PT-2021-2382 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to insufficient access control in the Win32k component of Windows operating systems, which can be exploited to elevate privileges using a specially crafted application...

KLA12111 Multiple vulnerabilities in Microsoft Windows

Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to gain privileges, execute arbitrary code, cause denial of service, bypass security restrictions, obtain sensitive information. Below is a complete list of vulnerabilities: 1. An elevation...

Microsoft Windows DNS Server Remote Code Execution (CVE-2021-26877)

A remote code execution vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Microsoft Windows Graphics Component Elevation of Privilege (CVE-2021-26868)

An elevation of privilege vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Microsoft Windows RRAS Service MIBEntryGet Overflow

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Microsoft Windows RRAS Service MIBEntryGet Overflow', 'Description' = %q This module exploits an overflow in the Windows Routing and Remote Acces...

Dell EMC OpenManage Server Administrator Authentication Bypass Vulnerability

DELL Dell EMC OpenManage Server Administrator is a set of system management solutions from DELL, USA. The program supports online diagnostics, system operation detection, device management, etc. Microsoft Windows is a desktop operating system from Microsoft Corporation. The Dell EMC OpenManage...

Authentication flaw

Dell EMC OpenManage Server Administrator OMSA version 9.5 Microsoft Windows installations with Distributed Web Server DWS enabled configuration contains an authentication bypass vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability to gain admin access on t...

CVE-2019-11684 Improper Access Control in Bosch Video Recording Manager

Improper Access Control in the RCP+ server of the Bosch Video Recording Manager VRM component allows arbitrary and unauthenticated access to a limited subset of certificates, stored in the underlying Microsoft Windows operating system. The fixed versions implement modified authentication checks...

Microsoft Windows Win32k Security Feature Issue Vulnerability

Microsoft Microsof Windows Win32k is an operating system from the American company Microsoft. It provides a multitasking graphical user interface. Microsoft Windows Win32k is vulnerable to a security signature issue. No detailed vulnerability details are provided at this time...

Microsoft Windows/Windows Server Remote Code Execution Vulnerability (CNVD-2021-62486)

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation U.S. Microsoft Windows is an operating system for personal devices Microsoft Windows Server is a server operating system. A remote code execution vulnerability exists in the Microsoft Windows/Windows Server...

Microsoft Windows Graphics Component Remote Code Execution Vulnerability (CNVD-2021-17746)

Microsoft Graphics Components is a graphics driver component of Microsoft Corporation USA. A remote code execution vulnerability exists in Microsoft Windows Graphics Components. No detailed vulnerability details are provided at this time...

CVE-2021-24081

Microsoft Windows Codecs Library Remote Code Execution Vulnerability...

CVE-2021-24075

Microsoft Windows VMSwitch Denial of Service Vulnerability...

CVE-2020-17162

Microsoft Windows Security Feature Bypass Vulnerability...

Information disclosure

Microsoft Windows VMSwitch Information Disclosure Vulnerability...

Remote code execution

Microsoft Windows Codecs Library Remote Code Execution Vulnerability...

Denial of service

Microsoft Windows VMSwitch Denial of Service Vulnerability...

CVE-2021-24076 Microsoft Windows VMSwitch Information Disclosure Vulnerability

...

CVE-2020-17162 Microsoft Windows Security Feature Bypass Vulnerability

...

Cisco Webex Meetings Desktop App and Webex Productivity Tools for Windows Shared Memory Information Disclosure (cisco-sa-wda-pt-msh-6LWOcZ5)

A vulnerability in Cisco Webex Meetings Desktop App and Webex Productivity Tools for Windows could allow an authenticated, local attacker to gain access to sensitive information on an affected system. This vulnerability is due to the unsafe usage of shared memory by the affected software. An...