92434 matches found
Уязвимость компонента Extensions браузеров Google Chrome и Microsoft Edge, позволяющая нарушителю выполнить произвольный код
Уязвимость компонента Extensions браузеров Google Chrome и Microsoft Edge связана с использованием памяти после ее освобождения. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, выполнить произвольный код через вредоносный сетевой трафик...
The vulnerability of the DHCP server service for Windows operating systems allows a perpetrator to gain unauthorized access to confidential information.
The vulnerability of the DHCP server service for Windows operating systems is related to improper handling of values. Exploiting this vulnerability can allow an attacker, working remotely, to gain unauthorized access to confidential information...
The vulnerability of the RuBackup backup system, related to access control errors, allows a perpetrator to gain unauthorized access to edit information.
The vulnerability of the RuBackup backup system is related to access control errors. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access and edit information in the “Local File Servers” panel...
The vulnerability of the parse_version_item() function in the RuBackup backup system allows a perpetrator to trigger a service failure.
The vulnerability of the parseversionitem function in the RuBackup backup system is related to insufficient resource capacity. Exploiting this vulnerability could allow a malicious actor to cause service failures...
The vulnerability of the Braille support module of the text-to-speech application for blind and visually impaired users, allowing the intruder to enhance their privileges
The vulnerability of the Braille support module in the text-to-speech application for blind and visually impaired users like Narrator is related to the use of an unreliable search path. Exploiting this vulnerability can allow attackers to gain increased privileges...
The vulnerability of the SyncChangeCounter() function in the Wayland protocol implementation for X.Org XWaylan, as well as in the X.Org Server implementation of the X Window System, allows a malicious actor to escalate their privileges and cause service failures.
The vulnerability of the SyncChangeCounter function in the Wayland protocol implementation for X.Org XWaylan, as well as in the X.Org Server implementation of the X Window System, is related to the possibility of using memory after it is freed. Exploiting this vulnerability can allow a malicious...
The vulnerability of the Bindings component (WebIDL) in browsers Firefox, Firefox ESR, and the email client Thunderbird allows a hacker to execute arbitrary code.
The vulnerability of the Bindings component WebIDL in browsers Firefox, Firefox ESR, and the email client Thunderbird is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the Networking component of the Firefox browser and the Thunderbird email client allows a hacker to execute arbitrary code.
The vulnerability of the Networking component of the Firefox browser and the Thunderbird email client is related to the use of an untrusted network policy file. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the Windows Operating System’s Telephony Service allows attackers to exploit their privileges.
The vulnerability of the Windows operating system’s Telephony Service is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to increase their privileges...
The vulnerability of the DWM Core Library in Windows operating systems allows attackers to enhance their privileges.
The vulnerability of the DWM Core Library in Windows operating systems is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...
The vulnerability of the RuBackup backup system, related to insufficient resource capacity, allows a perpetrator to trigger a service failure.
The vulnerability of the RuBackup backup system is related to insufficient resources. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...
The vulnerability of the RuBackup backup system, related to insecure management of privileges, allows a perpetrator to escalate their privileges.
The vulnerability of the RuBackup backup system is related to insecure management of privileges. Exploiting this vulnerability could allow a malicious actor to increase their privileges remotely...
The vulnerability of the Windows Ancillary Function Driver for WinSock on Windows operating systems allows attackers to exploit their privileges.
The vulnerability of the Windows Ancillary Function Driver for WinSock operating systems is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to gain increased privileges...
The vulnerability of the Windows Push Notifications service allows a perpetrator to escalate their privileges.
The vulnerability of Windows push-notifications services is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow attackers to gain increased privileges...
The vulnerability of the __glXDisp_ChangeDrawableAttributes() function in the Wayland protocol implementation for X.Org XWaylan, as well as in the X.Org Server implementation of the X Window System, allows a malicious actor to gain unauthorized access to protected information.
The vulnerability of the glXDispChangeDrawableAttributes function in the Wayland protocol implementation for X.Org XWaylan, as well as in the X.Org Server implementation of the X Window System, is related to reading data beyond the permitted range of memory. Exploiting this vulnerability could...
Уязвимость компонента Enterprise браузеров Google Chrome и Microsoft Edge, позволяющая нарушителю повысить свои привилегии
Уязвимость компонента Enterprise браузеров Google Chrome и Microsoft Edge связана с небезопасным управлением привилегиями. Эксплуатация уязвимости может позволить нарушителю повысить свои привилегии...
Уязвимость компонента Web Bluetooth браузеров Google Chrome и Microsoft Edge, позволяющая нарушителю обойти защитный механизм песочницы
Уязвимость компонента Web Bluetooth браузеров Google Chrome и Microsoft Edge связана с отсутствием механизма проверки входных данных на стороне сервера. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, обойти защитный механизм песочницы...
The vulnerability in the implementation of the Secure Boot protocol for operating systems with Windows, which allows attackers to circumvent existing security restrictions.
The vulnerability of the Secure Boot protocol for operating systems running Windows is related to a breach in the data protection mechanism. Exploiting this vulnerability could allow an attacker to circumvent existing security restrictions...
The vulnerability of the Trend Micro Apex One antivirus software arises from an incorrect limitation on the path to the catalog, allowing a malicious actor to execute arbitrary code.
