Privilege escalation

Windows Telephony Server Elevation of Privilege Vulnerability...

CVE-2022-24550 Windows Telephony Server Elevation of Privilege Vulnerability

...

CVE-2022-24550

Technical details for CVE-2022-24550 are not publicly provided in the connected documents. Available sources confirm the vulnerability title but do not specify affected products/versions, root cause, impact, or remediation here. Monitor for updates.

Microsoft Windows Telephony Server Elevation of Privilege Vulnerability (CNVD-2022-29562)

Microsoft Windows is a windowed operating system developed by Microsoft Corporation. An elevation of privilege vulnerability exists in Microsoft Windows Telephony Server. An attacker could exploit this vulnerability to elevate privileges...

Microsoft Windows Telephony Serve Elevation of Privilege Vulnerability

Microsoft Windows is a set of operating systems for use on personal devices from the American company Microsoft. An elevation of privilege vulnerability exists in Microsoft Windows Telephony Server. The vulnerability stems from an incorrect programmatic call to an advanced local procedure. An...

Windows Telephony Server Elevation of Privilege Vulnerability

...

PT-2022-2662 · Microsoft · Windows Telephony Service +1

Name of the Vulnerable Software and Affected Versions: Windows Telephony Service affected versions not specified Description: The issue is related to insecure privilege management in the Windows Telephony Service of Windows operating systems. It allows an attacker to elevate their privileges. Thi...

Microsoft Windows Telephony Server 权限许可和访问控制问题漏洞

Microsoft Windows is a set of operating systems for use on personal devices from the American company Microsoft. An elevation of privilege vulnerability exists in Microsoft Windows Telephony Server. The vulnerability stems from an incorrect programmatic call to an advanced local procedure. An...

The vulnerability of the SSL socket layer of the Asterisk IP telephony management system, which implements the SIP protocol PJSIP, allows attackers to induce a service failure.

The vulnerability of the SSL socket layer of the Asterisk IP telephony management system, where the SIP protocol PJSIP is implemented, is related to the simultaneous execution using a shared resource with incorrect synchronization. Exploiting this vulnerability allows an attacker who operates...

Google Android Elevation of Privilege Vulnerability (CNVD-2022-28917)

Google Android is a Linux-based open source operating system from Google, Inc. An elevation of privilege vulnerability exists in Google Android, which stems from a lack of privilege checking in Telephony, which could lead to unauthorized modification of PLMN SIM files. An attacker could exploit...

Google Android Information Disclosure Vulnerability (CNVD-2022-28916)

Google Android is a Linux-based open source operating system from Google, Inc. Google Android is vulnerable to an information disclosure vulnerability that stems from a lack of permission checking in Telephony. An attacker could use this vulnerability to obtain sensitive information...

CVE-2021-39782

In Telephony, there is a possible unauthorized modification of the PLMN SIM file due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

CVE-2021-39782

In Telephony, there is a possible unauthorized modification of the PLMN SIM file due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

CVE-2021-39782

In Telephony, there is a possible unauthorized modification of the PLMN SIM file due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

CVE-2021-39777

In Telephony, there is a possible way to determine whether an app is installed, without query permissions, due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...

CVE-2021-39777

In Telephony, there is a possible way to determine whether an app is installed, without query permissions, due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...

CVE-2021-39777

In Telephony, there is a possible way to determine whether an app is installed, without query permissions, due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...

Information disclosure

In Telephony, there is a possible way to determine whether an app is installed, without query permissions, due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...

Design/Logic Flaw

In Telephony, there is a possible unauthorized modification of the PLMN SIM file due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

CVE-2021-39782

In Telephony, there is a possible unauthorized modification of the PLMN SIM file due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...