1683 matches found
CVE-2023-36537
Improper privilege management in Zoom Rooms for Windows before version 5.14.5 may allow an authenticated user to enable an escalation of privilege via local access...
CVE-2023-35305 Windows Kernel Elevation of Privilege Vulnerability
...
CVE-2023-35352 Windows Remote Desktop Security Feature Bypass Vulnerability
...
CVE-2023-35332 Windows Remote Desktop Protocol Security Feature Bypass
...
Windows Local Security Authority (LSA) Denial of Service Vulnerability
...
Microsoft Guidance for Addressing Security Feature Bypass in Trend Micro EFI Modules
Trend Micro has released CVE-2023-28005 to address a secure boot bypass. Subsequently Microsoft has released the July Windows security updates to block the vulnerable UEFI modules by using the DBX UEFI Secure Boot Forbidden Signature Database disallow list. To exploit this vulnerability, an...
Windows Remote Desktop Protocol Security Feature Bypass
...
Windows Kernel Elevation of Privilege Vulnerability
...
CVE-2023-35931 Shescape potential environment variable exposure on Windows with CMD
Shescape is a simple shell escape library for JavaScript. An attacker may be able to get read-only access to environment variables. This bug has been patched in version 1.7.1...
CVE-2023-32351
A logic issue was addressed with improved checks. This issue is fixed in iTunes 12.12.9 for Windows. An app may be able to gain elevated privileges...
Design/Logic Flaw
A newline in a filename could have been used to bypass the file extension security mechanisms that replace malicious file extensions such as .lnk with .download. This could have led to accidental execution of malicious code. This bug only affects Firefox and Thunderbird on Windows. Other versions...
CVE-2023-29545
Similar to CVE-2023-28163, this time when choosing 'Save Link As', suggested filenames containing environment variable names would have resolved those in the context of the current user. This bug only affects Firefox and Thunderbird on Windows. Other versions of Firefox and Thunderbird are...
CVE-2023-32011
Windows iSCSI Discovery Service Denial of Service Vulnerability...
Privilege escalation
Windows Group Policy Elevation of Privilege Vulnerability...
Description of the security update for the information disclosure vulnerability in Microsoft Visual Studio 2015 Update 3: June 13, 2023 (KB5026455)
None None...
June 13, 2023—KB5027230 (OS Build 10240.19983) - EXPIRED
None None...
Description of the security update for Office Online Server: June 13, 2023 (KB5002401)
None None...
KB5027222: Windows 10 version 1809 / Windows Server 2019 Security Update (June 2023)
The remote Windows host is missing security update 5027222. It is, therefore, affected by multiple vulnerabilities - Windows Pragmatic General Multicast PGM Remote Code Execution Vulnerability CVE-2023-29363, CVE-2023-32014, CVE-2023-32015 - Windows Collaborative Translation Framework Elevation o...