382 matches found
The vulnerability of the compatibility subsystem’s kernel allows for the execution of Linux applications. The Windows Subsystem for Linux (WSL2) and the Azure IoT Edge for Linux on Windows (EFLOW) environment enable attackers to enhance their privileges.
The vulnerability of the compatibility subsystem’s kernel for running Linux applications is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to gain increased privileges...
CVE-2022-38014
Windows Subsystem for Linux WSL2 Kernel Elevation of Privilege Vulnerability...
CVE-2022-38014
Windows Subsystem for Linux WSL2 Kernel Elevation of Privilege Vulnerability...
Privilege escalation
Windows Subsystem for Linux WSL2 Kernel Elevation of Privilege Vulnerability...
CVE-2022-38014 Windows Subsystem for Linux (WSL2) Kernel Elevation of Privilege Vulnerability
...
CVE-2022-38014: Concurrent Execution using Shared Resource with Improper Synchronization
Windows Subsystem for Linux WSL2 Kernel Elevation of Privilege Vulnerability...
KLA20043 PE vulnerability in Microsoft Open Source Software
Elevation of privilege vulnerability was found in Microsoft Open Source Software. Malicious users can exploit this vulnerability to gain privileges. Original advisories CVE-2022-38014 Exploitation Public exploits exist for this vulnerability. Related products Microsoft-Windows CVE list...
KLA20046 Multiple vulnerabilities in Microsoft Azure
Multiple vulnerabilities were found in Microsoft Azure. Malicious users can exploit these vulnerabilities to execute arbitrary code, gain privileges. Below is a complete list of vulnerabilities: 1. A remote code execution vulnerability in Azure RTOS GUIX Studio can be exploited remotely to execut...
PT-2022-5508 · Microsoft · Azure Iot Edge For Linux On Windows +1
Name of the Vulnerable Software and Affected Versions: Windows Subsystem for Linux WSL2 affected versions not specified Azure IoT Edge for Linux on Windows EFLOW affected versions not specified Description: The issue is related to synchronization errors when using a shared resource in the kernel...
CVE-2022-34699
Windows Win32k Elevation of Privilege Vulnerability...
Microsoft Windows 缓冲区错误漏洞
Microsoft Windows is a suite of operating systems used by Microsoft Corporation USA for personal devices. A buffer error vulnerability exists in the Microsoft Windows Client/Server Runtime Subsystem. The following products and editions are affected:Windows 10 Version 1809 for 32-bit Systems,Windo...
Implications of Windows Subsystem for Linux for Adversaries & Defenders (Part 2)
This post is the second of a multi-part blog series that explores and highlights the different risks that Windows Subsystem for Linux WSL poses to an enterprise IT environment. Here we examine different TTPs that abuse WSL and assess different methods to defend against such threats. ← Go to Part ...
Implications of Windows Subsystem for Linux for Adversaries & Defenders (Part 1)
This post is the first of a multi-part blog series that will explore and highlight the different risks that Windows Subsystem for Linux WSL poses to an enterprise IT environment. Here we examine a new Microsoft feature for GNU\Linux that increases the attack surface and introduces a lot more...
The compatibility subsystem for running Linux applications allows the Windows Subsystem for Linux (WSL), a operating system from Microsoft Windows, to be utilized by attackers to increase their privileges.
The vulnerability of the compatibility subsystem for running Linux applications, namely the Windows Subsystem for Linux WSL of the Microsoft operating system, is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...
Windows WSL via Registry Persistence
This module will install a payload in WSL and execute it at user logon or system startup via the registry value in "CurrentVersion\Run" or "RunOnce" depending on privilege and selected method. The payload will be installed completely in registry. Staged payloads, like fetch payloads in linux X64...
CVE-2021-43907
Visual Studio Code WSL Extension Remote Code Execution Vulnerability...
New Malware Targets Windows Subsystem for Linux to Evade Detection
A number of malicious samples have been created for the Windows Subsystem for Linux WSL with the goal of compromising Windows machines, highlighting a sneaky method that allows the operators to stay under the radar and thwart detection by popular anti-malware engines. The "distinct tradecraft"...
CVE-2021-36966
Windows Subsystem for Linux Elevation of Privilege Vulnerability...