79 matches found
CVE-2024-7262 Arbitrary Code Execution in WPS Office
Improper path validation in promecefpluginhost.exe in Kingsoft WPS Office version ranging from 12.2.0.13110 to 12.2.0.16412 exclusive on Windows allows an attacker to load an arbitrary Windows library. The vulnerability was found weaponized as a single-click exploit in the form of a deceptive...
CVE-2024-7262
Kingsoft WPS Office for Windows is affected by CVE-2024-7262 due to improper path validation in promecefpluginhost.exe. Versions 12.2.0.13110–12.2.0.16412 (exclusive) are exploitable via a weaponized, single-click embedded spreadsheet document that can load an arbitrary Windows library. Connected...
CVE-2024-7262
Improper path validation in promecefpluginhost.exe in Kingsoft WPS Office version ranging from 12.2.0.13110 to 12.2.0.16412 exclusive on Windows allows an attacker to load an arbitrary Windows library. The vulnerability was found weaponized as a single-click exploit in the form of a deceptive...
CVE-2024-30082
Win32k Elevation of Privilege Vulnerability...
CVE-2024-30030
Win32k Elevation of Privilege Vulnerability...
CVE-2024-30006
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability...
Fedora: Security Advisory (FEDORA-2024-c0b61ab46b)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
PT-2024-1100 · Microsoft +1 · Windows +1
Name of the Vulnerable Software and Affected Versions: Windows libarchive affected versions not specified Description: The vulnerability is related to insufficient input validation in the libarchive library of the Windows operating system. It allows remote attackers to execute arbitrary code and...
CVE-2023-35631
Win32k Elevation of Privilege Vulnerability...
CVE-2023-41772
Win32k Elevation of Privilege Vulnerability...
CVE-2023-36731
Win32k Elevation of Privilege Vulnerability...
CVE-2023-24902
Win32k Elevation of Privilege Vulnerability...
CVE-2023-27759
An issue found in Wondershare Technology Co, Ltd Edrawmind v.10.0.6 allows a remote attacker to executea arbitrary commands via the WindowsCodescs.dll file...
CVE-2023-23409
Client Server Run-Time Subsystem CSRSS Information Disclosure Vulnerability...
CVE-2022-21900
Windows Hyper-V Security Feature Bypass Vulnerability...
CVE-2020-23887
XnView MP v0.96.4 was discovered to contain a heap overflow which allows attackers to cause a denial of service DoS via a crafted ico file. Related to a Read Access Violation starting at USER32!SmartStretchDIBits+0x33...
CVE-2021-41371
Windows Remote Desktop Protocol RDP Information Disclosure Vulnerability...
CVE-2021-40449
Win32k Elevation of Privilege Vulnerability...