Lucene search
+L

794 matches found

Zero Day Initiative
Zero Day Initiative
added 2022/07/12 12:0 a.m.35 views

Microsoft Windows win32kfull UMPDDrvAlphaBlend Use-After-Free Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the win32kfull...

8.8CVSS5.4AI score0.06092EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/07/12 12:0 a.m.56 views

Microsoft Windows win32kfull UMPDDrvStretchBlt Use-After-Free Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the win32kfull...

8.8CVSS5.5AI score0.06092EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/07/12 12:0 a.m.39 views

Microsoft Windows win32kfull UMPDDrvGradientFill Use-After-Free Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the win32kfull...

8.8CVSS5.6AI score0.06092EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/07/12 12:0 a.m.41 views

Microsoft Windows win32kfull UMPDDrvStretchBltROP Use-After-Free Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the win32kfull...

8.8CVSS5.5AI score0.06092EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/07/11 12:0 a.m.31 views

Trend Micro Maximum Security Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows local attackers to disclose sensitive information on affected installations of Trend Micro Maximum Security. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists...

4.4CVSS3.3AI score0.00295EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/07/01 12:0 a.m.45 views

Parallels Access Agent Uncontrolled Search Path Element Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Access Agent. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the Desktop...

7.8CVSS4.8AI score0.00344EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/06/02 12:0 a.m.109 views

Apple macOS PackageKit PKInstallSandbox SIP Bypass vulnerability

This vulnerability allows local attackers to disclose sensitive information on affected installations of Apple macOS. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within PackageKit. T...

5.5CVSS2.2AI score0.01633EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/06/01 12:0 a.m.52 views

Microsoft Windows DiagTrack Service Link Following Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the DiagTrack...

7.8CVSS6.9AI score0.00917EPSS
SaveExploits0References1
NVD
NVD
added 2022/05/27 12:15 a.m.20 views

CVE-2022-30701

An uncontrolled search path element vulnerability in Trend Micro Apex One and Apex One as a Service could allow a local attacker to craft a special configuration file to load an untrusted library with escalated privileges on affected installations. Please note: an attacker must first obtain the...

7.8CVSS0.00381EPSS
SaveExploits0References2
Prion
Prion
added 2022/05/27 12:15 a.m.17 views

Path traversal

An uncontrolled search path element vulnerability in Trend Micro Apex One and Apex One as a Service could allow a local attacker to craft a special configuration file to load an untrusted library with escalated privileges on affected installations. Please note: an attacker must first obtain the...

7.2CVSS7.6AI score0.00381EPSS
SaveExploits0References2Affected Software1
Prion
Prion
added 2022/05/27 12:15 a.m.13 views

Design/Logic Flaw

An incorrect permission assignment vulnerability in Trend Micro Apex One and Apex One as a Service could allow a local attacker to load a DLL with escalated privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target...

7.2CVSS7.6AI score0.00291EPSS
SaveExploits0References2Affected Software1
Zero Day Initiative
Zero Day Initiative
added 2022/05/27 12:0 a.m.37 views

Trend Micro Internet Security Exposed Dangerous Method Information Disclosure Vulnerability

This vulnerability allows local attackers to disclose sensitive information on affected installations of Trend Micro Internet Security. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists...

6.5CVSS3.9AI score0.00353EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/05/27 12:0 a.m.40 views

Trend Micro Internet Security Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows local attackers to disclose sensitive information on affected installations of Trend Micro Internet Security. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists...

7.3CVSS3.8AI score0.00351EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/05/26 12:0 a.m.36 views

Trend Micro Maximum Security Link Following Arbitrary File Deletion Vulnerability

This vulnerability allows local attackers to delete arbitrary files on affected installations of Trend Micro Maximum Security. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the...

6.1CVSS4.5AI score0.00375EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/05/10 12:0 a.m.40 views

Microsoft Windows Print Spooler Service Link Following Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the Print Spooler...

7CVSS6.2AI score0.1209EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/05/10 12:0 a.m.43 views

Microsoft Windows Print Spooler Service Directory Traversal Information Disclosure Vulnerability

This vulnerability allows local attackers to disclose sensitive information on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the Pri...

5.5CVSS3AI score0.0123EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/05/10 12:0 a.m.57 views

Microsoft Windows Print Spooler Service Link Following Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the Print Spooler...

7CVSS6.2AI score0.1209EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/05/10 12:0 a.m.49 views

Microsoft Windows Print Spooler Service Directory Traversal Information Disclosure Vulnerability

This vulnerability allows local attackers to disclose sensitive information on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the Pri...

5.5CVSS3AI score0.01128EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/04/01 12:0 a.m.37 views

Trend Micro Antivirus for Mac Link Following Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Trend Micro Antivirus for Mac. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the...

7.8CVSS5.8AI score0.01187EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/03/24 12:0 a.m.19 views

(0Day) Epic Games Launcher Link Following Denial-of-Service Vulnerability

This vulnerability allows local attackers to create a denial-of-service condition on affected installations of Epic Games Launcher. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within...

6.1CVSS4.1AI score
SaveExploits0
Rows per page
Query Builder