Microsoft Winlogon Security Vulnerability

Microsoft Winlogon is an American Microsoft Microsoft component built into the Windows NT family of operating systems developed by Microsoft. A security vulnerability exists in Microsoft Winlogon. An attacker can exploit the vulnerability to elevate privileges. The following products and versions...

KLA68914 Multiple vulnerabilities in Microsoft Products (ESU)

Multiple vulnerabilities were found in Microsoft Products Extended Security Update. Malicious users can exploit these vulnerabilities to cause denial of service, execute arbitrary code, gain privileges. Below is a complete list of vulnerabilities: 1. A denial of service vulnerability in DNS...

PT-2024-4144 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to a buffer overflow in dynamic memory in the Winlogon program, which is part of the Windows operating system. This can be exploited by an attacker using specially...

PT-2024-4143 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to an elevation-of-privilege vulnerability in the Winlogon program, which is associated with an integer overflow. This vulnerability can be exploited by an attacker to...

Microsoft Winlogon Input Validation Error Vulnerability

Microsoft Winlogon is a Microsoft Corporation USA component built into the Windows NT family of operating systems developed by Microsoft. An input validation error vulnerability exists in Microsoft Winlogon. An attacker could exploit the vulnerability to elevate privileges. The following products...

Winlogon Privilege Escalation (CVE-2020-1472)

A privilege escalation is the act of exploiting a bug, design flaw or configuration oversight in an operating system or software application to gain elevated access to resources that are normally protected. Successful exploitation of this vulnerability could allow an attacker to run arbitrary cod...

CVE-2018-5354

The custom GINA/CP module in ANIXIS Password Reset Client before version 3.22 allows remote attackers to execute code and escalate privileges via spoofing. When the client is configured to use HTTP, it does not authenticate the intended server before opening a browser window. An unauthenticated...

PT-2020-8928

Name of the Vulnerable Software and Affected Versions Zoho ManageEngine ADSelfService Plus versions prior to 5.5 build 5517 Description The issue allows remote attackers to execute code and escalate privileges via spoofing. It does not authenticate the intended server before opening a browser...

Persistence – Winlogon Helper DLL

Winlogon is a Windows component which handles various activities such as the Logon, Logoff, loading user profile during authentication, shutdown, lock screen etc. This kind of behavior is managed by the registry which defines which processes to start during Windows logon. From a red team...

The vulnerability of the Winlogon component of the Windows operating system, which allows a hacker to increase their privileges

The vulnerability of the Winlogon component of the Windows operating system exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to enhance their privileges through a specially created application...

Microsoft Windows Winlogon Privilege Mobilization Vulnerability

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is an operating system for personal devices.Microsoft Windows Server is a server operating system. Microsoft Windows Server is a server operating system. Winlogon is one of the components...

CVE-2019-1268

An elevation of privilege exists when Winlogon does not properly handle file path information, aka 'Winlogon Elevation of Privilege Vulnerability'...

CVE-2019-1268

An elevation of privilege exists when Winlogon does not properly handle file path information, aka 'Winlogon Elevation of Privilege Vulnerability'...

Privilege escalation

An elevation of privilege exists when Winlogon does not properly handle file path information, aka 'Winlogon Elevation of Privilege Vulnerability'...

CVE-2019-1268

An elevation of privilege exists when Winlogon does not properly handle file path information, aka 'Winlogon Elevation of Privilege Vulnerability'...

CVE-2019-1268

CVE-2019-1268 involves a privilege escalation in Microsoft Windows Winlogon. The root cause, as described in CNVD-2019-31856, is that Winlogon does not properly handle file path information, allowing an attacker to log on and run a specially crafted application to execute arbitrary code with elev...

Microsoft Windows Multiple Vulnerabilities (KB4516067)

This host is missing a critical security update according to Microsoft KB4516067 SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Winlogon Elevation of Privilege Vulnerability

An elevation of privilege exists when Winlogon does not properly handle file path information. An attacker who successfully exploited this vulnerability could run arbitrary code. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. T...

Microsoft Winlogon CVE-2019-1268 Local Privilege Escalation Vulnerability

Description Microsoft Winlogon is prone to a local privilege-escalation vulnerability. An attacker can exploit this issue to gain elevated privileges on the system. Technologies Affected Microsoft Windows 10 Version 1607 for 32-bit Systems Microsoft Windows 10 Version 1607 for x64-based Systems...

KB4516062: Windows Server 2012 September 2019 Security Update

The remote Windows host is missing security update 4516062 or cumulative update 4516055. It is, therefore, affected by multiple vulnerabilities : - A remote code execution vulnerability exists in the Windows Remote Desktop Client when a user connects to a malicious server. An attacker who...