Exploit for Link Following in Docker Desktop

CVE-2020-10665 Docker Desktop Local Privilege Escalation POC...

Exploit for Incorrect Resource Transfer Between Spheres in Microsoft

CVE-2020-1048 POC exploit code for CVE-2020-1048PrintDemon...

Microsoft Windows Spatial Data Service Spatial Data Service Privilege Elevation Vulnerability

Microsoft Windows is a set of operating systems for personal devices from Microsoft.Spatial Data Service is one of the spatial data service components. A security vulnerability exists in Spatial Data Service in Microsoft Windows 10 version 1903 that stems from a program not properly handling...

McAfee VirusScan Enterprise < 8.8 Patch 15 Multiple Vulnerabilities (SB10302)

The version of McAfee VirusScan Enterprise VSE installed on the remote Windows host is prior to 8.8 Patch 15. It is, therefore, affected by multiple vulnerabilites: - Privilege Escalation vulnerability in Microsoft Windows client McTray.exe in McAfee VirusScan Enterprise VSE 8.8 prior to Patch 14...

Microsoft Windows 7 / Server 2008 R2 ESU Status Check

Binary data wmiwin72008r2esustatus.nbin...

KLA11815 PE vulnerability in Microsoft Windows

An elevation of privilege vulnerability was found in Microsoft Windows. Malicious users can exploit this vulnerability to gain privileges. Original advisories CVE-2020-1441 Related products Microsoft-Windows Microsoft-Windows-10 CVE list CVE-2020-1441 unknown KB list 4560960 Solution Install...

The vulnerability of the Windows Runtime component in Microsoft Windows operating systems allows a perpetrator to execute arbitrary code.

The vulnerability of the Windows Runtime component in Microsoft Windows systems is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

Microsoft Windows Kernel Elevation of Privilege (CVE-2020-0986)

An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs, view, change, or delete data, or create ne...

Privilege escalation

Privilege Escalation vulnerability in Microsoft Windows client McTray.exe in McAfee VirusScan Enterprise VSE 8.8 prior to Patch 14 may allow local users to interact with the On-Access Scan Messages - Threat Alert Window with elevated privileges via running McAfee Tray with elevated privileges...

Privilege escalation

Privilege Escalation vulnerability in Microsoft Windows client McTray.exe in McAfee VirusScan Enterprise VSE 8.8 prior to Patch 14 may allow unauthorized users to interact with the On-Access Scan Messages - Threat Alert Window when the Windows Login Screen is locked...

CVE-2019-3588

CVE-2019-3588 affects McAfee VirusScan Enterprise (VSE) 8.8 prior to Patch 14. The issue is a privileges escalation in the Windows client (McTray.exe) that allows unauthorized users to interact with the On-Access Scan Messages - Threat Alert Window when the Windows Login Screen is locked. Impact ...

CVE-2019-3585 VSE Escalation of Privileges through Alert pop-up window

Privilege Escalation vulnerability in Microsoft Windows client McTray.exe in McAfee VirusScan Enterprise VSE 8.8 prior to Patch 14 may allow local users to interact with the On-Access Scan Messages - Threat Alert Window with elevated privileges via running McAfee Tray with elevated privileges...

Microsoft Windows GDI Information Disclosure Vulnerability (CNVD-2021-24907)

Microsoft Windows is a set of operating systems for personal devices from Microsoft.Windows Graphics Device Interface GDI is one of the graphic device interfaces. An information disclosure vulnerability exists in the Microsoft Windows GDI component. An attacker could exploit this vulnerability by...

Microsoft Windows Error Reporting Information Disclosure Vulnerability (CNVD-2021-27708)

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is an operating system for personal devices.Microsoft Windows Server is a server operating system. Windows Error Reporting WER is one of the error reporting components. An information...

Microsoft Windows Registry Denial of Service Vulnerability

Microsoft Windows is a set of operating systems for use on personal devices from the American company Microsoft. A denial of service vulnerability exists in Microsoft Windows Registry, which results from a program's failure to properly handle file system operations. An attacker could exploit this...

Microsoft Windows Installer elevation of privilege vulnerability (CNVD-2021-22928)

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation, U.S.A. Microsoft Windows is a set of operating systems for personal devices.Microsoft Windows Server is a set of server operating systems. Windows Installer is one of the Windows-based tool components, main...

Microsoft Windows Lockscreen Elevation of Privilege Vulnerability

Microsoft Windows is a set of operating systems for use on personal devices from the American company Microsoft. A power lifting vulnerability exists in Microsoft Windows Lockscreen, which arises from a program's inability to properly load a focused image from a secure location. An attacker can...

Microsoft Windows Background Intelligent Transfer Service Elevation of Privilege Vulnerability

Microsoft Windows is a set of operating systems for use on personal devices from the American company Microsoft. An elevation of privilege vulnerability exists in the IIS module of the Microsoft Windows Background Intelligent Transfer Service BITS, which arises from the program's failure to...

Microsoft Windows Network List Service Elevation of Privilege Vulnerability

Microsoft Windows is a set of operating systems for use on personal devices from the American company Microsoft. An elevated privilege vulnerability exists in the way memory objects are handled in the Microsoft Windows Network List Service. An attacker could exploit the vulnerability by running a...

Microsoft Windows Network Connections Service elevation of privilege vulnerability (CNVD-2021-27714)

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is an operating system for personal devices.Microsoft Windows Server is a server operating system. Windows Network Connections Service is one of the network connection service components. A...