CVE-2024-38143

CVE-2024-38143 Windows WLAN AutoConfig Service 권한 상승 취약점 성공적으로 악용하면 NT AUTHORITY\SYSTEM으로 권한이 상승될 수 있습니다. 배경 클라이언트 프로젝트를 진행하는 동안 물리적 노트북을 테스트해야 했는데, 어떤 이유에서인지 Matthew Johnson이 작성한 이 기사를 우연히 발견하게 되었습니다. 이 기사는 그가 CVE-2021-28316을 발견하게 된 결과물이었습니다. 비슷한 유형의 공격을 변형하여 수행할 수 있을지 궁금했지만, 실제로는 처음부터 그냥... 작동한...

EUVD-2022-33531

Malicious code in bioql PyPI...

EUVD-2024-37102

Malicious code in bioql PyPI...

CVE-2025-21257

Windows WLAN AutoConfig Service Information Disclosure Vulnerability...

CVE-2025-21257 Windows WLAN AutoConfig Service Information Disclosure Vulnerability

...

CVE-2025-21257

CVE-2025-21257 corresponds to Windows WLAN AutoConfig Service Information Disclosure Vulnerability. The connected documents identify the affected component as the Windows WLAN AutoConfig Service and describe the issue as an information disclosure vulnerability, with local attack requirements (Loc...

Windows WLAN AutoConfig Service Information Disclosure Vulnerability

...

CVE-2024-38143

CVE-2024-38143 is a Windows WLAN AutoConfig Service elevation of privilege vulnerability. The CVSS 3.1 vector indicates an attacker must have physical access (AV:P) and exploit with high complexity, no user interaction, and local access (PR:N, UI:N). The vulnerability could yield elevated privile...

Microsoft Windows Multiple Vulnerabilities (KB5013942)

This host is missing an important security update according to Microsoft KB5013942 SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

CVE-2022-26935

Windows WLAN AutoConfig Service Information Disclosure Vulnerability...

CVE-2022-29121 Windows WLAN AutoConfig Service Denial of Service Vulnerability

...

CVE-2022-26935 Windows WLAN AutoConfig Service Information Disclosure Vulnerability

...

CVE-2021-36967

Windows WLAN AutoConfig Service Elevation of Privilege Vulnerability...

CVE-2021-36965

Windows WLAN AutoConfig Service Remote Code Execution Vulnerability...

Security feature bypass

Windows WLAN AutoConfig Service Security Feature Bypass Vulnerability...

PT-2021-2637 · Microsoft · Windows Wlan Autoconfig Service +1

Name of the Vulnerable Software and Affected Versions: Windows WLAN AutoConfig Service versions prior to the fixed version Description: The issue is related to errors in security settings of the Windows WLAN service, allowing an attacker to gain unauthorized access to protected information. This...

KLA12142 Multiple vulnerabilities in Microsoft Products (ESU)

Multiple vulnerabilities were found in Microsoft Products Extended Support Update. Malicious users can exploit these vulnerabilities to execute arbitrary code, obtain sensitive information, cause denial of service, gain privileges, bypass security restrictions, spoof user interface. Below is a...