3387 matches found
Microsoft Windows Connected User Experiences and Telemetry 竞争条件问题漏洞
An elevation of privilege vulnerability exists in Microsoft Windows Connected User Experiences and Telemetry, a set of operating systems for personal devices from Microsoft Corporation USA. An attacker could exploit the vulnerability to cause an elevation of privilege...
PT-2022-5449 · Microsoft · Windows
Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is caused by synchronization errors when using a shared resource in the Connected User Experiences and Telemetry component of the Windows operating system. This could allow an...
CVE-2022-38021 Connected User Experiences and Telemetry Elevation of Privilege Vulnerability
...
CVE-2022-38021
CVE-2022-38021 corresponds to a local privilege escalation vulnerability in Microsoft Windows Connected User Experiences and Telemetry. The connected documents identify the affected surface as the Windows component “Connected User Experiences and Telemetry” and classify the impact as obtaining in...
How to Deploy a SIEM That Actually Works
I deployed my SIEM in days, not months – here’s how you can too As an IT administrator at a highly digitized manufacturing company, I spent many sleepless nights with no visibility into the activity and security of our environment before deploying a security information and event management SIEM...
Malicious Package
Overview @cseousage/cseousagetelemetrymodel is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerabl...
How Malicious Actors Abuse Native Linux Tools in Attacks
Through our honeypots and telemetry, we were able to observe instances in which malicious actors abused native Linux tools to launch attacks on Linux environments. In this blog entry, we discuss how these utilities were used and provide recommendations on how to minimize their impact...
CVE-2022-26454
In teei, there is a possible memory corruption due to an integer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06664701; Issue ID: ALPS06664701...
CVE-2022-23235
Active IQ Unified Manager for VMware vSphere, Linux, and Microsoft Windows versions prior to 9.10P1 are susceptible to a vulnerability which could allow an attacker to discover cluster, node and Active IQ Unified Manager specific information via AutoSupport telemetry data that is sent even when...
CVE-2022-23235
Active IQ Unified Manager for VMware vSphere, Linux, and Microsoft Windows versions prior to 9.10P1 are susceptible to a vulnerability which could allow an attacker to discover cluster, node and Active IQ Unified Manager specific information via AutoSupport telemetry data that is sent even when...
CVE-2022-23235
Active IQ Unified Manager for VMware vSphere, Linux, and Microsoft Windows versions prior to 9.10P1 are susceptible to a vulnerability which could allow an attacker to discover cluster, node and Active IQ Unified Manager specific information via AutoSupport telemetry data that is sent even when...
Design/Logic Flaw
Active IQ Unified Manager for VMware vSphere, Linux, and Microsoft Windows versions prior to 9.10P1 are susceptible to a vulnerability which could allow an attacker to discover cluster, node and Active IQ Unified Manager specific information via AutoSupport telemetry data that is sent even when...
CVE-2022-23235
CVE-2022-23235 affects Active IQ Unified Manager on VMware vSphere, Linux, and Windows prior to version 9.10P1. The underlying issue is exposure of cluster, node, and Active IQ data via AutoSupport telemetry data that is sent even when AutoSupport is disabled, enabling information disclosure. Aff...
Netapp Active IQ Unified Manager 信息泄露漏洞
Netapp Active IQ Unified Manager is an ONTAP storage product monitoring and management solution from Network Appliance Netapp. The product supports features such as performance monitoring and secret key management. A security vulnerability exists in Netapp Active IQ Unified Manager versions prior...
CVE-2022-23235: Undefined Security Weakness
Active IQ Unified Manager for VMware vSphere, Linux, and Microsoft Windows versions prior to 9.10P1 are susceptible to a vulnerability which could allow an attacker to discover cluster, node and Active IQ Unified Manager specific information via AutoSupport telemetry data that is sent even when...
CVE-2021-45454
Ampere Altra before SRP 1.08b and Altra Max before SRP 2.05 allow information disclosure of power telemetry via HWmon...
CVE-2021-45454
Ampere Altra before SRP 1.08b and Altra Max before SRP 2.05 allow information disclosure of power telemetry via HWmon...
CVE-2021-45454
Ampere Altra before SRP 1.08b and Altra Max before SRP 2.05 allow information disclosure of power telemetry via HWmon...