CVE-2022-24540

Windows ALPC Elevation of Privilege Vulnerability...

CVE-2022-24546

Windows DWM Core Library Elevation of Privilege Vulnerability...

CVE-2022-24488

Windows Desktop Bridge Elevation of Privilege Vulnerability...

CVE-2022-24496

Windows Local Security Authority LSA Elevation of Privilege Vulnerability...

CVE-2022-24487

Windows Local Security Authority Subsystem Service LSASS Remote Code Execution Vulnerability...

CVE-2022-24474

Windows Win32k Elevation of Privilege Vulnerability...

CVE-2022-24474

Windows Win32k Elevation of Privilege Vulnerability...

Privilege escalation

Windows Print Spooler Elevation of Privilege Vulnerability...

CVE-2022-26904 Windows User Profile Service Elevation of Privilege Vulnerability

...

CVE-2022-26807 Windows Work Folder Service Elevation of Privilege Vulnerability

...

CVE-2022-26784 Windows Cluster Shared Volume (CSV) Denial of Service Vulnerability

...

CVE-2022-24521 Windows Common Log File System Driver Elevation of Privilege Vulnerability

...

Amazon AWS VPN Client 安全漏洞

Amazon AWS VPN Client is a fully managed remote access VPN solution from Amazon.com, Inc. A security vulnerability exists in Amazon AWS VPN Client for Windows version 2.0.0, which stems from the disclosure of a user's Net-NTLMv2 hash when importing VPN configuration files. information, an attacke...

CVE-2022-0915

There is a Time-of-check Time-of-use TOCTOU Race Condition Vulnerability in Logitech Sync for Windows prior to 2.4.574. Successful exploitation of these vulnerabilities may escalate the permission to the system user...

Code injection

GitHub: Git for Windows' uninstaller vulnerable to DLL hijacking when run under the SYSTEM user account...

CVE-2022-24765 Uncontrolled search for the Git directory in Git for Windows

Git for Windows is a fork of Git containing Windows-specific patches. This vulnerability affects users working on multi-user machines, where untrusted parties have write access to the same hard disk. Those untrusted parties could create the folder C:.git, which would be picked up by Git operation...

Microsoft Windows Remote Desktop Protocol 代码注入漏洞

A remote code execution vulnerability exists in Microsoft Windows Remote Desktop Protocol RDP, an application used by Microsoft to connect to remote Windows desktops. The vulnerability stems from the failure of a networked system or product to properly filter special elements of code segments...

PT-2022-2520 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to insufficient protection of service data in the Cluster Shared Volumes CSV of Windows operating systems. This can allow an attacker to gain unauthorized access to...

PT-2022-2563 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to the implementation of the Lightweight Directory Access Protocol LDAP in Microsoft Windows, specifically due to insufficient input validation. This allows a remote...

Logitech Sync for Windows 安全漏洞

Logitech Sync for Windows is a crossover application from Logitech Switzerland. A security vulnerability exists in Logitech Sync for Windows versions prior to 2.4.574, which could be exploited by an attacker to elevate privileges...