VulnCheck KEV: CVE-2019-16647

Unquoted Search Path in Maxthon 5.1.0 to 5.2.7 Browser for Windows...

CVE-2022-21295

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is Prior to 6.1.32. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise...

UBUNTU-CVE-2022-21295

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is Prior to 6.1.32. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise...

CVE-2021-31854

A command Injection Vulnerability in McAfee Agent MA for Windows prior to 5.7.5 allows local users to inject arbitrary shell code into the file cleanup.exe. The malicious clean.exe file is placed into the relevant folder and executed by running the McAfee Agent deployment feature located in the...

CVE-2021-31854

A command Injection Vulnerability in McAfee Agent MA for Windows prior to 5.7.5 allows local users to inject arbitrary shell code into the file cleanup.exe. The malicious clean.exe file is placed into the relevant folder and executed by running the McAfee Agent deployment feature located in the...

Worktime 10.20 Build 4967 DLL Hijacking

/ Description: A vulnerability exists in windows that allows other applications dynamic link libraries to execute malicious code without the users consent, in the privelage context of the targeted application. Exploit Title: Worktime 10.20 Build 4967 DLL Hijacking Exploit Date: 15/01/2022 Author:...

First Patch Tuesday of 2022 Brings Fix for a Critical 'Wormable' Windows Vulnerability

Microsoft on Tuesday kicked off its first set of updates for 2022 by plugging 96 security holes across its software ecosystem, while urging customers to prioritize patching for what it calls a critical "wormable" vulnerability. Of the 96 vulnerabilities, nine are rated Critical and 89 are rated...

The vulnerability of the MSHTML platform on Microsoft Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the MSHTML platform in Microsoft Windows systems is related to improper handling of code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code through a specially created web page...

The vulnerability of the DNS Server component of the Microsoft Windows operating system, which allows a perpetrator to execute arbitrary code.

The vulnerability of the DNS Server component of the Microsoft Windows operating system is related to improper code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the DirectWrite programming interface in Microsoft Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the DirectWrite programming interface in Microsoft Windows operating systems is related to improper handling of code generation. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created file...

CVE-2022-21889

Windows Internet Key Exchange IKE Extension Denial of Service Vulnerability...

CVE-2022-21889

Windows Internet Key Exchange IKE Extension Denial of Service Vulnerability...

CVE-2022-21843

Windows Internet Key Exchange IKE Protocol Extensions Remote Code Execution Vulnerability...

CVE-2022-21834

Windows User-mode Driver Framework Reflector Driver Elevation of Privilege Vulnerability...

CVE-2022-21919 Windows User Profile Service Elevation of Privilege Vulnerability

...

PT-2022-15178 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: An elevation-of-privilege issue allows attackers to affect the system. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerabili...

Microsoft Windows 安全漏洞

Microsoft Windows is a suite of operating systems for use on personal devices from the U.S.-based Microsoft Corporation Microsoft. A security vulnerability exists in Microsoft Windows UEFI. The following products and versions are affected: Windows 7 for x64-based Systems Service Pack 1,Windows 8....

Microsoft Windows 权限许可和访问控制问题漏洞

Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft Corporation USA. A vulnerability exists in Microsoft Windows Devices Human Interface with privilege license and access control issues. The following products and versions are affected: Windows 8.1 for...

PT-2022-1657 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue exists due to insufficient input validation in the Windows operating system, which can allow an attacker to disclose protected information. It is an elevation-of-privilege...

Microsoft Windows 安全漏洞

Microsoft Windows is a suite of operating systems for use on personal devices from the U.S.-based Microsoft Corporation Microsoft. A security vulnerability exists in the Microsoft Windows DWM Core Library. The following products and editions are affected:Windows 10 Version 21H1 for ARM64-based...