51 matches found
GHSA-RVFH-H6C7-FC3C Gradio allows credential leakage on Windows
Gradio before 4.20 allows credential leakage on Windows...
Code injection
Bitwarden Windows desktop application versions prior to v2023.4.0 store biometric keys in Windows Credential Manager, accessible to other local unprivileged processes...
Bitwarden: Biometric key is stored in Windows Credential Manager, accessible to other local unprivileged processes
A vulnerability in Bitwarden Desktop for Windows allowed a local attacker to access the biometric master key used for unlocking the vault through Windows Hello. The key was stored in plaintext in the Windows Credential Manager, accessible to any local unprivileged process. This allowed an attacke...
CVE-2023-21726
Windows Credential Manager User Interface Elevation of Privilege Vulnerability...
CVE-2023-21726
Windows Credential Manager User Interface Elevation of Privilege Vulnerability...
CVE-2023-21726 Windows Credential Manager User Interface Elevation of Privilege Vulnerability
...
CVE-2023-21726 Windows Credential Manager User Interface Elevation of Privilege Vulnerability
...
PT-2023-1141 · Microsoft · Windows Credential Manager +1
Name of the Vulnerable Software and Affected Versions: Windows Credential Manager versions affected versions not specified Description: An elevation-of-privilege vulnerability allows attackers to affect the system. The issue is related to the Windows Credential Manager user interface and is...
GHSA-VX2X-9CFF-FHJW DSInternals Credential Roaming Elevation of Privilege Vulnerability
Impact A vulnerability exists in the DSInternals.Common.Data.RoamedCredential.Save method, which incorrectly parses the msPKIAccountCredentials LDAP attribute values. As a consequence, a malicious actor would be able to modify the file system of the computer where an application using this functi...
VulnCheck KEV: CVE-2022-30170
Windows Credential Roaming Service Elevation of Privilege Vulnerability...
Windows Credential Roaming Service Elevation of Privilege Vulnerability
...
PT-2022-5620 · Microsoft · Windows Server +1
Name of the Vulnerable Software and Affected Versions: Windows Credential Roaming Service versions prior to 4.8 microsoft windows server 2008 r2, - microsoft windows server 2012 r2, - microsoft windows 10 1607, 1809, 21h1, -, 21h2, 20h2 microsoft windows 8.1 - microsoft windows server 2016 -...
KLA19245 Multiple vulnerabilities in Microsoft Windows
Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to execute arbitrary code, gain privileges, cause denial of service, obtain sensitive information, bypass security restrictions. Below is a complete list of vulnerabilities: 1. A remote cod...
KB5017328: Windows 11 Security Update (September 2022)
The remote Windows host is missing security update 5017328. It is, therefore, affected by multiple vulnerabilities - Certain Arm Cortex and Neoverse processors through 2022-03-08 do not properly restrict cache speculation, aka Spectre-BHB. An attacker can leverage the shared branch history in the...
CVE-2022-22031
Windows Credential Guard Domain-joined Public Key Elevation of Privilege Vulnerability...
PT-2022-3711 · Microsoft · Windows
Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to an elevation-of-privilege vulnerability in Windows Credential Guard, which is associated with insecure privilege management. This vulnerability can be exploited to...
wincred 操作系统命令注入漏洞
wincred is an open source node.js package. Used to use Python3 script to get credentials from the "Windows Credential Manager". A command execution vulnerability exists in wincred, which stems from the possibility of executing arbitrary commands if user input under the control of an attacker is...
Microsoft Windows Credential Enrollment Manager Service Elevation of Privilege Vulnerability
Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is an operating system for personal devices.Microsoft Windows Server is a server operating system. An elevation of privilege vulnerability exists in the Microsoft Windows Credential...
Microsoft Windows Credential Picker Elevation of Privilege Vulnerability
Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is an operating system for personal devices.Microsoft Windows Server is a server operating system. A security vulnerability exists in the way memory objects are handled in the Microsoft...