CVE-2022-21899 Windows Extensible Firmware Interface Security Feature Bypass Vulnerability

...

PT-2022-1528 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to the implementation of the Windows BackupKey protocol in Windows operating systems, which is associated with information disclosure. Exploitation of this issue may...

KLA12416 Multiple vulnerabilities in Mozilla Firefox ESR

Multiple vulnerabilities were found in Mozilla Firefox ESR. Malicious users can exploit these vulnerabilities to bypass security restrictions, spoof user interface, execute arbitrary code, cause denial of service, obtain sensitive information. Below is a complete list of vulnerabilities: 1...

KLA12422 Multiple vulnerabilities in Microsoft Windows

Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to gain privileges, execute arbitrary code, obtain sensitive information, bypass security restrictions, cause denial of service, spoof user interface. Below is a complete list of...

KLA12418 Multiple vulnerabilities in Adobe Acrobat and Adobe Acrobat Reader

Multiple vulnerabilities were found in Adobe Acrobat and Adobe Acrobat Reader. Malicious users can exploit these vulnerabilities to bypass security restrictions, execute arbitrary code, cause denial of service, gain privileges, obtain sensitive information. Below is a complete list of...

KLA12415 Multiple vulnerabilities in Mozilla Firefox

Multiple vulnerabilities were found in Mozilla Firefox. Malicious users can exploit these vulnerabilities to bypass security restrictions, execute arbitrary code, spoof user interface, gain privileges, cause denial of service, obtain sensitive information. Below is a complete list of...

PT-2022-1505 · Microsoft · Windows Hyper-V +1

Name of the Vulnerable Software and Affected Versions: Windows Hyper-V affected versions not specified Description: The issue is related to insecure privilege management in the Windows Hyper-V hardware virtualization system, allowing an attacker to bypass existing security restrictions. This can...

KLA12417 Multiple vulnerabilities in Mozilla Thunderbird

Multiple vulnerabilities were found in Mozilla Thunderbird. Malicious users can exploit these vulnerabilities to bypass security restrictions, spoof user interface, execute arbitrary code, cause denial of service, obtain sensitive information. Below is a complete list of vulnerabilities: 1...

PT-2022-2050 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to a security feature bypass in the Local Security Authority Domain Policy Remote Protocol, which can be exploited by a remote attacker to disclose protected informatio...

Security feature bypass

In Beaver Builder through 2.5.0.3, attackers can bypass the visibility controls protection mechanism via the REST API...

Samba 竞争条件问题漏洞

Samba is a standard Windows interoperability suite for Linux and Unix. A post-link vulnerability exists in Samba file server that results from a symbolic link contention condition when creating directories. A remote authenticated user can create a directory on a Unix file system outside of the...

Google Chrome Autofill security bypass vulnerability (CNVD-2022-65579)

Google Chrome is a web browser from Google, Inc. A security bypass vulnerability exists in Google Chrome Autofill, which can be exploited by attackers to bypass security restrictions...

The vulnerability of the API for working with computer graphics in Google Chrome browser’s WebGPU, related to the use of memory after it is freed, allows attackers to circumvent existing security restrictions.

The vulnerability of the API for working with computer graphics in Google Chrome’s WebGPU browser relates to the use of memory after it is freed. Exploiting this vulnerability could allow a malicious actor to circumvent existing security restrictions through a specially created HTML page...

The vulnerability of the DevTools set of tools for web development in the Google Chrome browser allows a hacker to bypass existing security restrictions by using a specially created HTML page.

The vulnerability of the DevTools suite for web development in the Google Chrome browser is related to data encryption errors. Exploiting this vulnerability can allow a malicious actor to bypass existing security restrictions through a specially created HTML page...

The vulnerability of Google Chrome’s web APIs, related to the use of memory after it is freed, allows attackers to circumvent existing security restrictions by using a specially created HTML page.

The vulnerability of Google Chrome’s web APIs is related to the use of memory after it is freed. Exploiting this vulnerability allows a malicious actor to bypass existing security restrictions by using a specially created HTML page...

Google Chrome Blink security bypass vulnerability (CNVD-2022-65573)

Google Chrome is a web browser from Google, Inc. A security bypass vulnerability exists in Google Chrome Blink, which can be exploited by attackers to bypass security restrictions...

Google Chrome Navigation security bypass vulnerability (CNVD-2022-65578)

Google Chrome is a web browser from Google, Inc. A security bypass vulnerability exists in Google Chrome Navigation, which can be exploited by attackers to bypass security restrictions...

The vulnerability of the Windows Console Driver component in Microsoft Windows operating systems allows attackers to circumvent security restrictions and gain increased privileges.

The vulnerability of the Windows Console Driver component in Microsoft Windows is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to bypass security restrictions and enhance their privileges...

The vulnerability of the PDFium PDF-content processor in Google Chrome and Microsoft Edge browsers arises from the use of memory after it is freed, allowing an attacker to circumvent existing security restrictions.

The vulnerability of the PDFium PDF-content processing component in Google Chrome and Microsoft Edge browsers is related to the use of memory after it is freed. Exploiting this vulnerability could allow a malicious actor to bypass existing security restrictions through a specially created HTML pa...

The vulnerability of Google Chrome’s WebAudio component allows a hacker to circumvent existing security restrictions by using a specially created HTML page.

The vulnerability of Google Chrome’s WebAudio component relates to reading beyond the buffer limit in memory. Exploiting this vulnerability could allow a malicious actor to circumvent existing security restrictions through a specially created HTML page...