The vulnerability of the implementation of the HMAC (Hash-based Message Authentication Code) algorithm in Windows operating systems allows attackers to circumvent security restrictions and enhance their privileges.

The vulnerability of the HMAC Hash-based Message Authentication Code algorithm implementation in Windows operating systems is related to deficiencies in access control during key generation. Exploiting this vulnerability can allow attackers to circumvent security restrictions and enhance their...

Privilege escalation

Windows DWM Core Library Elevation of Privilege Vulnerability...

CVE-2023-36405 Windows Kernel Elevation of Privilege Vulnerability

...

CVE-2023-36428 Microsoft Local Security Authority Subsystem Service Information Disclosure Vulnerability

...

VulnCheck KEV: CVE-2023-36033

Microsoft Windows Desktop Window Manager DWM Core Library contains an unspecified vulnerability that allows for privilege escalation...

Fortinet FortiClient 安全漏洞

Fortinet FortiClient is a mobile endpoint security solution from Fortinet. The solution provides IPsec and SSL encryption, WAN optimization, endpoint compliance and two-factor authentication when connected to a FortiGate firewall appliance. A hard-coded vulnerability exists in Fortinet FortiClien...

Microsoft Windows Protected EAP Security Vulnerability

Microsoft Windows is a suite of operating systems for use on personal devices from the U.S.-based Microsoft Corporation Microsoft. A security vulnerability exists in Microsoft Windows Protected EAP PEAP. An attacker could exploit the vulnerability to remotely execute code. The following products...

AMD Graphics Driver Data Forgery Issue Vulnerability

AMD Graphics Driver is an integrated graphics driver from UltraMicroelectronics AMD. A security vulnerability in AMD Graphics Driver, which stems from improper signature verification in the RadeonTM RX Vega M graphics driver for Windows, could allow an attacker with administrator privileges to...

Relative Path Traversal

Overview std/internal/safefilepath is a Go standard library package std/internal/safefilepath Affected versions of this package are vulnerable to Relative Path Traversal. Go Vulnerability Report:The filepath package does not recognize paths with a ??\ prefix as special.On Windows, a path beginnin...

CVE-2023-31023

NVIDIA Display Driver for Windows contains a vulnerability where an attacker may cause a pointer dereference of an untrusted value, which may lead to denial of service...

The vulnerability of the HP Print and Scan Doctor for Windows diagnostic tool lies in the insufficient protection of operational data, which allows attackers to exploit their privileges.

The vulnerability of the HP Print and Scan Doctor for Windows diagnostic tool is related to insufficient protection of sensitive data. Exploiting this vulnerability can allow attackers to gain increased privileges...

CVE-2023-28797 LPE using arbitrary file delete with Symlinks

Zscaler Client Connector for Windows before 4.1 writes/deletes a configuration file inside specific folders on the disk. A malicious user can replace the folder and execute code as a privileged user...

PT-2023-12107 · Zscaler · Zscaler Client Connector Installer

Name of the Vulnerable Software and Affected Versions: Zscaler Client Connector Installer on Windows versions prior to 3.4.0.124 Description: The issue arises from the improper handling of directory junctions during the uninstallation process of the Zscaler Client Connector Installer on Windows...

CVE-2023-45883

A privilege escalation vulnerability exists within the Qumu Multicast Extension v2 before 2.0.63 for Windows. When a standard user triggers a repair of the software, a pop-up window opens with SYSTEM privileges. Standard users may use this to gain arbitrary code execution as SYSTEM...

PT-2023-29744 · Qumu · Qumu Multicast Extension V2

Name of the Vulnerable Software and Affected Versions: Qumu Multicast Extension v2 versions prior to 2.0.63 Description: A privilege escalation issue exists within the Qumu Multicast Extension v2 for Windows. When a standard user triggers a repair of the software, a pop-up window opens with SYSTE...

The vulnerability affects the runtime of procedure calls in the Windows operating system, allowing attackers to exploit it to disclose sensitive information that is protected by security measures.

The vulnerability of the Remote Procedure Call component in the Windows operating system is related to the disclosure of information in the error data field. Exploiting this vulnerability can allow a remote attacker to disclose the protected information...

The vulnerability of the Client Server Run-Time Subsystem (CSRSS) in Windows operating systems, which allows attackers to enhance their privileges

The vulnerability of the Client Server Run-Time Subsystem CSRSS in Windows operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability of the module of the virtual trusted platform for Windows operating systems, allowing a perpetrator to execute arbitrary code

The vulnerability of the virtual trusted platform module for Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

The vulnerability in the implementation of the IKE protocol for Windows operating systems allows a hacker to increase their privileges.

The vulnerability of the IKE protocol implementation in Windows operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability of the Windows Common Log File System (CLFS) driver in Windows operating systems allows a hacker to disclose protected information.

The vulnerability of the Windows Common Log File System CLFS driver in Windows operating systems is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker to disclose protected information...