VulnCheck KEV: CVE-2023-32046

Microsoft Windows MSHTML Platform contains an unspecified vulnerability that allows for privilege escalation...

PT-2023-3513 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to insufficient access control in the Win32k component of Windows operating systems, which can be exploited to elevate privileges. This allows an attacker to affect the...

PT-2023-3813 · Microsoft · Pcl6 Class Printer Driver +2

Name of the Vulnerable Software and Affected Versions: Microsoft PostScript Printer Driver and PCL6 Class Printer Driver affected versions not specified Description: The issue is related to information disclosure in the PostScript Printer Driver Pscript and PCL6 Class Printer Driver of Windows...

PT-2023-3506 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to insufficient input validation in the Remote Procedure Call RPC technology of Windows operating systems. This can be exploited by a remote attacker to cause a denial ...

Microsoft Windows PGM 安全漏洞

Microsoft Windows is a suite of operating systems for use on personal devices from the U.S.-based Microsoft Corporation Microsoft. A security vulnerability exists in Microsoft Windows PGM. An attacker could exploit this vulnerability to remotely execute code. The following products and versions a...

PT-2023-3501 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to a Remote Procedure Call RPC runtime information disclosure. It involves a buffer overflow in memory, which can be exploited by a remote attacker to gain unauthorized...

PT-2023-3684 · Microsoft · Message Queuing +1

Name of the Vulnerable Software and Affected Versions: Microsoft Message Queuing MSMQ affected versions not specified Description: The issue is related to insufficient input validation in Microsoft Message Queuing MSMQ for Microsoft Windows operating systems. This can be exploited by a remote...

Microsoft SPNEGO Extended Negotiation 安全漏洞

Microsoft SPNEGO Extended Negotiation is a SPNEGO extension from Microsoft Corporation USA. A security vulnerability exists in Microsoft SPNEGO Extended Negotiation. An attacker could exploit this vulnerability to cause a denial of service on the system. The following products and editions are...

PT-2023-3824 · Microsoft · Windows Postscript Printer Driver +2

Name of the Vulnerable Software and Affected Versions: Windows PostScript Printer Driver Pscript and PCL6 Class Printer affected versions not specified Description: The issue is related to insufficient input validation in the PostScript Printer Driver Pscript and PCL6 Class Printer of Windows...

The vulnerability affects the runtime of procedure calls in the Windows operating system, allowing an attacker to cause a service failure.

The vulnerability of remote procedure call runtime in the Windows operating system stems from insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to cause service failures remotely...

The vulnerability of the DHCP server service for Windows operating systems allows a perpetrator to disclose protected information.

The vulnerability of the DHCP server service for Windows operating systems is related to the disclosure of information. Exploiting this vulnerability can allow a remote attacker to disclose the protected information...

The vulnerability of the Pragmatic General Multicast protocol implementation in the Windows operating system allows a hacker to execute arbitrary code.

The vulnerability of the Pragmatic General Multicast protocol implementation in the Windows operating system is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially created file...

The vulnerability of the Windows Filtering Platform, a system for filtering data on Windows operating systems, allows attackers to increase their privileges.

The vulnerability of the Windows Filtering Platform in the operating system Windows is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to increase their privileges...

PT-2023-4512 · Node.Js +2 · Node.Js +2

Name of the Vulnerable Software and Affected Versions: Node.js versions affected versions not specified Description: A vulnerability has been identified in the Node.js installation process, specifically affecting Windows users who install Node.js using the .msi installer. This issue arises during...

The vulnerability of the Microsoft PostScript printer driver for Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the Microsoft PostScript printer driver for Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability allows an attacker to execute arbitrary code using specially created data...

CVE-2023-29371

Windows GDI Elevation of Privilege Vulnerability...

Microsoft Windows NTFS 安全漏洞

Microsoft Windows NTFS is a file system from Microsoft USA that serves computer files. The file system has error warning, disk self-repair, and logging capabilities. A security vulnerability exists in Microsoft Windows NTFS. An attacker could exploit the vulnerability to elevate privileges. The...

Microsoft .NET Core安全漏洞

Microsoft .NET Core is a cross-platform, high-performance, open-source framework for building modern, cloud-enabled, Internet-connected applications from Microsoft Corporation. A security vulnerability exists in Microsoft .NET Core. The following products and versions are affected: Microsoft Visu...

CVE-2023-25738

Members of the DEVMODEW struct set by the printer device driver weren't being validated and could have resulted in invalid values which in turn would cause the browser to attempt out of bounds access to related variables.This bug only affects Firefox on Windows. Other operating systems are...

CVE-2023-25734

After downloading a Windows .url shortcut from the local filesystem, an attacker could supply a remote path that would lead to unexpected network requests from the operating system. This also had the potential to leak NTLM credentials to the resource.This bug only affects Firefox on Windows. Othe...