4938 matches found
The vulnerability of the Windows Local Session Manager component of the Windows operating system allows a hacker to trigger a service failure.
The vulnerability of the Windows Local Session Manager component of the Windows operating system is related to an uncontrolled consumption of resources. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...
The vulnerability of the Windows GDI component in Windows operating systems allows a hacker to execute arbitrary code.
The vulnerability of the Windows GDI component in Windows operating systems is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the Windows Operating System’s Credential Roaming Service allows a hacker to escalate their privileges.
The vulnerability of the Windows Credential Roaming Service is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to increase their privileges...
The vulnerability in the implementation of the Point to Point Tunneling Protocol (PPPT) for Windows operating systems allows a perpetrator to cause a service failure.
The vulnerability of the Point to Point Tunneling Protocol PPTP implementation in Windows operating systems is related to improper cleaning or release of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...
The vulnerability of the Windows Print Spooler daemon in the Windows operating system allows a hacker to escalate their privileges.
The vulnerability of the Windows Print Spooler service in the Windows operating system is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...
The vulnerability of the Windows DPAPI component of the Windows operating system allows attackers to disclose protected information.
The vulnerability of the Windows DPAPI component in the Windows operating system is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker to disclose protected information...
PT-2022-26154 · Tailscale · Tailscale
Name of the Vulnerable Software and Affected Versions: Tailscale Windows client versions prior to v1.32.3 Description: A vulnerability in the Tailscale Windows client allows a malicious website to reconfigure the Tailscale daemon tailscaled, enabling remote code execution. The local API was bound...
CVE-2022-36924 Local Privilege Escalation in Zoom Rooms Installer for Windows
The Zoom Rooms Installer for Windows prior to 5.12.6 contains a local privilege escalation vulnerability. A local low-privileged user could exploit this vulnerability during the install process to escalate their privileges to the SYSTEM user...
The vulnerability in the implementation of the Point to Point Tunneling Protocol (PPPT) for Windows operating systems allows a perpetrator to cause a service failure.
The vulnerability of the Point to Point Tunneling Protocol PPTP implementation in Windows operating systems is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...
The vulnerability of the Network Policy Server (NPS) server on Microsoft Windows operating systems allows a perpetrator to trigger a service failure.
The vulnerability of the Network Policy Server NPS on Microsoft Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...
The vulnerability of the Microsoft ODBC driver for Microsoft Windows operating systems allows a hacker to execute arbitrary code.
The vulnerability of the Microsoft ODBC driver for Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the Local Security Authority Subsystem Service in the Windows operating system allows a perpetrator to trigger a service failure.
The vulnerability of the Local Security Authority Subsystem Service in Windows operating systems is related to improper cleaning or release of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures...
The vulnerability in the functionality of Windows for connected users and telemetry allows a perpetrator to enhance their privileges.
The vulnerability of the functional capabilities for connected users and telemetry in the Windows operating system arises due to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to increase their privileges...
The vulnerability of the Advanced Local Procedure Call (ALPC) handler in the Windows operating system allows attackers to escalate their privileges.
The vulnerability of the Advanced Local Procedure Call ALPC in the Windows operating system arises due to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to increase their privileges...
The vulnerability of the Windows Local Security Authority (LSA) component of the Windows operating system, which allows a perpetrator to elevate their privileges
The vulnerability of the Windows Local Security Authority LSA component of the Windows operating system is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to enhance their privileges...
CVE-2022-36377
Insecure inherited permissions in some IntelR Wireless Adapter Driver installation software for IntelR NUC Kits & Mini PCs before version 22.190.0.3 for Windows may allow an authenticated user to potentially enable escalation of privilege via local access...
OESA-2022-2092 hadoop security update
Apache Hadoop is a framework that allows for the distributed processing of large data sets across clusters of computers using simple programming models. It is designed to scale up from single servers to thousands of machines, each offering local computation and storage. Security Fixes: In Apache...
The vulnerability of the dynamically linked library of the script handler (jscript9.dll) in the Windows operating system allows a hacker to execute arbitrary code.
The vulnerability of the dynamically linked script engine library jscript9.dll in Windows operating systems is related to the possibility of code injection. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...