2 matches found
CVE-2023-3513 RazerCentralService Unsafe Deserialization Escalation of Privilege
Improper Privilege Control in RazerCentralSerivce Named Pipe in Razer RazerCentral =7.11.0.558 on Windows allows a malicious actor with local access to gain SYSTEM privilege via communicating with the named pipe as a low-privilege user and triggering an insecure .NET deserialization...
GitHub Security Lab: [Java]: CWE-502 Add UnsafeDeserialization sinks
This bug was reported directly to GitHub Security Lab...