131 matches found
Security Updates for Sysinternals Sysmon (December 2022)
The Sysinternals Sysmon installation on the remote host is missing a security update. It is, therefore, affected by the following vulnerability: - An elevation of privilege vulnerability. An attacker can exploit this to gain elevated privileges. CVE-2022-44704 %NASLMINLEVEL 80900 C Tenable Networ...
PT-2022-6010 · Microsoft · Windows System Monitor
Name of the Vulnerable Software and Affected Versions: Microsoft Windows System Monitor Sysmon affected versions not specified Description: The issue is related to insufficient access control in the Microsoft Windows Sysmon system service, which can be exploited to elevate privileges...
CVE-2022-44704
CVE-2022-44704 is a Windows Sysmon (Sysinternals) vulnerability. The root cause is a bug in Sysmon’s ClipboardChange handling via RPC, enabling a user to escalate privileges on the local system. Multiple sources describe it as an elevation of privilege flaw in Sysmon, with PoCs and public advisor...
CVE-2022-44704 Microsoft Windows System Monitor (Sysmon) Elevation of Privilege Vulnerability
...
KLA20123 Multiple vulnerabilities in Microsoft Developer Tools
Multiple vulnerabilities were found in Microsoft Developer Tools. Malicious users can exploit these vulnerabilities to gain privileges, execute arbitrary code. Below is a complete list of vulnerabilities: 1. An elevation of privilege vulnerability in Microsoft Windows Sysmon can be exploited...
Sysmon Installed (Windows)
Binary data sysmonwininstalled.nbin...
PT-2025-53954
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak exists in the qcom add sysmon subdev function within the remoteproc sysmon component. The function fails to free allocated memory when of irq get byname or devm request...
The vulnerability of the Microsoft Windows Sysmon system service, related to access control deficiencies, allows attackers to escalate their privileges.
The vulnerability of the Microsoft Windows Sysmon system service is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to increase their privileges...
CVE-2022-41120
Microsoft Windows System Monitor Sysmon Elevation of Privilege Vulnerability...
CVE-2022-41120
Microsoft Windows System Monitor Sysmon Elevation of Privilege Vulnerability...
Privilege escalation
Microsoft Windows System Monitor Sysmon Elevation of Privilege Vulnerability...
CVE-2022-41120: Undefined Security Weakness
Microsoft Windows System Monitor Sysmon Elevation of Privilege Vulnerability...
CVE-2022-41120 Microsoft Windows System Monitor (Sysmon) Elevation of Privilege Vulnerability
...
CVE-2022-41120
Sysmon before 14.13 is affected by an Elevation of Privilege vulnerability (CVE-2022-41120) in the ClipboardChange/RPC path. A locally authenticated user can abuse Sysmon’s RPC/ClipboardChange handling to write/delete files in the C:\Sysmon directory (ArchiveDirectory) and escalate to SYSTEM by r...
Microsoft Windows System Monitor (Sysmon) Elevation of Privilege Vulnerability
...
PT-2022-5515 · Microsoft · Windows System Monitor
Name of the Vulnerable Software and Affected Versions: Microsoft Windows System Monitor Sysmon affected versions not specified Description: The issue is related to insufficient access control in the Microsoft Windows System Monitor Sysmon service, which can allow an attacker to elevate their...
Qualys Research Team: Threat Thursdays, October 2022
Welcome to the third edition of the Qualys Research Team’s “Threat Research Thursday”, where we collect and curate notable new tools, techniques, procedures, threat intelligence, cybersecurity news, malware attacks, and more. Feedback on our second edition, Qualys Threat Research Thursday, is mor...
Introducing Qualys Threat Research Thursdays
Welcome to the first edition of the Qualys Research Team’s “Threat Research Thursday” where we collect and curate notable new tools, techniques, procedures, threat intelligence, cybersecurity news, malware attacks, and more. We will endeavor to issue these update reports regularly, as often as...
