PT-2022-5872 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to insufficient access control in the Client Server Run-Time Subsystem CSRSS of Windows operating systems. It allows an attacker to elevate their privileges...

Microsoft Client Server Run-time Subsystem 安全漏洞

The Microsoft Client Server Run-time Subsystem is a client/server run-time subsystem from Microsoft Corporation in the United States that manifests itself as the csrss.exe process. It is a component of the Windows NT family of operating systems, appearing in Windows NT 3.1 and subsequent systems,...

The vulnerability of the Client Server Run-Time Subsystem (CSRSS) in the Windows operating system, which allows a hacker to increase their privileges within the system

The vulnerability of the Client Server Run-Time Subsystem CSRSS in the Windows operating system is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to increase their privileges within the system...

CVE-2022-37989

Windows Client Server Run-time Subsystem CSRSS Elevation of Privilege Vulnerability...

CVE-2022-37989

Windows Client Server Run-time Subsystem CSRSS Elevation of Privilege Vulnerability...

CVE-2022-37987

Windows Client Server Run-time Subsystem CSRSS Elevation of Privilege Vulnerability...

Microsoft Client Server Run-time Subsystem (CSRSS) 安全漏洞

Microsoft Client Server Run-time Subsystem is a client/server run-time subsystem from Microsoft Corporation of the United States, manifested as the csrss.exe process. It is a component of the Windows NT operating system family, appearing in Windows NT 3.1 and later systems, and provides the user...

PT-2022-5363 · Microsoft · Windows Client Server Run-Time Subsystem +1

Name of the Vulnerable Software and Affected Versions: Windows Client Server Run-time Subsystem CSRSS affected versions not specified Description: The issue is related to an elevation of privilege vulnerability in the Windows Client Server Run-time Subsystem CSRSS. It is associated with an...

org.keycloak:keycloak-saml-wildfly-subsystem (>=3.3.0.cr1, <=3.4.0.final), org.keycloak:keycloak-wildfly-server-subsystem (>=3.3.0.cr1, <=3.4.0.final) +51 more potentially affected by CVE-2021-3644 via org.wildfly.core:wildfly-server (3.0.1.final)

org.wildfly.core:wildfly-server MAVEN version 3.0.1.final is affected by a known vulnerability. The following packages have a transitive dependency on org.wildfly.core:wildfly-server and may be impacted: - org.keycloak:keycloak-saml-wildfly-subsystem =3.3.0.cr1, =3.3.0.cr1, =3.3.0.cr1, =3.4.0.fin...

CVE-2022-22049

Windows Client Server Run-time Subsystem CSRSS Elevation of Privilege Vulnerability...

CVE-2022-22047

Windows Client Server Run-time Subsystem CSRSS Elevation of Privilege Vulnerability...

CVE-2022-22026

Windows Client Server Run-time Subsystem CSRSS Elevation of Privilege Vulnerability...

io.github.johnjcool:keycloak-cas-services (>=4.1.0.final, <=4.3.1.final), org.keycloak:keycloak-dependencies-server-min (>=4.0.0.beta1, <=4.3.0.final) +3 more potentially affected by CVE-2018-10894 via org.keycloak:keycloak-services (>=4.0.0.beta1, <=4.3.0.final)

org.keycloak:keycloak-services MAVEN version =4.0.0.beta1, =4.1.0.final, =4.0.0.beta1, =4.0.0.beta1, =4.0.0.beta1, =4.0.0.beta1, =4.3.0.final Source cves: CVE-2018-10894 Source advisory: GHSA-XVV8-8WH9-9FH2...

io.github.johnjcool:keycloak-cas-services (>=4.2.0.final, <=4.2.1.final), org.keycloak:keycloak-dependencies-server-min (4.2.0.final) +3 more potentially affected by CVE-2021-4133 via org.keycloak:keycloak-services (4.2.0.final)

org.keycloak:keycloak-services MAVEN version 4.2.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - io.github.johnjcool:keycloak-cas-services =4.2.0.final, =4.2.1.final -...

io.github.johnjcool:keycloak-cas-services (>=4.3.0.final, <=4.3.1.final), org.keycloak:keycloak-dependencies-server-min (4.3.0.final) +3 more potentially affected by CVE-2021-4133 via org.keycloak:keycloak-services (4.3.0.final)

org.keycloak:keycloak-services MAVEN version 4.3.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - io.github.johnjcool:keycloak-cas-services =4.3.0.final, =4.3.1.final -...

org.keycloak:keycloak-dependencies-server-all (10.0.0), org.keycloak:keycloak-dependencies-server-min (10.0.0) +5 more potentially affected by CVE-2021-4133 via org.keycloak:keycloak-services (10.0.0)

org.keycloak:keycloak-services MAVEN version 10.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - org.keycloak:keycloak-dependencies-server-all 10.0.0 - org.keycloak:keycloak-dependencies-server-m...

CVE-2020-8720

Buffer overflow in a subsystem for some IntelR Server Boards, Server Systems and Compute Modules before version 1.59 may allow a privileged user to potentially enable denial of service via local access...

CVE-2020-8719

Buffer overflow in subsystem for some IntelR Server Boards, Server Systems and Compute Modules before version 1.59 may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2016-0151

The Client-Server Run-time Subsystem CSRSS in Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 mismanages process tokens, which allows local users to gain privileges via a crafted application, aka "Windows CSRSS Security Feature Bypass...

PT-2016-1687 · Microsoft · Windows Server 2012 +5

Name of the Vulnerable Software and Affected Versions: Microsoft Windows versions 8.1, 10 Gold, 10 1511, Server 2012 Gold, Server 2012 R2, and RT 8.1 Description: The issue is related to the mismanagement of process tokens by the Client-Server Run-time Subsystem CSRSS in Microsoft Windows, allowi...