2004 matches found
PT-2025-29485 · Мартин Прикрыл · Winscp
Уязвимость графического клиента протоколов SFTP и SCP WinSCP операционной системы Windows связана с неверным ограничением имени пути к каталогу с ограниченным доступом. Эксплуатация уязвимости может позволить нарушителю создать специальный файл и контролировать его путь на удаленном сервере...
The vulnerability of the Scripting Engine component in browsers Edge and Internet Explorer on Windows operating systems allows a perpetrator to execute arbitrary code.
The vulnerability of the Scripting Engine component in Edge and Internet Explorer browsers on Windows operating systems is related to data type mixing errors. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending a specially crafted link...
CVE-2025-32701
Use after free in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally...
Microsoft Win32k 安全漏洞
Microsoft Win32k is a system file for Windows multi-user management from Microsoft USA. A security vulnerability exists in Microsoft Win32k. An attacker exploiting this vulnerability could remotely execute code. The following products and versions are affected:Microsoft Office LTSC for Mac...
Improper access permission settings in multiple SEIKO EPSON printer drivers for Windows OS
Overview Multiple SEIKO EPSON printer drivers for Windows OS are configured with an improper access permission settings when installed or used in a language other than English. Incorrect default permissions CWE-276 - CVE-2025-42598 Private security researcher Erkan Ekici reported this vulnerabili...
CVE-2025-42598
Multiple SEIKO EPSON printer drivers for Windows OS are configured with an improper access permission settings when installed or used in a language other than English. If a user is directed to place a crafted DLL file in a location of an attacker's choosing, the attacker may execute arbitrary cod...
CVE-2025-42598
Multiple SEIKO EPSON printer drivers for Windows OS are configured with an improper access permission settings when installed or used in a language other than English. If a user is directed to place a crafted DLL file in a location of an attacker's choosing, the attacker may execute arbitrary cod...
CVE-2025-42598
CVE-2025-42598 affects multiple SEIKO EPSON printer drivers for Windows. The issue stems from improper access permission settings in non‑English environments, enabling a user‑driven attack to place a crafted DLL in an attacker‑controlled location and execute arbitrary code with SYSTEM privileges ...
Mozilla Thunderbird Security Update (mfsa_2025-26) - Windows
Mozilla Thunderbird is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:thunderbird";...
The vulnerability of the Windows RRAS operating system’s routing and remote access service allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the Windows RRAS operating system’s routing and remote access service is related to the execution of operations beyond the buffer in the data memory. Exploiting this vulnerability can allow a malicious actor to gain unauthorized access to protected information...
The vulnerability of the Microsoft DWM Core Library in the Windows operating system allows attackers to escalate their privileges.
The vulnerability of the Microsoft DWM Core Library in the Windows operating system is related to insufficient validation of input data. Exploiting this vulnerability can allow attackers to gain increased privileges...
The vulnerability of the Win32k.sys component in Windows operating systems, which allows a hacker to increase their privileges
The vulnerability of the Win32k.sys component of the Windows operating system is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...
The vulnerability of the Microsoft DWM Core Library in the Windows operating system allows attackers to escalate their privileges.
The vulnerability of the Microsoft DWM Core Library in the Windows operating system is related to insufficient validation of input data. Exploiting this vulnerability can allow attackers to gain increased privileges...
The vulnerability of Windows operating system-based Cryptographic Services allows attackers to disclose protected information.
The vulnerability of Windows operating system’s Cryptographic Services is related to the use of a cryptographic primitive with a risky implementation. Exploiting this vulnerability could allow an attacker to disclose the protected information...
The vulnerability of the NTFS file system in Windows operating systems allows attackers to increase their privileges.
The vulnerability of the NTFS file system in Windows operating systems is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to increase their privileges...
The vulnerability of the upnphost.dll library in the Windows operating system, which allows attackers to escalate their privileges
The vulnerability of the upnphost.dll library in the Windows operating system is related to the use of unsafe mechanisms for processing authentication data in the operating system’s memory. Exploiting this vulnerability can allow attackers to increase their privileges...
The vulnerability of the Kerberos authentication network protocol for Windows operating systems allows attackers to increase their privileges.
The vulnerability of the Kerberos authentication protocol for Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to enhance their privileges remotely...
The vulnerability of the HTTP.sys driver on Windows operating systems, which allows a hacker to trigger a service failure
The vulnerability of the HTTP.sys driver on Windows operating systems is related to an uncontrolled consumption of resources. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...
The vulnerability in the implementation of the LDAP service protocol for Windows operating systems allows a perpetrator to cause a service failure.
The vulnerability of the LDAP Lightweight Directory Access Protocol implementation in Windows operating systems is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service failures...
The vulnerability of the Win32k.sys component in Windows operating systems, which allows a hacker to increase their privileges
The vulnerability of the Win32k.sys component of the Windows operating system is related to the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to increase their privileges...