Microsoft Windows Desktop Bridge permission licensing and access control vulnerabilities

Microsoft Windows Desktop Bridge is an application from Microsoft Corporation USA. It provides a bridge between desktop applications and the common Windows platform. A vulnerability exists in Microsoft Windows Desktop Bridge with privilege permission and access control issues. The following...

Microsoft Win32k Elevation of Privilege (CVE-2021-40449)

An elevation of privilege vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Microsoft Windows Security Feature Issues and Vulnerabilities

Microsoft Windows is a suite of operating systems for use on personal devices from the U.S.-based Microsoft Corporation Microsoft. A security feature issue vulnerability exists in Microsoft Console Window Host. The following products and editions are affected:Windows 10 Version 21H1 for x64-based...

Microsoft Windows Common Log File System Driver Elevation of Privilege (CVE-2021-40443)

An elevation of privilege vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

PT-2021-4385 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to errors in security settings, allowing a remote attacker to bypass the system's protection mechanism. This security-feature bypass vulnerability enables attackers to...

Microsoft Windows Storage Spaces Controller: Permissions and access control issues

Microsoft Windows Storage Spaces Controller is an essential driver for providing storage space functionality from Microsoft Corporation USA. A vulnerability exists in Microsoft Windows Storage Spaces Controller with privilege permission and access control issues. The following products and editio...

KLA12310 Multiple vulnerabilities in Microsoft Windows

Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to gain privileges, bypass security restrictions, obtain sensitive information, spoof user interface, execute arbitrary code, cause denial of service. Below is a complete list of...

Microsoft Windows Common Log File System Driver Elevation of Privilege (CVE-2021-40466)

An elevation of privilege vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Microsoft Windows Code Injection Vulnerability

Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft Corporation USA. A code injection vulnerability exists in Microsoft Windows Text Shaping. The following products and editions are affected: Windows 10 Version 1909 for 32-bit Systems,Windows 10 Version 19...

Microsoft Windows Codecs Library Code Injection Vulnerability

The Microsoft Windows Codecs Library is a feature library for Microsoft Windows systems from Microsoft Corporation. A code injection vulnerability exists in the Microsoft Windows Codecs Library. The following products and editions are affected:Windows 10 Version 1809 for 32-bit Systems,Windows 10...

Microsoft Win32k Elevation of Privilege (CVE-2021-41357)

An elevation of privilege vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Microsoft DWM Core Library: Permissions and access control issues

Microsoft DWM Core Library is a core library for Microsoft windows from Microsoft Corporation. A vulnerability exists in the Microsoft DWM Core Library due to permission and access control issues. The following products and editions are affected: Windows 10 Version 1909 for 32-bit Systems,Windows...

Ardour Resource Management Error Vulnerability

Ardour is the Ardour community's open source digital audio workstation software, supporting Linux, Mac OS X and other operating systems, and Microsoft Windows since version 4.0. Ardour has a resource management error vulnerability that stems from the use of xmlFreeDoc and xmlXPathFreeContext when...

Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Microsoft

Usage Make sure Python and ncat are installed...

Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Microsoft

Usage Make sure Python and ncat are installed...

Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Microsoft

Usage Make sure Python and ncat are installed...

Researchers Discover UEFI Bootkit Targeting Windows Computers Since 2012

Cybersecurity researchers on Tuesday revealed details of a previously undocumented UEFI Unified Extensible Firmware Interface bootkit that has been put to use by threat actors to backdoor Windows systems as early as 2012 by modifying a legitimate Windows Boot Manager binary to achieve persistence...

CVE-2021-21706

In PHP versions 7.3.x below 7.3.31, 7.4.x below 7.4.24 and 8.0.x below 8.0.11, in Microsoft Windows environment, ZipArchive::extractTo may be tricked into writing a file outside target directory when extracting a ZIP file, thus potentially causing files to be created or overwritten, subject to OS...

CVE-2021-21706 ZipArchive::extractTo may extract outside of destination dir

In PHP versions 7.3.x below 7.3.31, 7.4.x below 7.4.24 and 8.0.x below 8.0.11, in Microsoft Windows environment, ZipArchive::extractTo may be tricked into writing a file outside target directory when extracting a ZIP file, thus potentially causing files to be created or overwritten, subject to OS...

CVE-2021-21706: Path Traversal: '../filedir'

In PHP versions 7.3.x below 7.3.31, 7.4.x below 7.4.24 and 8.0.x below 8.0.11, in Microsoft Windows environment, ZipArchive::extractTo may be tricked into writing a file outside target directory when extracting a ZIP file, thus potentially causing files to be created or overwritten, subject to OS...