CVE-2022-3369

An Improper Access Control vulnerability in the bdservicehost.exe component, as used in Bitdefender Engines for Windows, allows an attacker to delete privileged registry keys by pointing a Registry symlink to a privileged key. This issue affects: Bitdefender Engines versions prior to 7.92659. It...

PT-2022-21805 · Bitdefender · Bitdefender Internet Security +5

Name of the Vulnerable Software and Affected Versions: Bitdefender Engines versions prior to 7.92659 Bitdefender Antivirus Free versions prior to 7.92659 Bitdefender Antivirus Plus versions prior to 7.92659 Bitdefender Internet Security versions prior to 7.92659 Bitdefender Total Security version...

The vulnerability of Windows operating systems, related to insufficient protection of sensitive data, allows attackers to gain unauthorized access to protected information.

The vulnerability of Windows operating systems is related to insufficient protection of service data during the processing of registry keys. Exploiting this vulnerability can allow an attacker, working remotely, to gain unauthorized access to protected information...

Microsoft Windows Server Remotely Accessible Registry Keys Information Disclosure Vulnerability

Microsoft Windows Server Remotely Accessible Registry Keys is vulnerable to information disclosure, which results from inadequate protection of sensitive information on network systems or products. The vulnerability is caused by inadequate protection of sensitive information in network systems or...

CVE-2022-38033

Windows Server Remotely Accessible Registry Keys Information Disclosure Vulnerability...

CVE-2022-38033

Windows Server Remotely Accessible Registry Keys Information Disclosure Vulnerability...

CVE-2022-38033

Windows Server Remotely Accessible Registry Keys Information Disclosure Vulnerability...

Information disclosure

Windows Server Remotely Accessible Registry Keys Information Disclosure Vulnerability...

Windows Server Remotely Accessible Registry Keys Information Disclosure Vulnerability

...

CVE-2022-38033

CVE-2022-38033 is described in connected sources as a Windows Server vulnerability titled “Remotely Accessible Registry Keys Information Disclosure Vulnerability.” The common thread across documents is that this issue allows access to sensitive data via registry keys exposed remotely, with an imp...

Microsoft Windows Server Remotely Accessible Registry Keys 安全漏洞

Microsoft Windows Server Remotely Accessible Registry Keys is vulnerable to information disclosure, which results from inadequate protection of sensitive information on network systems or products. The vulnerability is caused by inadequate protection of sensitive information in network systems or...

PT-2022-5108 · Microsoft · Windows Server +1

Name of the Vulnerable Software and Affected Versions: Windows Server affected versions not specified Description: The issue is related to insufficient protection of service data when processing registry keys, which can allow an attacker to obtain unauthorized access to protected information. Thi...

(Pwn2Own) Microsoft Windows bthport Driver Improper Authorization Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the bthport.sys...

Exploit for CVE-2022-30190

MSDT Patcher, a.k.a. CVE-2022-30190-NSIS This is an NSIS scrip...

CVE-2021-33025

xArrow SCADA versions 7.2 and prior permits unvalidated registry keys to be run with application-level privileges...

CVE-2021-33025

xArrow SCADA versions 7.2 and prior permits unvalidated registry keys to be run with application-level privileges...

Code injection

xArrow SCADA versions 7.2 and prior permits unvalidated registry keys to be run with application-level privileges...

CVE-2021-33025 xArrow SCADA Path Traversal

xArrow SCADA versions 7.2 and prior permits unvalidated registry keys to be run with application-level privileges...

Tarrask malware uses scheduled tasks for defense evasion

As Microsoft continues to track the high-priority state-sponsored threat actor HAFNIUM, new activity has been uncovered that leverages unpatched zero-day vulnerabilities as initial vectors. The Microsoft Detection and Response Team DART in collaboration with the Microsoft Threat Intelligence Cent...

The vulnerability of HMI/SCADA systems like xArrow arises from the possibility of running them with unverified registry keys with application-level privileges. This allows attackers to bypass existing security restrictions and enhance their privileges.

The vulnerability of HMI/SCADA systems like xArrow stems from the ability to execute commands through unverified registry keys with application-level privileges. Exploiting this vulnerability allows attackers to bypass existing security restrictions and enhance their privileges...