CVE-2023-42126

CVE-2023-42126 affects G Data Total Security, specifically the GDBackupSvc service. The flaw allows a local attacker who can run low-privilege code to create a symbolic link that enables the service to write a file with a permissive DACL, enabling privilege escalation to SYSTEM and the execution ...

CVE-2023-42127

CVE-2023-42127 affects Kofax Power PDF. The vulnerability is an out-of-bounds write in PDF file parsing that can lead to remote code execution. Exploitation requires user interaction (visiting a malicious page or opening a malicious file). Root cause: improper validation of user-supplied data dur...

CVE-2023-42125

This CVE concerns Avast Premium Security. The vulnerability lies in the Sandbox feature implementation: an attacker who can run low-privilege code locally can abuse symbolic links to create arbitrary namespace objects, enabling privilege escalation to SYSTEM and arbitrary code execution. Affected...

CVE-2023-42124

CVE-2023-42124 concerns Avast Premium Security. The flaw is in the sandbox feature’s implementation, caused by incorrect authorization, allowing a local attacker who can run low-privileged code to escalate privileges and execute arbitrary code outside the sandbox, at medium integrity and high imp...

CVE-2023-42122

CVE-2023-42122 affects Control Web Panel via the cwpsrv process. The flaw: improper validation of a user-supplied string before using it in a system call, with cwpsrv listening on the loopback interface. This enables a local attacker who can run low-privileged code to escalate to root and execute...

CVE-2023-42121

CVE-2023-42121 concerns Control Web Panel (CWP) missing authentication in its web interface, enabling remote code execution with no privileges required. The flaw results from a lack of authentication before accessing functionality, allowing an attacker to execute code in the context of a valid CW...

CVE-2023-42120

CVE-2023-42120 affects Control Web Panel via the dns_zone_editor module, where improper validation of a user-supplied string before a system call enables remote code execution with root privileges. Impact is high (RCE, root, network exploit) and requires authentication to exploit. The entry is co...

CVE-2023-42119

CVE-2023-42119 affects Exim’s dnsdb Out-Of-Bounds Read Information Disclosure via the smtpd path (TCP port 25). Root cause: improper validation leads to reading past allocated buffer, enabling network-adjacent information disclosure; exploitation could be combined with other vulnerabilities to en...

CVE-2023-42118

CVE-2023-42118 affects Exim libspf2. The vulnerability arises in the SPF macro parser, where unvalidated user-supplied data can trigger an integer underflow before memory write, enabling remote code execution with the service account context. Exploitation appears feasible by network-adjacent atta...

CVE-2023-42117

CVE-2023-42117 affects Exim (smtp service). Root cause: Improper neutralization/validation of user-supplied data leading to a memory corruption and remote code execution, with no authentication required. Impact: remote code execution in Exim processes, on affected installations. Affected componen...

CVE-2023-42115

Exim’s SMTP service (port 25) is affected by CVE-2023-42115: an AUTH-less out-of-bounds write that enables remote code execution via improper validation of user-supplied data, allowing code execution under the service account. The vulnerability details and impact are stated in multiple sources (E...

CVE-2023-42114

CVE-2023-42114 corresponds to an Exim NTLM Challenge Out-Of-Bounds Read Information Disclosure vulnerability. The flaw occurs in NTLM challenge handling due to improper validation of user-supplied data, enabling a read past the end of an allocated structure. A remote attacker can disclose informa...

CVE-2023-42111

PDF-XChange Editor contains a vulnerability in JPG file parsing that can cause an out-of-bounds read due to insufficient input validation. This flaw can enable remote code execution and requires user interaction (e.g., opening a malicious file or visiting a malicious page). Multiple sources (ZDI-...

CVE-2023-42108

CVE-2023-42108 affects PDF-XChange Editor. The vulnerability arises in EMF file parsing where absence of validating an object’s existence before operations leads to a use-after-free, enabling remote code execution . Impact is high (C/H/I/A all high) and requires user interaction (visit a maliciou...

CVE-2023-42105

The connected sources confirm CVE-2023-42105 affects Ashlar-Vellum Cobalt, with a vulnerability in the AR file parser that leads to a type confusion when parsing AR data. Root cause: insufficient validation of user-supplied data, allowing an attacker to trigger a type confusion and execute code i...

CVE-2023-42104

The CVE-2023-42104 entry concerns Ashlar-Vellum Cobalt AR File Parsing Use-After-Free Remote Code Execution. Affected software: Ashlar-Vellum Cobalt. The vulnerability arises in the parsing of AR files where the code fails to validate the existence of an object before performing operations, enabl...

CVE-2023-42102

Ashlar-Vellum Cobalt AR File Parsing Type Confusion Remote Code Execution (CVE-2023-42102) affects Ashlar-Vellum Cobalt and stems from improper validation during AR file parsing, causing a type confusion. The vulnerability enables code execution in the context of the current process and requires ...

CVE-2023-42100

CVE-2023-42100 affects Kofax Power PDF and involves a flaw in the PDF file parsing logic. The vulnerability stems from insufficient validation of user-supplied data, allowing a read past the end of an allocated object (out-of-bounds read) and resulting in information disclosure. It requires user ...

CVE-2023-42099

Intel Driver & Support Assistant (DSA Service) is affected by a local privilege escalation vulnerability (CVE-2023-42099). The flaw enables a local attacker who can run low-privileged code to abuse symbolic links within the DSA Service to delete a file and escalate to SYSTEM, potentially arbitrar...

CVE-2023-42095

CVE-2023-42095 describes a vulnerability in Foxit PDF Reader where the AcroForm handling of Annotation objects can read past the end of an allocated buffer, causing an information disclosure. The issue is triggered by processing unvalidated user-supplied data, and, per the description, an attacke...