PT-2022-29687

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.16.20 Description The issue is related to the drm/amdkfd component in the Linux Kernel, specifically with ensuring mm remains valid in svm deferred list work. The actual impact and attack plausibility have not...

Discover the anatomy of an external cyberattack surface with new RiskIQ report

The internet is now part of the network. That might sound like hyperbole, but the massive shift to hybrid and remote work and a multicloud environment means security teams must now defend their entire online ecosystem. Recent ransomware attacks against internet-facing systems have served as a...

Discover the anatomy of an external cyberattack surface with new RiskIQ report

The internet is now part of the network. That might sound like hyperbole, but the massive shift to hybrid and remote work and a multicloud environment means security teams must now defend their entire online ecosystem. Recent ransomware attacks against internet-facing systems have served as a...

The future of compliance and data governance is here: Introducing Microsoft Purview

The worldwide shift to a hybrid workplace has pushed us all to embrace ubiquitous connectivity. Those new connections have helped us become more collaborative; routinely editing and sharing documents in real-time from wherever we happen to be working. Instant messaging went from being a tool of...

The future of compliance and data governance is here: Introducing Microsoft Purview

The worldwide shift to a hybrid workplace has pushed us all to embrace ubiquitous connectivity. Those new connections have helped us become more collaborative; routinely editing and sharing documents in real-time from wherever we happen to be working. Instant messaging went from being a tool of...

CVE-2022-26807

Windows Work Folder Service Elevation of Privilege Vulnerability...

CVE-2022-26807

Windows Work Folder Service Elevation of Privilege Vulnerability...

Privilege escalation

Windows Work Folder Service Elevation of Privilege Vulnerability...

CVE-2022-26807 Windows Work Folder Service Elevation of Privilege Vulnerability

...

CVE-2022-26807: Concurrent Execution using Shared Resource with Improper Synchronization

Windows Work Folder Service Elevation of Privilege Vulnerability...

Windows Work Folder Service Elevation of Privilege Vulnerability

...

PT-2022-2906

Name of the Vulnerable Software and Affected Versions Windows Work Folder Service affected versions not specified Description The issue is related to errors in synchronization when using a shared resource in the Windows Work Folder Service, which can allow an attacker to elevate their privileges...

Microsoft Windows Work Folder Service competitive condition issue vulnerability

Microsoft Windows Work Folder Service is a Microsoft Corporation USA role service for file servers running Windows Server that provides users with a consistent way to access their work files from their PCs and devices. A competitive conditions issue vulnerability exists in Microsoft Windows Work...

Learn the latest cybersecurity techniques at the Microsoft Security Summit

In a world marked by change and uncertainty, innovation is more than a nice-to-have—it’s vital to any healthy organization. But fearless innovation becomes impossible when gaps in security can put those ideas at risk. Many organizations try to increase their defenses by piecing together a patchwo...

Learn the latest cybersecurity techniques at the Microsoft Security Summit

In a world marked by change and uncertainty, innovation is more than a nice-to-have—it’s vital to any healthy organization. But fearless innovation becomes impossible when gaps in security can put those ideas at risk. Many organizations try to increase their defenses by piecing together a patchwo...

New security features for Windows 11 will help protect hybrid work

Attackers haven’t wasted any time capitalizing on the rapid move to hybrid work. Every day cybercriminals and nation-states alike have improved their targeting, speed, and accuracy as the world adapted to working outside the office. These changes have put "cybersecurity issues and risks” at the t...

New security features for Windows 11 will help protect hybrid work

Attackers haven’t wasted any time capitalizing on the rapid move to hybrid work. Every day cybercriminals and nation-states alike have improved their targeting, speed, and accuracy as the world adapted to working outside the office. These changes have put "cybersecurity issues and risks” at the t...

CVE-2022-27080

Tenda M3 1.10 V1.0.0.124856 was discovered to contain a command injection vulnerability via the component /goform/setWorkmode...

8x8: DLL Search-Order Hijacking Vulnerability in work-64-exe-v7.16.3-1.exe

@is- reported to us a DLL Search-Order Hijacking vulnerability in work-64-exe-v7.16.3-1.exe. Reference: https://attack.mitre.org/techniques/T1574/001/ The underlying issue was found in an older version of Squirrel.Windows. Issue Reference: https://github.com/Squirrel/Squirrel.Windows/issues/1801...

OTRS Information Disclosure Vulnerability (CNVD-2022-29577)

OTRS is an application from the German company OTRS. A service management software. OTRS suffers from an information disclosure vulnerability that originates from the Billing Time ExternalFrontend:: TicketDetailView AccountedTimeDisplay setting is displayed in the Work Order Details view whether ...