21 matches found
CVE-2026-15379
The Altiris WMI provider exposes a class AltirisAgentStream that allows any local standard user to read the contents of any file accessible to the SYSTEM account, bypassing filesystem ACLs. No admin privileges required. The provider reverts to the LocalSystem context when servicing WMI queries...
CVE-2026-15379
The Altiris WMI provider exposes a class AltirisAgentStream that allows any local standard user to read the contents of any file accessible to the SYSTEM account, bypassing filesystem ACLs. No admin privileges required. The provider reverts to the LocalSystem context when servicing WMI queries...
CVE-2026-15379 Arbitrary File Read as SYSTEM in Symantec ITMS
The Altiris WMI provider exposes a class AltirisAgentStream that allows any local standard user to read the contents of any file accessible to the SYSTEM account, bypassing filesystem ACLs. No admin privileges required. The provider reverts to the LocalSystem context when servicing WMI queries...
PT-2026-60727
Name of the Vulnerable Software and Affected Versions Altiris WMI provider affected versions not specified Description The Altiris WMI provider contains a flaw in the AltirisAgent Stream class that allows a local standard user to read files accessible to the SYSTEM account, bypassing filesystem...
CVE-2026-15379: Improper Privilege Management
The Altiris WMI provider exposes a class AltirisAgentStream that allows any local standard user to read the contents of any file accessible to the SYSTEM account, bypassing filesystem ACLs. No admin privileges required. The provider reverts to the LocalSystem context when servicing WMI queries...
CVE-2026-7539 HP Dock Accessory WMI Provider Installer Security Update
A potential security vulnerability has been identified in the HP Accessory WMI Provider installer for some HP Docking Stations, which might allow escalation of privilege and/or arbitrary code execution. HP is releasing software updates to mitigate the potential vulnerability...
CVE-2026-7539: Creation of Temporary File in Directory with Insecure Permissions
A potential security vulnerability has been identified in the HP Accessory WMI Provider installer for some HP Docking Stations, which might allow escalation of privilege and/or arbitrary code execution. HP is releasing software updates to mitigate the potential vulnerability...
EUVD-2023-32940
Malicious code in bioql PyPI...
CVAD and DaaS: Troubleshooting missing logon duration in Citrix Director and Cloud Monitor
To troubleshoot missing logon duration information in monitor, please validate the prerequisites:https://docs.citrix.com/en-us/citrix-virtual-apps-desktops/director/troubleshoot-deployments/user-issues/user-logon.htmlprerequisites Ensure Citrix Profile Management WMI Plug-in is installed:...
February 13, 2024—KB5034769 (OS Build 25398.709)
None None...
CVE-2023-29367
iSCSI Target WMI Provider Remote Code Execution Vulnerability...
Remote code execution
iSCSI Target WMI Provider Remote Code Execution Vulnerability...
CVE-2023-29367 iSCSI Target WMI Provider Remote Code Execution Vulnerability
...
CVE-2023-29367 iSCSI Target WMI Provider Remote Code Execution Vulnerability
...
CVE-2023-29367: Use of Uninitialized Resource
iSCSI Target WMI Provider Remote Code Execution Vulnerability...
August 26, 2021—KB5005103 (OS Build 18363.1766) Preview
None None...
Lazarus Group Surfaces with Advanced Malware Framework
The North Korea-linked APT known as Lazarus Group has debuted an advanced, multipurpose malware framework, called MATA, to target Windows, Linux and macOS operating systems. Kaspersky researchers uncovered a series of attacks utilizing MATA so-called because the malware authors themselves call...
CB TAU Threat Intelligence Notification: Formbook Harvests Data By Intercepting Clients
Formbook is an information stealer which has been around for the past few years. Formbook acts as a form grabber which harvests credentials, passwords, banking details, key strokes and network requests, by intercepting web browser and other clients such as email and IM. The particular sample...
Quota Violation While Running WMI Queries
Challenge In the Veeam Management Pack for System Center UI, some monitored objects are grey or missing altogether. Standard troubleshooting steps do not help. The SCOM agent log on the Collector server contains the following error: WMI Error: 0x8004106C When you try to use the WBEMTEST utility,...
CVE-2009-0078
The Windows Management Instrumentation WMI provider in Microsoft Windows XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 does not properly implement isolation among a set of distinct processes that 1 all run under the NetworkService account or 2 all run under the...