6588 matches found
EulerOS 2.0 SP10 : xorg-x11-server (EulerOS-SA-2023-1569)
According to the versions of the xorg-x11-server package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A vulnerability was found in X.Org. This security flaw occurs because the XkbCopyNames function left a dangling pointer to freed memory,...
Flatpak 安全漏洞
Flatpak is an application virtualization system for Linux desktop application computer environments. A security vulnerability exists in Flatpak versions prior to 1.10.8, 1.12.x through 1.12.8, 1.14.x through 1.14.4, and 1.15.x through 1.15.4. An attacker could exploit the vulnerability to elevate...
CVE-2023-26484: Incorrect Authorization
KubeVirt is a virtual machine management add-on for Kubernetes. In versions 0.59.0 and prior, if a malicious user has taken over a Kubernetes node where virt-handler the KubeVirt node-daemon is running, the virt-handler service account can be used to modify all node specs. This can be misused to...
GitHub: CVE-2023-22743 Git for Windows Installer Elevation of Privilege Vulnerability
...
Microsoft Outlook Elevation of Privilege Vulnerability
...
CVE-2023-23412: Improper Privilege Management
Windows Accounts Picture Elevation of Privilege Vulnerability...
PT-2023-1775 · Microsoft · Windows Graphics +1
Name of the Vulnerable Software and Affected Versions: Windows Graphics Component affected versions not specified Description: The issue is related to insecure privilege management in the Windows Graphics Component. It allows an attacker to elevate their privileges. There is no information provid...
PT-2023-1766 · Microsoft · Windows
Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to insecure privilege management in the Windows Accounts Picture component, allowing an attacker to elevate their privileges. This can affect the system. Recommendation...
CVE-2023-24578
McAfee Total Protection prior to 16.0.49 allows attackers to elevate user privileges due to DLL sideloading. This could enable a user with lower privileges to execute unauthorized tasks...
McAfee Total Protection 后置链接漏洞
McAfee Total Protection MTP is a suite of antivirus software from McAfee, Inc. A security vulnerability exists in McAfee Total Protection prior to version 16.0.50, which stems from incorrect link resolution. The vulnerability can be exploited by an attacker to elevate user privileges via the...
CVE-2023-24577: Improper Link Resolution Before File Access
McAfee Total Protection prior to 16.0.50 allows attackers to elevate user privileges due to Improper Link Resolution via registry keys. This could enable a user with lower privileges to execute unauthorized tasks...
Linux kernel resource management error vulnerability (CNVD-2023-58989)
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a confusion in the instructions responsible for freeing memory in the nouveau driver. The vulnerability can ...
Debian: Security Advisory (DLA-796-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Google Android 安全漏洞
Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability. An attacker could exploit this vulnerability to escalate privileges or cause a denial of service...
Amazon Linux 2 : xorg-x11-server (ALAS-2023-1982)
It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2023-1982 advisory. 2024-05-23: CVE-2022-46343 was added to this advisory. 2024-05-23: CVE-2022-46341 was added to this advisory. 2024-05-23: CVE-2022-46344 was added to this advisory. 2024-05-23: CVE-2022-46340 was...
Google Android elevation of privilege vulnerability (CNVD-2023-26073)
Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability, which is caused by improper use of cryptocurrency. An attacker can exploit the vulnerability to gain elevated privileges...
Google Android 安全漏洞
Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability that originates from a privilege bypass in resolveAttributionSource of ServiceUtilities.cpp, which can be exploited by an attacker to gain elevated...
Symantec Endpoint Protection Client < 14.3.5470.3000 / 14.3 RU4 < 14.3.7419.4000 / 14.3 RU5 < 14.3.8289.5000 / 14.3 RU6 < 14.3.9210.6000 Privilege Elevation (21165)
The version of Symantec Endpoint Protection SEP Client installed on the remote host is affected by an elevation of privilege vulnerability, which is a type of issue whereby an attacker may attempt to compromise the software application to gain elevated privileges. Note that Nessus has not tested...
Google Android 资源管理错误漏洞
Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability that can be exploited by an attacker to gain elevated privileges...