4938 matches found
Microsoft Client Server Run-time Subsystem (CSRSS) 安全漏洞
Microsoft Client Server Run-time Subsystem is a client/server run-time subsystem from Microsoft Corporation of the United States, manifested as the csrss.exe process. It is a component of the Windows NT operating system family, appearing in Windows NT 3.1 and later systems, providing the user mod...
PT-2022-5643 · Microsoft · Windows
Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to a spoofing vulnerability in the NTLM protocol of the Windows operating system, allowing attackers to bypass authentication through spoofing. This can enable a remote...
VulnCheck KEV: CVE-2022-41033
Microsoft Windows COM+ Event System Service contains an unspecified vulnerability that allows for privilege escalation...
PT-2022-5295 · Microsoft · Windows Active Directory Domain Services +1
Name of the Vulnerable Software and Affected Versions: Windows Active Directory Domain Services affected versions not specified Description: The issue is related to insufficient access restrictions in the Active Directory Domain Services of the Windows operating system. It allows a remote attacke...
Microsoft Windows Security Support Provider Interface 安全漏洞
Microsoft Windows is an operating system for personal devices from Microsoft Corporation USA. An attacker could exploit the vulnerability to gain access to sensitive information...
PT-2022-5368 · Microsoft · Windows
Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to errors in synchronization when using a shared resource in the implementation of the Point-to-Point Tunneling Protocol PPTP in Microsoft Windows. This can allow a...
PT-2022-5374 · Microsoft · Windows
Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to the implementation of the Microsoft Security Support Provider Interface SSPI in the Windows operating system, which is associated with access control weaknesses...
PT-2022-5634 · Microsoft · Windows
Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to a buffer overflow in the Windows GDI component, allowing remote attackers to execute arbitrary code. This can affect the system, potentially leading to unauthorized...
PT-2022-5467 · Microsoft · Windows
Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is caused by synchronization errors when using a shared resource in the Advanced Local Procedure Call ALPC handler of the Windows operating system. This can allow an attacker to...
PT-2022-5496 · Microsoft · Windows
Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to the Local Security Authority Subsystem Service LSASS and involves incorrect cleanup or release of resources. This can be exploited by a remote attacker to cause a...
The vulnerability in the implementation of the Lightweight Directory Access Protocol (LDAP) on the Microsoft Windows operating system allows a perpetrator to execute arbitrary code.
The vulnerability of the LDAP protocol implementation on Microsoft Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to execute arbitrary code by opening a specially created file...
PT-2022-5791 · Realvnc +1 · Realvnc Viewer +2
Name of the Vulnerable Software and Affected Versions: RealVNC VNC Server versions prior to 6.11.0 RealVNC VNC Viewer versions prior to 6.22.826 on Windows Description: The issue is related to insecure privilege management in RealVNC, allowing an attacker to escalate their privileges by exploitin...
UI Desktop 安全漏洞
UI Desktop is a desktop management software for the UI community. A local elevation of privilege vulnerability exists in UI Desktop for Windows prior to version 0.55.3.17, which stems from improper privilege management in the application, and can be exploited by an attacker to locally access a...
Crestron AirMedia 安全漏洞
Crestron AirMedia is Crestron's unlimited sharing platform for laptops, PCs, smartphones or tablets. A security vulnerability exists in Crestron AirMedia for Windows prior to version 5.5.1.84, which stems from insecure inherited privileges, and can be exploited by an attacker to initiate a system...
The vulnerability in the Maintenance Service of Mozilla Firefox and Mozilla Firefox ESR browsers for Windows allows a malicious actor to escalate their privileges.
The vulnerability of the Maintenance Service for Mozilla Firefox and Mozilla Firefox ESR browsers for Windows is related to the lack of integrity checks. Exploiting this vulnerability can allow attackers to increase their privileges...
The vulnerability in the implementation of the Internet Key Exchange (IKE) protocol in Windows operating systems allows a hacker to execute arbitrary code.
The vulnerability of the Internet Key Exchange IKE protocol implementation in Windows operating systems is related to errors in processing input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending specially crafted IKEv1 packets...
The vulnerability of the file system driver of Windows operating systems allows a hacker to execute arbitrary code with system privileges.
The vulnerability of the file system driver of Windows operating systems is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code with system privileges...
The vulnerability of the TCP/IP protocol implementation in Windows operating systems allows a hacker to execute arbitrary code.
The vulnerability of the TCP/IP protocol implementation in Windows operating systems is related to errors in processing input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability in the implementation of the Internet Key Exchange (IKE) protocol in Windows operating systems allows a hacker to execute arbitrary code.
The vulnerability of the Internet Key Exchange IKE protocol implementation in Windows operating systems is related to errors in processing input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending specially crafted IKEv1 packets...
