CVE-2023-3514 RazerCentralSerivce Unsafe Named Pipe Permission Escalation of Privilege Vulnerability

Improper Privilege Control in RazerCentralSerivce Named Pipe in Razer RazerCentral =7.11.0.558 on Windows allows a malicious actor with local access to gain SYSTEM privilege via communicating with the named pipe as a low-privilege user and calling "AddModule" or "UninstallModules" command to...

Razer Central 安全漏洞

Razer Central is the peripheral control center for Razer Corporation USA. A security vulnerability exists in Razer Central version 7.11.0.558 and earlier, which stems from improper privilege control in the named pipe and allows a malicious attacker with local access to gain system privileges by...

Razer Central 安全漏洞

Razer Central is the peripheral control center for Razer Corporation USA. A security vulnerability exists in Razer Central 7.11.0.558 and prior versions, which stems from improper privilege control in the named pipe and allows a malicious attacker with local access to gain system privileges and...

CVE-2023-3514: Improper Privilege Management

Improper Privilege Control in RazerCentralSerivce Named Pipe in Razer RazerCentral =7.11.0.558 on Windows allows a malicious actor with local access to gain SYSTEM privilege via communicating with the named pipe as a low-privilege user and calling "AddModule" or "UninstallModules" command to...

CVE-2023-3513: Improper Privilege Management

Improper Privilege Control in RazerCentralSerivce Named Pipe in Razer RazerCentral =7.11.0.558 on Windows allows a malicious actor with local access to gain SYSTEM privilege via communicating with the named pipe as a low-privilege user and triggering an insecure .NET deserialization...

PT-2023-25155 · Razer · Razercentral

Name of the Vulnerable Software and Affected Versions: RazerCentral versions prior to 7.11.0.558 Description: The issue is related to improper privilege control in the RazerCentralSerivce Named Pipe, allowing a malicious actor with local access to gain SYSTEM privilege. This can be achieved by...

PT-2023-25160 · Razer · Razercentral

Name of the Vulnerable Software and Affected Versions: RazerCentral versions prior to 7.11.0.558 Description: The issue is related to improper privilege control in the RazerCentralService Named Pipe, allowing a malicious actor with local access to gain SYSTEM privilege. This can be achieved by...

PT-2025-54000

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak exists when reading the 'trace pipe' file within the Linux kernel's tracing subsystem. Specifically, the iter-temp memory is allocated or relocated in the trace find next...

PT-2025-41112

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw related to the ring buffer and reading the 'trace pipe' file. A soft lockup can occur due to a deadloop when reading this file. The issue arises because...

USN-6213-1: Ghostscript vulnerability

It was discovered that Ghostscript incorrectly handled pipe devices. If a user or automated system were tricked into opening a specially crafted PDF file, a remote attacker could use this issue to execute arbitrary code...

USN-6213-1 ghostscript vulnerability

It was discovered that Ghostscript incorrectly handled pipe devices. If a user or automated system were tricked into opening a specially crafted PDF file, a remote attacker could use this issue to execute arbitrary code...

Debian DSA-5446-1 : ghostscript - security update

The remote Debian 11 / 12 host has packages installed that are affected by a vulnerability as referenced in the dsa-5446 advisory. - Artifex Ghostscript through 10.01.2 mishandles permission validation for pipe devices with the %pipe% prefix or the | pipe character prefix. CVE-2023-36664 Note tha...

The vulnerability of the software for processing, transforming, and generating documents using Ghostscript exists due to the lack of measures taken to eliminate the special elements used in the operating system command. This allows a perpetrator to execute arbitrary code.

The vulnerability of the software for processing, transforming, and generating Ghostscript documents exists because measures are not taken to eliminate the special elements used in the operating system command. Exploiting this vulnerability allows an attacker to execute arbitrary code by using th...

CVE-2023-36664

A vulnerability was found in Ghostscript. This flaw occurs due to a mishandled permission validation for pipe devices with the %pipe% prefix or the | pipe character prefix...

SUSE CVE-2023-36664

Artifex Ghostscript before 10.01.2 mishandles permission validation for pipe devices with the %pipe% prefix or the | pipe character prefix...

ALPINE-CVE-2023-36664

Artifex Ghostscript before 10.01.2 mishandles permission validation for pipe devices with the %pipe% prefix or the | pipe character prefix...

CVE-2023-36664

Artifex Ghostscript before 10.01.2 mishandles permission validation for pipe devices with the %pipe% prefix or the | pipe character prefix...

DEBIAN-CVE-2023-36664

Artifex Ghostscript before 10.01.2 mishandles permission validation for pipe devices with the %pipe% prefix or the | pipe character prefix...

CVE-2023-36664

Artifex Ghostscript through 10.01.2 mishandles permission validation for pipe devices with the %pipe% prefix or the | pipe character prefix...

CVE-2023-36664

Artifex Ghostscript before 10.01.2 mishandles permission validation for pipe devices with the %pipe% prefix or the | pipe character prefix...