8464 matches found
CVE-2023-20575
A potential power side-channel vulnerability in some AMD processors may allow an authenticated attacker to use the power reporting functionality to monitor a program’s execution inside an AMD SEV VM potentially resulting in a leak of sensitive information...
Design/Logic Flaw
A potential power side-channel vulnerability in some AMD processors may allow an authenticated attacker to use the power reporting functionality to monitor a program’s execution inside an AMD SEV VM potentially resulting in a leak of sensitive information...
CVE-2023-20575
A potential power side-channel vulnerability in some AMD processors may allow an authenticated attacker to use the power reporting functionality to monitor a program’s execution inside an AMD SEV VM potentially resulting in a leak of sensitive information...
CVE-2023-20575
A potential power side-channel vulnerability in some AMD processors may allow an authenticated attacker to use the power reporting functionality to monitor a program’s execution inside an AMD SEV VM potentially resulting in a leak of sensitive information...
CVE-2023-36874
Windows Error Reporting Service Elevation of Privilege Vulnerability...
CVE-2023-36874
Windows Error Reporting Service Elevation of Privilege Vulnerability...
Privilege escalation
Windows Error Reporting Service Elevation of Privilege Vulnerability...
CVE-2023-36874 Windows Error Reporting Service Elevation of Privilege Vulnerability
...
CVE-2023-36874 Windows Error Reporting Service Elevation of Privilege Vulnerability
...
CVE-2023-36874
CVE-2023-36874 is a Windows Error Reporting Service privilege-escalation vulnerability. The root cause described in the sources is a filesystem/relative-path handling flaw: WER may invoke wermgr.exe using a relative path and does not validate symbolic links, allowing a non-system executable to be...
m.auto-tuning.cz Cross Site Scripting vulnerability OBB-3502615
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
timphoto.free.fr Cross Site Scripting vulnerability OBB-3502584
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Windows Error Reporting Service Elevation of Privilege Vulnerability
...
AMD processors security vulnerabilities
AMD Processors is a processor from AMD Semiconductor AMD. A security vulnerability exists in AMD processors that stems from a power-side channel vulnerability that could allow an authenticated attacker to use the power reporting feature to monitor the execution of programs within an AMD SEV virtu...
CVE-2023-36874
Windows Error Reporting Service Elevation of Privilege Vulnerability Recent assessments: bwatters-r7 at January 17, 2024 4:54pm UTC reported: CVE-2023-36874 is a filesystem redirection vulnerability that relies on a trusted process using relative filepath data and poor file validation to allow a...
Vulnerabilities fixed in Microsoft Windows
Microsoft has fixed vulnerabilities in Windows. A malicious party can exploit the vulnerabilities to launch attacks execute attacks that can lead to the following categories of damage: Denial-of-Service DoS. Circumvention of security measure Remote code execution Administrator/Root rights Remote...
PT-2023-3830 · Microsoft · Windows Error Reporting Service +1
Name of the Vulnerable Software and Affected Versions: Microsoft Windows Error Reporting Service affected versions not specified Description: The issue is related to an elevation-of-privilege vulnerability in the Windows Error Reporting Service, which allows attackers to affect the system. This...
CVE-2023-36874: Improper Link Resolution Before File Access
Windows Error Reporting Service Elevation of Privilege Vulnerability...
Microsoft Windows Error Reporting security vulnerabilities
Microsoft Windows Error Reporting WER is a component of Microsoft Corporation USA. It enables users to notify Microsoft of application failures, kernel failures, unresponsive applications, and other application-specific problems. A security vulnerability exists in Microsoft Windows Error Reportin...
