PT-2022-6111 · Symantec · Symantec Endpoint Protection

Name of the Vulnerable Software and Affected Versions: Symantec Endpoint Protection Windows affected versions not specified Description: The issue is related to a Privilege Escalation vulnerability, which can be exploited by an attacker to gain elevated access to protected resources. This...

Design/Logic Flaw

Inappropriate implementation in Web Share API in Google Chrome on Windows prior to 100.0.4896.60 allowed an attacker on the local network segment to leak cross-origin data via a crafted HTML page...

The vulnerability of the Advanced Local Procedure Call (ALPC) handler in the Windows operating system allows attackers to escalate their privileges.

The vulnerability of the Advanced Local Procedure Call ALPC in the Windows operating system is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

HYPR 代码问题漏洞

HYPR is a security application that implements password-less security from HYPR, Inc. A security vulnerability exists in HYPR Windows WFA versions prior to 7.2; HYPR Workforce Access WFA versions prior to 7.2, which stems from an insecure deserialization vulnerability that could allow a...

CVE-2021-42923

ShowMyPC 3606 on Windows suffers from a DLL hijack vulnerability. If an attacker overwrites the file %temp%\ShowMyPC-ShowMyPC3606\wodVPN.dll, it will run any malicious code contained in that file. The code will run with normal user privileges unless the user specifically runs ShowMyPC as...

UBUNTU-CVE-2022-32223

Node.js is vulnerable to Hijack Execution Flow: DLL Hijacking under certain conditions on Windows platforms.This vulnerability can be exploited if the victim has the following dependencies on a Windows machine: OpenSSL has been installed and “C:\Program Files\Common Files\SSL\openssl.cnf”...

CVE-2022-32223

Node.js is vulnerable to Hijack Execution Flow: DLL Hijacking under certain conditions on Windows platforms.This vulnerability can be exploited if the victim has the following dependencies on a Windows machine: OpenSSL has been installed and “C:\Program Files\Common Files\SSL\openssl.cnf”...

Internet Bug Bounty: Node.js - DLL Hijacking on Windows

Full Node.js Security Releases - summarizing the issue is here:https://nodejs.org/en/blog/vulnerability/july-2022-security-releases/ The original Node.js HackerOne report is here: https://hackerone.com/bugs?reportid=1447455 ----- Node.js versions earlier than 16.16.0 LTS and 14.20.0 are vulnerabl...

CVE-2022-22036

Performance Counters for Windows Elevation of Privilege Vulnerability...

CVE-2022-22026

Windows Client Server Run-time Subsystem CSRSS Elevation of Privilege Vulnerability...

CVE-2022-22037

Windows Advanced Local Procedure Call ALPC Elevation of Privilege Vulnerability...

Microsoft Windows 代码问题漏洞

Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft Corporation USA. A code issue vulnerability exists in the Microsoft Windows Client/Server Runtime Subsystem. The following products and editions are affected:Windows 10 Version 1809 for 32-bit...

PT-2022-3714 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to the Advanced Local Procedure Call ALPC handler in the Windows operating system, which has insufficient access control. This can allow an attacker to elevate their...

PT-2022-4305 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Microsoft Windows affected versions not specified Description: The issue is related to errors in security settings, allowing an attacker to bypass the authentication process. It is a security-feature bypass vulnerability that enables attacker...

The vulnerability of the Remote Desktop Protocol Client protocol on the Windows operating system, which allows a hacker to disclose protected information

The vulnerability of the Remote Desktop Protocol Client on the Windows operating system is related to the disclosure of information in the erroneous data field. Exploiting this vulnerability allows a malicious actor to disclose the protected information from a remote location...

The vulnerability of the Remote Desktop Protocol Client protocol on the Windows operating system allows a hacker to execute arbitrary code.

The vulnerability of the Remote Desktop Protocol Client on the Windows operating system is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

Elastic 安全漏洞

Elastic is the Netherlands Elastic company's set of open source distributed RESTful search engine built on Lucene . The product is primarily used in cloud computing and supports data indexing using JSON over HTTP. A security vulnerability exists in Elastic Endpoint Security for Windows. An attack...

The vulnerability of the Local Security Authority Subsystem Service (LSASS) in Windows operating systems allows attackers to escalate their privileges.

The vulnerability of the Local Security Authority Subsystem Service LSASS in Windows operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability of the Advanced Local Procedure Call (ALPC) handler in Microsoft Windows operating systems allows attackers to escalate their privileges.

The vulnerability of the Advanced Local Procedure Call ALPC in Microsoft Windows operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

Cloudflare WARP 后置链接漏洞

Cloudflare WARP Cloudflare Vpn is a client application for secure connections from Cloudflare Inc. in the United States. A backlink vulnerability exists in Cloudflare WARP client for Windows versions prior to 2022.5.309.0, which stems from a vulnerability that allows the creation of a mount point...