PT-2022-5500 · Microsoft · Windows Pptp +1

Name of the Vulnerable Software and Affected Versions: Windows Point-to-Point Tunneling Protocol PPTP affected versions not specified Description: The issue is related to errors in synchronization when using a shared resource in the implementation of the Point to Point Tunneling Protocol PPTP in...

Microsoft Windows 竞争条件问题漏洞

Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft Corporation USA. A competitive conditions issue vulnerability exists in Microsoft Windows Advanced Local Procedure Call. The following products and versions are affected:Windows 10 Version 1607 for...

Microsoft Windows Point-to-Point Tunneling Protocol 竞争条件问题漏洞

Microsoft Windows Point-to-Point Tunneling Protocol PPTP is a network protocol from Microsoft that enables the secure transmission of data from remote clients to private corporate servers by creating a virtual private network VPN over a TCP/IP-based data network. VPN. A competitive conditions iss...

PT-2022-5461 · Microsoft · Windows Point-To-Point Tunneling Protocol +1

Name of the Vulnerable Software and Affected Versions: Windows Point-to-Point Tunneling Protocol affected versions not specified Description: The issue is related to errors in synchronization when using a shared resource in the implementation of the Point-to-Point Tunneling Protocol in the Window...

The vulnerability of the System Control Interface and AsusSwitch drivers for Windows operating systems allows attackers to enhance their privileges.

The vulnerability of the System Control Interface and AsusSwitch drivers for Windows operating systems is related to incorrect default permissions. Exploiting this vulnerability can allow an attacker to increase their privileges within the system...

The vulnerability of the kernel-level driver nvlddmkm.sys from NVIDIA’s graphics processing units, including GeForce, Quadro, NVS, and Tesla, for Windows operating systems, allows attackers to cause system failures or gain unauthorized access to protected information.

The vulnerability of the kernel mode driver nvlddmkm.sys of NVIDIA’s graphics processing unit software products such as GeForce, Quadro, NVS, and Tesla for Windows operating systems is related to reading data beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to caus...

CVE-2022-37986

Windows Win32k Elevation of Privilege Vulnerability...

Microsoft Windows Group Policy Preference Client 安全漏洞

Microsoft Windows is a set of operating systems for personal devices used by the U.S. Microsoft Windows Group Policy Preference Client has an elevation of privilege vulnerability, for which no details are available...

Microsoft Windows Group Policy Preference Client 安全漏洞

Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft Corporation USA. A security vulnerability exists in the Microsoft Windows Group Policy Preference Client. The following products and editions are affected:Windows 10 Version 21H2 for 32-bit Systems,Window...

Microsoft Windows Active Directory Certificate Services 安全漏洞

Microsoft Windows Active Directory is a centralized directory management service from Microsoft Corporation USA that is responsible for architecting large network environments. Microsoft Windows Active Directory is vulnerable to a certificate service security feature bypass. No details of the...

Microsoft Windows ALPC 竞争条件问题漏洞

Microsoft Windows ALPC is a process-to-process communication tool for high-speed messaging from Microsoft, Inc. An elevation of privilege vulnerability exists in Microsoft Windows ALPC, which stems from improper privilege assignment in the application and can be exploited by an attacker to cause ...

Microsoft Windows Point-to-Point Tunneling Protocol 竞争条件问题漏洞

Microsoft Windows Point-to-Point Tunneling Protocol PPTP is a network protocol from Microsoft Corporation that allows secure transmission of data from a remote client to a private enterprise server by creating a virtual private network VPN over a TCP/IP-based data network. A remote code execution...

Microsoft Windows NTLM 安全漏洞

Microsoft Windows is a set of operating systems for personal devices from the U.S. Microsoft Windows NTLM has a spoofing vulnerability that could be exploited by an attacker to compromise the confidentiality of the system...

The vulnerability in the implementation of the Internet Key Exchange (IKE) protocol in the Microsoft Windows operating system allows a hacker to induce a service failure.

The vulnerability of the Internet Key Exchange IKE protocol implementation in Microsoft Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures by sending specially crafted IKEv1 packets...

The vulnerability of Microsoft Edge browser on Windows operating systems, related to synchronization errors when using a shared resource, allows attackers to perform spear-phishing attacks.

The vulnerability of Microsoft Edge browser on Windows operating systems is related to synchronization errors when using a shared resource. Exploiting this vulnerability allows a remote attacker to perform spear-phishing attacks...

The vulnerability of Mozilla Firefox and Mozilla Firefox ESR browsers for Windows, related to the lack of measures taken to clean data at the operating level, allows attackers to execute arbitrary commands.

The vulnerability of Mozilla Firefox and Mozilla Firefox ESR browsers for Windows is related to the lack of measures taken to clean data at the operating level. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands remotely...

CVE-2022-34718

Windows TCP/IP Remote Code Execution Vulnerability...

PT-2022-5733 · Microsoft · Directx Graphics Kernel +1

Name of the Vulnerable Software and Affected Versions: DirectX Graphics Kernel affected versions not specified Description: The issue is related to unsafe privilege management in the DirectX Graphics Kernel driver of Microsoft Windows operating systems. This can allow an attacker to execute...

PT-2022-5745 · Microsoft · Windows +1

Name of the Vulnerable Software and Affected Versions: Microsoft WDAC OLE DB provider for SQL Server affected versions not specified Description: The issue exists due to insufficient input validation in the OLE DB driver for SQL Server on the Windows operating system. This allows a remote attacke...

PT-2022-5739 · Microsoft · Odbc Driver +1

Name of the Vulnerable Software and Affected Versions: Microsoft ODBC Driver affected versions not specified Description: The issue exists due to insufficient input validation in the Microsoft ODBC driver for the Windows operating system. This allows a remote attacker to execute arbitrary code. T...