software and Affected Versions: Duo versions prior to SMR Oct-2023 Release 1 Description: The issue is related to improper input validation, allowing local attackers to launch privileged activities. This can be exploited by local attackers. Recommendations: For versions pri...

Sprecher Automation SPRECON-E Improper Neutralization of Special Elements used in a Command (CVE-2020-11496)

Sprecher SPRECON-E firmware prior to 8.64b might allow local attackers with access to engineering data to insert arbitrary code. This firmware lacks the validation of the input values on the device side, which is provided by the engineering software during parameterization. Attackers with access ...

Linux Kernel eBPF Improper Input Validation Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Linux Kernel. An attacker must first obtain the ability to execute high-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the handling of eBPF...