1706 matches found
KB5027222: Windows 10 version 1809 / Windows Server 2019 Security Update (June 2023)
The remote Windows host is missing security update 5027222. It is, therefore, affected by multiple vulnerabilities - Windows Pragmatic General Multicast PGM Remote Code Execution Vulnerability CVE-2023-29363, CVE-2023-32014, CVE-2023-32015 - Windows Collaborative Translation Framework Elevation o...
CVE-2022-35759
Windows Local Security Authority LSA Denial of Service Vulnerability...
CVE-2022-35751
Windows Hyper-V Elevation of Privilege Vulnerability...
Design/Logic Flaw
Windows Local Security Authority LSA Denial of Service Vulnerability...
Privilege escalation
Windows Kerberos Elevation of Privilege Vulnerability...
CVE-2022-35753 Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability
...
CVE-2023-2939
Insufficient data validation in Installer in Google Chrome on Windows prior to 114.0.5735.90 allowed a local attacker to perform privilege escalation via crafted symbolic link. Chromium security severity: Medium...
Vulnerabilities fixed in Dell EMC Powerpath
Dell has fixed vulnerabilities in Powerpath. A local malicious person could exploit the vulnerabilities to grant themselves elevated privileges and execute code with SYSTEM privileges, or to gain access to the license key and thereby perform unauthorized new installations. Dell has released updat...
CVE-2023-28346
An issue was discovered in Faronics Insight 10.0.19045 on Windows. It is possible for a remote attacker to communicate with the private API endpoints exposed at /login, /consoleSettings, /console, etc. despite Virtual Host Routing being used to block this access. Remote attackers can interact wit...
HTTP Fetch, Windows x64 Command Shell, Bind TCP Stager (RC4 Stage Encryption, Metasm)
Fetch and execute an x64 payload from an HTTP server. Spawn a piped command shell Windows x64 staged. Connect back to the attacker Module Options msf use payload/cmd/windows/http/x64/shell/bindtcprc4 msf payloadbindtcprc4 show actions ...actions... msf payloadbindtcprc4 set ACTION msf...
Information disclosure
Out-of-bounds read in software for the Intel QAT Driver for Windows before version 1.9.0-0008 may allow an authenticated user to potentially enable information disclosure via local access...
Improper access control
Improper access control in some IntelR QAT drivers for Windows before version 1.9.0 may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2022-41699
Incorrect permission assignment for critical resource in some IntelR QAT drivers for Windows before version 1.9.0 may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2023-29324
Windows MSHTML Platform Security Feature Bypass Vulnerability...
CVE-2023-29324 Windows MSHTML Platform Security Feature Bypass Vulnerability
...
Description of the security update for Office Online Server: May 9, 2023 (KB5002372)
None None...
Windows Bluetooth Driver Elevation of Privilege Vulnerability
...
May 9, 2023—KB5026368 (OS Build 22000.1936)
None None...