PT-2022-1523 · Microsoft · Windows Event Tracing +1

Name of the Vulnerable Software and Affected Versions: Windows Event Tracing affected versions not specified Description: The issue is related to an uncontrolled resource consumption in the Windows Event Tracing service, which is associated with a discretionary access control list DACL in the...

Microsoft Windows Event Tracing 权限许可和访问控制问题漏洞

Microsoft Windows Event Tracing is an application from Microsoft Corporation USA. It provides a mechanism for tracking and logging events raised by user-mode applications and kernel-mode drivers. Microsoft Windows Event Tracing is vulnerable to privilege permission and access control issues. The...

Microsoft Windows Event Tracing 资源管理错误漏洞

Microsoft Windows Event Tracing is an application from Microsoft Corporation USA. It provides a mechanism to track and log events raised by user-mode applications and kernel-mode drivers. Microsoft Windows Event Tracing is vulnerable to a resource management error. The following products and...

PT-2022-1511 · Microsoft · Windows Event Tracing +1

Name of the Vulnerable Software and Affected Versions: Windows Event Tracing affected versions not specified Description: The issue is related to insecure privilege management in the Windows Event Tracing service, allowing an attacker to elevate their privileges in the system. This can affect the...

PT-2025-37509

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The Linux kernel contains a flaw in the tracing subsystem related to handling synthetic events. Specifically, the synthetic event field "char file" can read a string value without...

Microsoft Windows Event Tracing Remote Code Execution Vulnerability

Windows Event Tracing ETW is an efficient kernel-level tracing tool that allows you to log kernel- or application-defined events to a log file.Microsoft Windows Event Tracing is vulnerable to remote code execution. An attacker could exploit this vulnerability to execute code on the target host...

CVE-2021-43232

Windows Event Tracing Remote Code Execution Vulnerability...

CVE-2021-43232

Windows Event Tracing Remote Code Execution Vulnerability...

CVE-2021-43232

Windows Event Tracing Remote Code Execution Vulnerability...

Remote code execution

Windows Event Tracing Remote Code Execution Vulnerability...

CVE-2021-43232

CVE-2021-43232 corresponds to a Windows Event Tracing (ETW) remote code execution vulnerability. The CNVD entry explicitly identifies ETW as the affected component and states the vulnerability enables remote code execution on Windows. The CVE record itself notes Windows Event Tracing RCE with a m...

CVE-2021-43232 Windows Event Tracing Remote Code Execution Vulnerability

...

CVE-2021-43232 Windows Event Tracing Remote Code Execution Vulnerability

...

Security Bulletin: Information Disclosure in IBM Spectrum Protect Operations Center (CVE-2021-38901)

Summary If tracing is enabled in Operations Center, user credentials may be displayed in the trace file in plain text. Vulnerability Details CVEID: CVE-2021-38901 DESCRIPTION: IBM Spectrum Protect Operations Center, under special configurations, could allow a local user to obtain highly sensitive...

Windows Event Tracing Remote Code Execution Vulnerability

...

Samsung RRC MeasurementReport Exception Condition Handling Vulnerability

Samsung RRC MeasurementReport is a wireless resource control protocol measurement report for Samsung Samsung mobile devices. The Samsung RRC MeasurementReport suffers from an anomalous condition handling vulnerability that stems from the lack of proper RRC security variable checking in the Exynos...

KLA12387 Multiple vulnerabilities in Microsoft Windows

Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service, gain privileges, obtain sensitive information. Below is a complete list of vulnerabilities: 1. A remote code execution vulnerability in...

Microsoft Windows Event Tracing 代码注入漏洞

Windows Event Tracing ETW is an efficient kernel-level tracing tool that allows you to log kernel- or application-defined events to a log file.Microsoft Windows Event Tracing is vulnerable to remote code execution. An attacker could exploit this vulnerability to execute code on the target host...

Mozilla: GC rooting failure when calling wasm instance methods

The Mozilla Foundation Security Advisory describes this flaw as: Failure to correctly record the location of live pointers across wasm instance calls resulted in a GC occurring within the call not tracing those live pointers. This could have led to a use-after-free causing a potentially exploitab...

Instance config inline secret exposure in Grafana

Impact Some inline secrets are exposed in plaintext over the Grafana Agent HTTP server: Inline secrets for metrics instance configs in the base YAML file are exposed at /-/config Inline secrets for integrations are exposed at /-/config Inline secrets for Consul ACL tokens and ETCD basic auth when...