The vulnerability in the set of tools for developing Common Data Model (CDM) SDKs for the Windows operating system allows a attacker to perform a type of attack known as a “Denial-of-Service” (DoS) attack.

The vulnerability of the Common Data Model CDM SDK for application development on the Windows operating system is related to insufficient validation of input data. Exploiting this vulnerability could allow a remote attacker to execute a DoS Denial-of-Service attack...

The vulnerability of Windows operating systems’ message queues allows a perpetrator to execute arbitrary code.

The vulnerability of Windows operating systems’ message queues is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

The vulnerability in the implementation of the QUIC network protocol in Windows operating systems allows a attacker to cause a service failure.

The vulnerability of the QUIC network protocol implementation in Windows operating systems is related to insufficient input data validation. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

The vulnerability of the Setup Files Cleanup component of the Windows operating system allows a hacker to execute remote code.

The vulnerability of the Setup Files Cleanup component of the Windows operating system is related to insufficient validation of input data. Exploiting this vulnerability allows a remote attacker to execute malicious code...

The vulnerability of the Named Pipe File System component of the Windows operating system, which allows a hacker to exploit their privileges

The vulnerability of the Named Pipe File System component in the Windows operating system is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to enhance their privileges...

The vulnerability of the Win32k.sys component of the Windows operating system, which allows a hacker to increase their privileges

The vulnerability of the Win32k.sys component of the Windows operating system is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to enhance their privileges...

CVE-2023-38740

IBM Db2 for Linux, UNIX, and Windows includes Db2 Connect Server 11.5 is vulnerable to a denial of service with a specially crafted SQL statement. IBM X-Force ID: 262613...

The vulnerability of the module of the virtual trusted platform for Windows operating systems, which allows a perpetrator to trigger a service failure

The vulnerability of the virtual trusted platform module for Windows operating systems is related to improper resource cleaning. Exploiting this vulnerability can allow an attacker to cause service failures...

The vulnerability of the standard C++ library for Windows operating systems allows attackers to enhance their privileges.

The vulnerability of the standard C++ library for Windows operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability of the Windows Media component of the Windows operating system, allowing a hacker to execute arbitrary code

The vulnerability of the Windows Media component of the Windows operating system is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

The vulnerability of the TCP/IP protocol implementation in the Windows operating system allows a hacker to cause a service failure.

The vulnerability of the TCP/IP protocol implementation in the Windows operating system is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

The vulnerability of the Layer 2 Tunneling Protocol (L2TP) implementation in Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the Layer 2 Tunneling Protocol L2TP implementation in Windows operating systems is related to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the Layer 2 Tunneling Protocol (L2TP) implementation in Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the Layer 2 Tunneling Protocol L2TP implementation in Windows operating systems is related to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the MSHTML platform in Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the MSHTML platform in Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

The vulnerability in the implementation of the QUIC network protocol in Windows operating systems allows a attacker to cause a service failure.

The vulnerability of the QUIC network protocol implementation in Windows operating systems is related to insufficient input data validation. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

CVE-2023-36602

Windows TCP/IP Denial of Service Vulnerability...

Researchers Uncover Grayling APT's Ongoing Attack Campaign Across Industries

A previously undocumented threat actor of unknown provenance has been linked to a number of attacks targeting organizations in the manufacturing, IT, and biomedical sectors in Taiwan. The Symantec Threat Hunter Team, part of Broadcom, attributed the attacks to an advanced persistent threat APT it...

PT-2023-6131 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to insufficient access control in the Win32k component of the Windows operating system. This can allow an attacker to elevate their privileges. Recommendations: At the...

PT-2023-5928 · Microsoft · Message Queuing +1

Name of the Vulnerable Software and Affected Versions: Microsoft Message Queuing MSMQ affected versions not specified Description: The issue is related to errors in processing input data in the Message Queuing component of the Windows operating system. It allows remote attackers to execute...

PT-2023-6053 · Microsoft · Message Queuing +1

Name of the Vulnerable Software and Affected Versions: Microsoft Message Queuing MSMQ affected versions not specified Description: The issue is related to insufficient input validation in the Message Queuing component of the Windows operating system. This can allow an attacker to execute arbitrar...