1706 matches found
CVE-2023-32043
Windows Remote Desktop Security Feature Bypass Vulnerability...
Privilege escalation
Windows Kernel Elevation of Privilege Vulnerability...
Privilege escalation
Windows MSHTML Platform Elevation of Privilege Vulnerability...
CVE-2023-36537
Improper privilege management in Zoom Rooms for Windows before version 5.14.5 may allow an authenticated user to enable an escalation of privilege via local access...
CVE-2023-35305 Windows Kernel Elevation of Privilege Vulnerability
...
CVE-2023-35352 Windows Remote Desktop Security Feature Bypass Vulnerability
...
CVE-2023-35332 Windows Remote Desktop Protocol Security Feature Bypass
...
Windows Remote Desktop Protocol Security Feature Bypass
...
Windows Local Security Authority (LSA) Denial of Service Vulnerability
...
Windows Kernel Elevation of Privilege Vulnerability
...
Microsoft Guidance for Addressing Security Feature Bypass in Trend Micro EFI Modules
Trend Micro has released CVE-2023-28005 to address a secure boot bypass. Subsequently Microsoft has released the July Windows security updates to block the vulnerable UEFI modules by using the DBX UEFI Secure Boot Forbidden Signature Database disallow list. To exploit this vulnerability, an...
CVE-2023-35931 Shescape potential environment variable exposure on Windows with CMD
Shescape is a simple shell escape library for JavaScript. An attacker may be able to get read-only access to environment variables. This bug has been patched in version 1.7.1...
CVE-2023-32351
A logic issue was addressed with improved checks. This issue is fixed in iTunes 12.12.9 for Windows. An app may be able to gain elevated privileges...
Design/Logic Flaw
A newline in a filename could have been used to bypass the file extension security mechanisms that replace malicious file extensions such as .lnk with .download. This could have led to accidental execution of malicious code. This bug only affects Firefox and Thunderbird on Windows. Other versions...
CVE-2023-29545
Similar to CVE-2023-28163, this time when choosing 'Save Link As', suggested filenames containing environment variable names would have resolved those in the context of the current user. This bug only affects Firefox and Thunderbird on Windows. Other versions of Firefox and Thunderbird are...
CVE-2023-32011
Windows iSCSI Discovery Service Denial of Service Vulnerability...
Privilege escalation
Windows Group Policy Elevation of Privilege Vulnerability...
Description of the security update for Office Online Server: June 13, 2023 (KB5002401)
None None...