PT-2024-6305 · Microsoft · Sql Server

Name of the Vulnerable Software and Affected Versions: Microsoft SQL Server affected versions not specified Description: The issue is related to insufficient input validation in the OLE DB driver for SQL Server on Windows operating systems. This can be exploited by a remote attacker to disclose...

The vulnerability of the `std::process::Command` function in the `File Extension` component of the Rust programming language operating system for Windows, allowing a malicious actor to execute arbitrary code.

The vulnerability of the std::process::Command function in the File Extension component of the Rust programming language operating system for Windows is related to the implementation or modification of arguments. Exploiting this vulnerability could allow an attacker to execute arbitrary code by...

Windows 11 VDA seamless app launches with fullscreen black border behind logon window

The customer uses windows 11 VDAs to provide access to a published application which has desktop operating system requirement. The initial launch of the published application showed the seamless application launch with a full screen black border behind the logon window. This is disruptive to user...

The vulnerability of the NTFS file system in Windows operating systems allows attackers to increase their privileges.

The vulnerability of the NTFS file system in Windows operating systems is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to increase their privileges...

Vulnerability of the Layer-2 Bridge Network Driver for Windows operating systems, allowing a hacker to cause service failure.

The vulnerability of the Layer-2 Bridge Network Driver for Windows operating systems is related to pointer dereferencing errors. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

The vulnerability of the Windows operating system’s Network Address Translation (NAT) technology allows a hacker to induce a service failure.

The vulnerability of the Windows operating system’s Network Address Translation NAT technology is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

The vulnerability of the Bluetooth driver for Windows operating systems, which allows a hacker to disclose protected information

The vulnerability of Bluetooth driver for Windows operating systems is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to disclose sensitive information that is protected by security measures...

The vulnerability of the Local Security Authority (LSA) service, which is responsible for verifying identities and managing user policies in Windows operating systems, allows attackers to disclose sensitive information that should be protected.

The vulnerability of the Local Security Authority LSA service, which is responsible for verifying identities and managing user policies on Microsoft Windows operating systems, is related to the use of an uninitialized resource. Exploiting this vulnerability could allow an attacker to disclose...

The vulnerability in the built-in Microsoft Edge browser of Microsoft Windows operating systems allows a perpetrator to execute arbitrary code.

The vulnerability of the built-in Microsoft Edge browser on Microsoft Windows operating systems is related to data type mixing errors. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely, provided that the user accesses a specially crafted URL...

CVE-2024-38132

Windows Network Address Translation NAT Denial of Service Vulnerability...

PT-2024-5648 · Microsoft · Windows Dwm Core Library +1

Name of the Vulnerable Software and Affected Versions: Windows DWM Core Library affected versions not specified Description: The issue is related to the use of memory after it has been freed, which can be exploited to elevate privileges. This can allow an attacker to affect the system...

Microsoft Windows 代码问题漏洞

Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft Corporation USA. A code issue vulnerability exists in Microsoft Windows. An attacker could use this vulnerability to cause a denial of service. The following products and versions are affected:Windows 10...

Microsoft Windows Cloud Files Mini Filter Driver 输入验证错误漏洞

Microsoft Windows Cloud Files Mini Filter Driver is a cloud file filter driver from Microsoft Corporation USA. An input validation error vulnerability exists in Microsoft Windows Cloud Files Mini Filter Driver. An attacker could exploit the vulnerability to elevate privileges. The following...

Microsoft Windows 安全漏洞

Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft USA. A security vulnerability exists in Microsoft Windows. An attacker could exploit this vulnerability to remotely execute code. The following products and versions are affected: Windows 11 Version 24H2...

PT-2024-5639 · Microsoft · Windows Dns +1

Name of the Vulnerable Software and Affected Versions: Windows DNS affected versions not specified Description: The issue is related to insufficient authentication of data in the Windows DNS service, allowing a remote attacker to conduct spoofing attacks. This can affect the system, posing a...

Microsoft Windows 输入验证错误漏洞

Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft Corporation USA. An input validation error vulnerability exists in Microsoft Windows. An attacker could exploit this vulnerability to gain elevated privileges. The following products and editions are...

The vulnerability of the PowerShell command line interface on Windows operating systems, which allows attackers to exploit their privileges

The vulnerability of the PowerShell command line interface on Windows operating systems is related to insufficient validation of entered data. Exploiting this vulnerability can allow an attacker to gain increased privileges...

UBUNTU-CVE-2024-7553

Incorrect validation of files loaded from a local untrusted directory may allow local privilege escalation if the underlying operating systems is Windows. This may result in the application executing arbitrary behaviour determined by the contents of untrusted files. This issue affects MongoDB...

VulnCheck KEV: CVE-2008-3648

nslookup.exe in Microsoft Windows XP SP2 allows user-assisted remote attackers to execute arbitrary code, as demonstrated by an attempted DNS zone transfer, and as exploited in the wild in August 2008...

PT-2024-6296 · Mongodb +1 · Mongodb C Driver +4

Name of the Vulnerable Software and Affected Versions: MongoDB Server versions prior to 5.0.27 MongoDB Server versions prior to 6.0.16 MongoDB Server versions prior to 7.0.12 MongoDB Server versions prior to 7.3.3 MongoDB C Driver versions prior to 1.26.2 MongoDB PHP Driver versions prior to 1.18...