Design/Logic Flaw

A vulnerability in the web-based management interface of Cisco Unified Contact Center Management Portal Unified CCMP and Cisco Unified Contact Center Domain Manager Unified CCDM could allow an authenticated, remote attacker to elevate their privileges to Administrator. This vulnerability is due t...

CVE-2022-20658: Client-Side Enforcement of Server-Side Security

A vulnerability in the web-based management interface of Cisco Unified Contact Center Management Portal Unified CCMP and Cisco Unified Contact Center Domain Manager Unified CCDM could allow an authenticated, remote attacker to elevate their privileges to Administrator. This vulnerability is due t...

Google Android Elevation of Privilege Vulnerability (CNVD-2022-16342)

Google Android is a Linux-based open-source operating system from the U.S. company Google. Google Android elevation of privilege vulnerability can be exploited by attackers to elevate privileges...

CVE-2022-21920 Windows Kerberos Elevation of Privilege Vulnerability

...

PT-2022-1843 · Microsoft · Cluster Port Driver +1

Name of the Vulnerable Software and Affected Versions: Microsoft Cluster Port Driver affected versions not specified Description: The issue is related to insecure privilege management in the Microsoft Cluster Port Driver, which can be exploited to elevate privileges in the system. This allows an...

PT-2022-1504 · Microsoft · Windows Accounts Control +1

Name of the Vulnerable Software and Affected Versions: Windows Accounts Control affected versions not specified Description: The issue is related to insecure privilege management in the Windows Accounts Control component of the Windows operating system. It allows an attacker to elevate their...

PT-2022-1812 · Microsoft · Windows +1

Name of the Vulnerable Software and Affected Versions: Microsoft Diagnostics Hub Standard Collector affected versions not specified Description: The issue is related to insecure privilege management in the Microsoft Diagnostics Hub Standard Collector service of the Microsoft Windows operating...

PT-2022-1530 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to errors in privilege management in the implementation of the Kerberos protocol in Windows operating systems. It allows a remote attacker to elevate their privileges...

CVE-2022-21882

Win32k Elevation of Privilege Vulnerability Recent assessments: gwillcox-r7 at January 18, 2022 4:35pm UTC reported: Looks like this is a LPE in win32k that is being exploited in the wild according to Microsoft to let attackers escalate their privileges to SYSTEM. Attack complexity on this is hig...

KLA12415 Multiple vulnerabilities in Mozilla Firefox

Multiple vulnerabilities were found in Mozilla Firefox. Malicious users can exploit these vulnerabilities to bypass security restrictions, execute arbitrary code, spoof user interface, gain privileges, cause denial of service, obtain sensitive information. Below is a complete list of...

PT-2022-1527 · Microsoft · Windows Dwm Core Library +1

Name of the Vulnerable Software and Affected Versions: Windows DWM Core Library affected versions not specified Description: The issue is related to insecure privilege management in the Windows DWM Core Library, which can be exploited to elevate privileges. This could allow an attacker to affect...

Input validation

A origin validation error vulnerability in Trend Micro Apex One on-prem and SaaS could allow a local attacker drop and manipulate a specially crafted file to issue commands over a certain pipe and elevate to a higher level of privileges. Please note: an attacker must first obtain the ability to...

Google Chrome Elevation of Privilege Vulnerability

Google Chrome is a web browser from the US company Google. Google Chrome privilege elevation vulnerability can be exploited by attackers to elevate privileges...

CVE-2021-45441

A origin validation error vulnerability in Trend Micro Apex One on-prem and SaaS could allow a local attacker drop and manipulate a specially crafted file to issue commands over a certain pipe and elevate to a higher level of privileges. Please note: an attacker must first obtain the ability to...

Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

...

Microsoft Edge 安全漏洞

Google Chrome is a web browser from the US company Google. Google Chrome privilege elevation vulnerability can be exploited by attackers to elevate privileges...

MediaTek 芯片 输入验证错误漏洞

MediaTek chips are a variety of chips from MediaTek, a division of China's MediaTek Mediatek. The MediaTek chips are vulnerable to an input validation error vulnerability that stems from a possible memory corruption due to an integer overflow in the mdp driver. This could result in a local...

CVE-2018-4478

A validation issue was addressed with improved logic. This issue is fixed in macOS High Sierra 10.13.5, Security Update 2018-003 Sierra, Security Update 2018-003 El Capitan. An attacker with physical access to a device may be able to elevate privileges...

CVE-2017-13906: Improper Restriction of Operations within the Bounds of a Memory Buffer

A memory corruption issue was addressed with improved memory handling. This issue is fixed in macOS High Sierra 10.13.1, Security Update 2017-001 Sierra, and Security Update 2017-004 El Capitan, macOS High Sierra 10.13. A malicious application may be able to elevate privileges...

CVE-2018-4478: Improper Privilege Management

A validation issue was addressed with improved logic. This issue is fixed in macOS High Sierra 10.13.5, Security Update 2018-003 Sierra, Security Update 2018-003 El Capitan. An attacker with physical access to a device may be able to elevate privileges...