6035 matches found
Desktop Window Manager Elevation of Privilege Vulnerability
Out-of-bounds read in Windows DWM allows an authorized attacker to elevate privileges locally...
Windows DWM Core Library Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows DWM Core Library allows an authorized attacker to elevate privileges locally...
PT-2025-42133
Name of the Vulnerable Software and Affected Versions Windows versions affected versions not specified Description A heap-based buffer overflow exists in the Windows DWM Core Library. This issue allows a locally authorized attacker to elevate privileges. Recommendations At the moment, there is no...
Microsoft DWM Core Library 安全漏洞
Microsoft DWM Core Library is a core library for Microsoft windows from Microsoft Corporation USA. A security vulnerability exists in Microsoft DWM Core Library, which can be exploited by an attacker to gain elevated privileges...
PT-2025-42031
Name of the Vulnerable Software and Affected Versions Windows versions affected versions not specified Description An out-of-bounds read issue exists in the Desktop Window Manager DWM of Windows operating systems. Exploitation of this issue can allow an attacker to elevate privileges locally. The...
PT-2025-42059
Name of the Vulnerable Software and Affected Versions Windows versions affected versions not specified Description A heap-based buffer overflow exists in Windows Desktop Window Manager DWM. A local attacker can exploit this to gain elevated privileges. Recommendations At the moment, there is no...
Microsoft Desktop Windows Manager 安全漏洞
Microsoft Desktop Windows Manager is a desktop window manager from Microsoft Corporation USA. A security vulnerability exists in Microsoft Desktop Windows Manager that originates from an attacker's ability to elevate privileges by exploiting the vulnerability...
Microsoft DWM Core Library 安全漏洞
Microsoft DWM Core Library is a core library for Microsoft windows from Microsoft Corporation USA. A security vulnerability exists in Microsoft DWM Core Library, which can be exploited by an attacker to gain elevated privileges...
Cross-site Scripting (XSS)
Overview qwc2-lts is a QGIS Web Client Affected versions of this package are vulnerable to Cross-site Scripting XSS via multiple components, including ServiceInfoWindow, SearchBox, LayerInfoWindow, and others. An attacker can execute arbitrary JavaScript code in the context of the user's browser ...
CVE-2025-21046
Improper access control in WindowManager in Samsung DeX prior to SMR Oct-2025 Release 1 allows physical attackers to temporarily access to recent app list...
CVE-2025-21046
Improper access control in WindowManager in Samsung DeX prior to SMR Oct-2025 Release 1 allows physical attackers to temporarily access to recent app list...
CVE-2025-21046
Improper access control in WindowManager in Samsung DeX prior to SMR Oct-2025 Release 1 allows physical attackers to temporarily access to recent app list...
EUVD-2025-33685
Improper access control in WindowManager in Samsung DeX prior to SMR Oct-2025 Release 1 allows physical attackers to temporarily access to recent app list...
PT-2025-41507
Name of the Vulnerable Software and Affected Versions Samsung DeX versions prior to SMR Oct-2025 Release 1 Description An improper access control issue exists in the WindowManager component of Samsung DeX. This allows a physically present attacker to temporarily access a list of recently used...
Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS : Vim vulnerabilities (USN-7815-1)
The remote Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-7815-1 advisory. It was discovered that Vim incorrectly handled certain internal calls when scrolling a window. An attacker could possibly use this issue t...
SAMSUNG Mobile devices 安全漏洞
SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc., from the South Korean company Samsung SAMSUNG. A security vulnerability exists in SAMSUNG Mobile devices SMR Oct-2025 Release 1 prior to Release 1, which stems from improper WindowManager access...
USN-7815-1: Vim vulnerabilities
It was discovered that Vim incorrectly handled certain internal calls when scrolling a window. An attacker could possibly use this issue to cause a denial of service...
USN-7815-1 vim vulnerabilities
It was discovered that Vim incorrectly handled certain internal calls when scrolling a window. An attacker could possibly use this issue to cause a denial of service...