CVE-2024-28986 SolarWinds Web Help Desk Java Deserialization Remote Code Execution Vulnerability

SolarWinds Web Help Desk was found to be susceptible to a Java Deserialization Remote Code Execution vulnerability that, if exploited, would allow an attacker to run commands on the host machine. While it was reported as an unauthenticated vulnerability, SolarWinds has been unable to reproduce...

Vulnerabilities fixed in Microsoft Azure components

Microsoft has fixed vulnerabilities in several Azure components. A malicious party can exploit the vulnerabilities to grant themselves elevated privileges or impersonate another user. For successful abuse, the malicious party needs prior access to the vulnerable environment, or the malicious part...

CVE-2024-38223

Windows Initial Machine Configuration Elevation of Privilege Vulnerability...

CVE-2024-38162

Azure Connected Machine Agent Elevation of Privilege Vulnerability...

CVE-2024-38162

Azure Connected Machine Agent Elevation of Privilege Vulnerability...

CVE-2024-38098

Azure Connected Machine Agent Elevation of Privilege Vulnerability...

CVE-2024-38098

Azure Connected Machine Agent Elevation of Privilege Vulnerability...

CVE-2024-38223

Technical details for CVE-2024-38223 are not publicly available in the provided documents. No information on affected products, root cause, or fixes is supplied here. Monitor sources for updates.

CVE-2024-38223 Windows Initial Machine Configuration Elevation of Privilege Vulnerability

...

CVE-2024-38162 Azure Connected Machine Agent Elevation of Privilege Vulnerability

...

CVE-2024-38162 Azure Connected Machine Agent Elevation of Privilege Vulnerability

...

CVE-2024-38162

CVE-2024-38162 concerns the Azure Connected Machine Agent with an Elevation of Privilege vulnerability. The CVSS 3.1 vector (AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) indicates a local-exploit, low-privilege requirement leading to high impact on confidentiality, integrity, and availability. Multiple s...

CVE-2024-38098 Azure Connected Machine Agent Elevation of Privilege Vulnerability

...

CVE-2024-38098 Azure Connected Machine Agent Elevation of Privilege Vulnerability

...

Important: Red Hat Security Advisory: open-vm-tools security update

An update for open-vm-tools is now available for Red Hat Enterprise Linux 7.7 Advanced Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is availab...

kernel: virtio-net: tun: mlx5_core short frame denial of service

A denial of service DoS attack was found in the mlx5 driver in the Linux kernel. A KVM guest VM using virtio-net can crash the host by sending a short packet, for example, size = ETHHLEN...

Azure Connected Machine Agent Elevation of Privilege Vulnerability

...

Azure Connected Machine Agent Elevation of Privilege Vulnerability

...

Windows Initial Machine Configuration Elevation of Privilege Vulnerability

...

Understanding the New Windows Secure Kernel Mode Elevation of Privilege Vulnerability (CVE-2024-21302)

On August 7, 2024, Microsoft disclosed a significant security vulnerability affecting Windows-based systems, known as CVE-2024-21302. This zero-day vulnerability allows attackers with administrator privileges to elevate their access by replacing current versions of Windows system files with...