Privilege escalation

Windows Event Tracing Elevation of Privilege Vulnerability...

Privilege escalation

Windows Event Tracing Elevation of Privilege Vulnerability...

CVE-2021-38630 Windows Event Tracing Elevation of Privilege Vulnerability

...

CVE-2021-38630

Technical details (affected product, root cause, impact, or fix) are not provided in the connected documents for CVE-2021-38630. Monitor official advisories (NVD, MSRC) for updates.

CVE-2021-36964

Technical details for CVE-2021-36964 are not publicly provided in the supplied documents; monitor for updates.

CVE-2021-36964 Windows Event Tracing Elevation of Privilege Vulnerability

...

Microsoft Windows Multiple Vulnerabilities (KB5005633)

This host is missing a critical security update according to Microsoft KB5005633 SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Microsoft Windows Multiple Vulnerabilities (KB5005569)

This host is missing a critical security update according to Microsoft KB5005569 SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Windows Event Tracing Elevation of Privilege Vulnerability

...

Windows Event Tracing Elevation of Privilege Vulnerability

...

Microsoft Windows Event Tracing 权限许可和访问控制问题漏洞

Microsoft Windows Event Tracing is an application from Microsoft Corporation USA. It provides a mechanism for tracking and logging events raised by user-mode applications and kernel-mode drivers. Microsoft Windows Event Tracing is vulnerable to privilege permission and access control issues. The...

Microsoft Windows Event Tracing 权限许可和访问控制问题漏洞

Microsoft Windows Event Tracing is an application from Microsoft Corporation USA. It provides a mechanism for tracking and logging events raised by user-mode applications and kernel-mode drivers. Microsoft Windows Event Tracing is vulnerable to privilege permission and access control issues. The...

PT-2021-6970 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to insecure privilege management in the Windows Event Tracing service of the Windows operating system. It allows an attacker to elevate their privileges. Recommendation...

PT-2021-6976 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to insecure privilege management in the Windows Event Tracing service, which can be exploited to elevate privileges. This could allow an attacker to affect the system...

Designing Contact-Tracing Apps

Susan Landau wrote an essay on the privacy, efficacy, and equity of contract-tracing smartphone apps. Also see her excellent book on the topic...

Gokart - A Static Analysis Tool For Securing Go Code

GoKart is a static analysis tool for Go that finds vulnerabilities using the SSA single static assignment form of Go source code. It is capable of tracing the source of variables and function arguments to determine whether input sources are safe, which reduces the number of false positives compar...

Spoofing Bug Highlights Cybersecurity for Digital Vaccine Passports

Three weeks after an independent researcher found a critical bug in the Services Australia COVID-19 digital vaccine certificate that would allow an attacker to falsify someone’s vaccine status, it still hasn’t been fixed. Researcher Richard Nelson looked into the security behind a new digital...

CVE-2021-33831

api/account/register in the TH Wildau COVID-19 Contact Tracing application through 2021-09-01 has Incorrect Access Control. An attacker can interfere with tracing of infection chains by creating 500 random users within 2500 seconds...

CVE-2021-33831

api/account/register in the TH Wildau COVID-19 Contact Tracing application through 2021-09-01 has Incorrect Access Control. An attacker can interfere with tracing of infection chains by creating 500 random users within 2500 seconds...

CVE-2021-33831

The CVE-2021-33831 entry concerns the TH Wildau COVID-19 Contact Tracing web app. The issue is Incorrect Access Control in the registration API (registration endpoint) that allows automated, unprotected creation of many guest users (e.g., 500 users within 2500 seconds). An attacker can exploit th...