4939 matches found
CVE-2022-34725
Windows ALPC Elevation of Privilege Vulnerability...
CVE-2022-37969 Windows Common Log File System Driver Elevation of Privilege Vulnerability
...
PT-2022-5619 · Microsoft · Windows
Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to a lack of protection for service data in the Remote Access Connection Manager service of the Windows operating system. This can allow an attacker to gain unauthorize...
Microsoft Windows 安全漏洞
Microsoft Windows is a suite of operating systems for use on personal devices from the U.S.-based Microsoft Corporation. A security vulnerability exists in the Microsoft Windows Distributed File System DFS. The following products and editions are affected: Windows 10 Version 20H2 for x64-based...
PT-2022-5351 · Microsoft · Windows
Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to errors in privilege management in the implementation of the Kerberos protocol in Windows operating systems. It allows a remote attacker to elevate their privileges...
PT-2022-5746 · Microsoft · Windows +1
Name of the Vulnerable Software and Affected Versions: Microsoft WDAC OLE DB provider for SQL Server affected versions not specified Description: The issue exists due to insufficient input validation in the OLE DB driver for SQL Server in the Windows operating system. This allows a remote attacke...
PT-2022-5734 · Microsoft · Windows
Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is caused by synchronization errors when using a shared resource in the Advanced Local Procedure Call ALPC handler of the Windows operating system. This can allow an attacker to...
PT-2022-5615 · Microsoft · Windows Dpapi +1
Name of the Vulnerable Software and Affected Versions: Windows DPAPI affected versions not specified Description: The issue is related to a lack of protection for sensitive data in the Windows DPAPI component, allowing an attacker to disclose protected information. This can enable attackers to...
PT-2022-5743 · Microsoft · Odbc Driver +1
Name of the Vulnerable Software and Affected Versions: Microsoft ODBC Driver affected versions not specified Description: The issue exists due to insufficient input validation in the Microsoft ODBC driver for the Windows operating system. It allows a remote attacker to execute arbitrary code,...
CVE-2022-36070 Poetry's Untrusted Search Path can lead to Local Code Execution on Windows
Poetry is a dependency manager for Python. To handle dependencies that come from a Git repository, Poetry executes various commands, e.g. git config. These commands are being executed using the executable’s name and not its absolute path. This can lead to the execution of untrusted code due to th...
The vulnerability of the HTTP.sys driver in the Windows operating system, which allows a hacker to trigger a service failure
The vulnerability of the HTTP.sys driver in the Windows operating system is related to insufficient input validation. Exploiting this vulnerability can allow a remote attacker to trigger a service failure through a specially crafted request...
The vulnerability of the Secure Socket Tunneling Protocol (SSTP) implementation in Windows operating systems allows a hacker to execute arbitrary code.
The vulnerability of the Secure Socket Tunneling Protocol SSTP implementation in Windows operating systems is related to synchronization errors when using a shared resource. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
Safe Exam Browser 安全漏洞
Safe Exam Browser is a secure web browser environment organized by ETH Zurich, Switzerland. It allows secure online exams to be taken. A security vulnerability exists in Safe Exam Browser Windows versions prior to 3.4.0 that originates from a kiosk breakout no exit code and allows an attacker to...
The vulnerability of the Crypto Pro downloader for the Windows operating system allows a hacker to bypass security restrictions and gain unauthorized access to the system.
The vulnerability of the Crypto Pro downloader for the Windows operating system is related to security configuration errors. Exploiting this vulnerability can allow a hacker to bypass security restrictions and gain unauthorized access to the system...
The vulnerability of the Storage Spaces Direct distributed storage function in Windows operating systems allows attackers to exploit their privileges.
The vulnerability of the Storage Spaces Direct data storage function in the Windows operating system is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...
The vulnerability of the Local Security Authority (LSA) service in the Windows operating system allows a perpetrator to elevate their privileges.
The vulnerability of the Local Security Authority LSA service in the Windows operating system is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to increase their privileges...
CVE-2022-34706
Windows Local Security Authority LSA Elevation of Privilege Vulnerability...
CVE-2022-34699
Windows Win32k Elevation of Privilege Vulnerability...