Privilege escalation

Windows Hyper-V Elevation of Privilege Vulnerability...

CVE-2023-36406 Windows Hyper-V Information Disclosure Vulnerability

...

CVE-2023-36406 Windows Hyper-V Information Disclosure Vulnerability

...

CVE-2023-36406

CVE-2023-36406 is described in the NVD as a Windows Hyper-V Information Disclosure vulnerability with CVSS v3.1 base score 5.5 (Local, Low complexity, Privileges required: Low, User interaction: None; Confidentiality Impact: High). The connected documents note Microsoft security updates (KB503219...

CVE-2023-36408 Windows Hyper-V Elevation of Privilege Vulnerability

...

CVE-2023-36407 Windows Hyper-V Elevation of Privilege Vulnerability

...

CVE-2023-36408

Technical details for CVE-2023-36408 are not publicly available in the provided documents. No affected products, impact, or fixes are specified here; monitor official advisories and vendor updates for confirmation and remediation guidance.

CVE-2023-36408 Windows Hyper-V Elevation of Privilege Vulnerability

...

CVE-2023-36407

CVE-2023-36407 – Windows Hyper-V Elevation of Privilege : Exploitation details show an improper input validation in winhvr.sys (WinHvSetVpState) allowing a local attacker to copy user-controlled data into Non-paged Pool via memcpy, causing a BOF and a BSOD on Hyper-V Host. The PoC targets Windows...

CVE-2023-36427 Windows Hyper-V Elevation of Privilege Vulnerability

...

CVE-2023-36427

CVE-2023-36427 is a Windows Hyper-V elevation-of-privilege vulnerability. The connected documents confirm its existence as part of Microsoft Patch Tuesday coverage (e.g., Windows Hyper‑V entry listed among CVEs addressed by the November 2023 security updates). Public literature in the connected c...

Windows Hyper-V Elevation of Privilege Vulnerability

...

Windows Hyper-V Elevation of Privilege Vulnerability

...

Windows Hyper-V Elevation of Privilege Vulnerability

...

Windows Hyper-V Information Disclosure Vulnerability

...

PT-2023-20754 · Intel · Intel(R) Aptio* V Uefi Firmware Integrator Tools

Name of the Vulnerable Software and Affected Versions: IntelR Aptio V UEFI Firmware Integrator Tools affected versions not specified Description: The issue is related to a use after free condition that may allow an authenticated user to potentially enable denial of service via local access...

PT-2023-13482 · Intel · Intel(R) Aptio* V Uefi Firmware Integrator Tools

Name of the Vulnerable Software and Affected Versions: IntelR Aptio V UEFI Firmware Integrator Tools versions prior to iDmi Windows 5.27.03.0003 Description: The issue is related to improper access control in the IntelR Aptio V UEFI Firmware Integrator Tools, which may allow a privileged user to...

PT-2023-27007 · Ami · Ami Aptiov

Name of the Vulnerable Software and Affected Versions: AMI AptioV affected versions not specified Description: The issue is related to improper input validation in the BIOS of AMI AptioV, which can be exploited via the local network. A successful exploit may result in a loss of confidentiality,...

Microsoft Hyper-V Security Vulnerability

Microsoft Hyper-V is an application from Microsoft Corporation USA. A system hypervisor virtualization technology that enables desktop virtualization. A security vulnerability exists in Microsoft Hyper-V. An attacker exploiting the vulnerability can elevate privileges. The following products and...

PT-2023-18413 · Intel · Intel(R) Aptio* V Uefi Firmware Integrator Tools

Name of the Vulnerable Software and Affected Versions: IntelR Aptio V UEFI Firmware Integrator Tools affected versions not specified Description: The issue is related to an integer overflow that may allow an authenticated user to potentially enable denial of service via local access...