KLA12139 Multiple vulnerabilities in Microsoft Windows

Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to obtain sensitive information, bypass security restrictions, gain privileges, execute arbitrary code, cause denial of service, spoof user interface. Below is a complete list of...

PT-2024-11081 · Linux +4 · Linux Kernel +4

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 5.12.0-rc5 Description: The issue arises from the overlayfs not putting temporary dentry when there is a metacopy error, leading to dentry leaks when shutting down the related superblock. This results in busy...

ASB-A-172252122

In ImportVCardActivity, there is a possible way to bypass user consent due to a tapjacking/overlay attack. This could lead to local escalation of privilege with User execution privileges needed. User interaction is needed for exploitation...

The vulnerability of the Overlay Filter Elevation component of the Windows operating system, which allows a hacker to increase their privileges

The vulnerability of the Overlay Filter Elevation component in the Windows operating system is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker to enhance their privileges...

The vulnerability of the Windows operating system, related to insecure management of privileges, allows a perpetrator to elevate their privileges.

The vulnerability of the App-V Overlay Filter component in the Windows operating system is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker to enhance their privileges...

CVE-2021-28133

Zoom through 5.5.4 sometimes allows attackers to read private information on a participant's screen, even though the participant never attempted to share the private part of their screen. When a user shares a specific application window via the Share Screen functionality, other meeting participan...

CVE-2021-26860

Windows App-V Overlay Filter Elevation of Privilege Vulnerability...

CVE-2021-26874

Windows Overlay Filter Elevation of Privilege Vulnerability...

CVE-2021-26874

Windows Overlay Filter Elevation of Privilege Vulnerability...

CVE-2021-26860

Windows App-V Overlay Filter Elevation of Privilege Vulnerability...

Privilege escalation

Windows App-V Overlay Filter Elevation of Privilege Vulnerability...

Privilege escalation

Windows Overlay Filter Elevation of Privilege Vulnerability...

CVE-2021-26860

Windows App-V Overlay Filter Elevation of Privilege Vulnerability...

CVE-2021-26874

CVE-2021-26874 is a Windows elevation-of-privilege vulnerability affecting the Windows Overlay Filter component. The description and CVSS data indicate a local, low-privilege exploit with no user interaction required, potentially allowing a total compromise of the affected system (confidentiality...

CVE-2021-26874 Windows Overlay Filter Elevation of Privilege Vulnerability

...

CVE-2021-26874 Windows Overlay Filter Elevation of Privilege Vulnerability

...

CVE-2021-26860 Windows App-V Overlay Filter Elevation of Privilege Vulnerability

...

CVE-2021-26860

CVE-2021-26860 is a Windows App-V Overlay Filter Elevation of Privilege vulnerability. The issue is local in nature and can allow an attacker with LOW privileges and no user interaction to escalate privileges, impacting confidentiality, integrity, and availability as described in CVSS/metrics. Co...

Design/Logic Flaw

In onCreate of ChooseTypeAndAccountActivity.java, there is a possible way to learn the existence of an account, without permissions, due to a tapjacking/overlay attack. This could lead to local escalation of privilege with User execution privileges needed. User interaction is needed for...

CVE-2021-0391

CVE-2021-0391 affects Android Open Source Project: the vulnerability resides in the UI flow of ChooseTypeAndAccountActivity (onCreate in ChooseTypeAndAccountActivity.java). It allows learning whether an account exists via a tapjacking/overlay attack, without requiring permissions. Impact: local e...