The vulnerability of the Trend Micro Apex One antivirus software is related to an incorrect restriction on the path name to the catalog. Exploiting this vulnerability allows a hacker to execute arbitrary code...
The vulnerability of the Windows Push Notifications service allows a perpetrator to escalate their privileges.
The vulnerability of Windows push-notifications services is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow attackers to gain increased privileges...
The vulnerability of the CheckKeyTypes() function in the Wayland protocol implementation for X.Org XWaylan, as well as in the X.Org Server implementation of the X Window System, allows a malicious actor to escalate their privileges and cause service failures.
The vulnerability of the CheckKeyTypes function in the Wayland protocol for X.Org XWaylan, as well as in the X.Org Server, is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability can allow attackers to gain increased privileges and cause service...
The vulnerability of the Microsoft SharePoint Server software lies in the lack of measures taken to protect the structure of web pages, allowing attackers to perform spear-phishing attacks.
The vulnerability of the Microsoft SharePoint Server software is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform spear-phishing attacks remotely...
The vulnerability of Microsoft Word, Microsoft Office products, Microsoft 365 Apps for Enterprise, SharePoint Enterprise Server, and SharePoint Server relates to the manipulation of pointers, allowing an attacker to execute arbitrary code.
The vulnerability of Microsoft Office and Microsoft 365 Apps for Enterprise packages is related to the use of an untrusted pointer. Exploiting this vulnerability could allow a attacker to execute arbitrary code...
The vulnerability of Microsoft SharePoint Server and SharePoint Enterprise Server lies in the lack of measures taken to protect the structure of web pages, allowing attackers to perform spear-phishing attacks.
The vulnerability of Microsoft SharePoint Server and SharePoint Enterprise Server lies in the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform spear-phishing attacks remotely...
The vulnerability of the Windows operating system’s kernel, which allows a hacker to increase their privileges
The vulnerability of Windows operating system kernels is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...
Уязвимость компонента Extensions браузеров Google Chrome и Microsoft Edge, позволяющая нарушителю выполнить произвольный код внутри песочницы
Уязвимость компонента Extensions браузеров Google Chrome и Microsoft Edge связана с использованием памяти после ее освобождения. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, выполнить произвольный код внутри песочницы через созданную HTML-страницу...
The vulnerability of the DHCP server service for Windows operating systems allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the DHCP server service for Windows operating systems is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...
The vulnerability of the isInTrustedDirectory() function in the RunDlg.cpp script of the Notepad++ editor allows a hacker to execute arbitrary code.
The vulnerability of the isInTrustedDirectory function in the RunDlg.cpp script of the Notepad++ text editor is related to the ambiguity of the path handling. Exploiting this vulnerability could allow an attacker to execute arbitrary code...
Vulnerability of NVIDIA Display Driver and Guest Driver: These drivers for NVIDIA’s virtual graphics processors allow attackers to escalate their privileges, cause service failures, and execute arbitrary code.
The vulnerability of NVIDIA Display Driver and Guest Driver, which are used for NVIDIA’s virtual graphics processors, relates to the ability to access memory after it is freed. Exploiting this vulnerability can allow attackers to increase their privileges, cause service failures, and execute...
The vulnerability of the DWM Core Library in Windows operating systems allows attackers to enhance their privileges.
The vulnerability of the DWM Core Library in Windows operating systems is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...
The vulnerability of Microsoft Office and Microsoft 365 Apps for Enterprise packages, related to the misuse of an unreliable pointer, allows a perpetrator to execute arbitrary code.
The vulnerability of Microsoft Office and Microsoft 365 Apps for Enterprise packages is related to the use of an untrusted pointer. Exploiting this vulnerability could allow a attacker to execute arbitrary code...
The vulnerability of the DWM Core Library in Windows operating systems allows attackers to enhance their privileges.
The vulnerability of the DWM Core Library in Windows operating systems is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...
The vulnerability of Adobe InDesign’s computer layout automation tool, related to writing beyond the buffer in memory, allows a hacker to execute arbitrary code.
The vulnerability of Adobe InDesign’s computer layout automation tool is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created file...
Уязвимость службы File Input браузеров Google Chrome и Microsoft Edge, позволяющая нарушителю выполнить подмену пользовательского интерфейса
Уязвимость службы File Input браузеров Google Chrome и Microsoft Edge связана с ошибками представления информации пользовательским интерфейсом. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, выполнить подмену пользовательского интерфейса через созданную HTML-страницу...
Уязвимость элемента управления вкладками Tab Strip браузеров Google Chrome и Microsoft Edge, позволяющая нарушителю выполнить подмену домена
Уязвимость элемента управления вкладками Tab Strip браузеров Google Chrome и Microsoft Edge связана с ошибками представления информации пользовательским интерфейсом. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, выполнить подмену домена через созданную HTML-страницу...
The vulnerability of Microsoft Office and Microsoft 365 Apps for Enterprise packages lies in their ability to exploit memory after it is freed, allowing an attacker to execute arbitrary code.
The vulnerability of Microsoft Office and Microsoft 365 Apps for Enterprise packages relates to the possibility of using memory after it is freed. Exploiting this vulnerability could allow an attacker to execute arbitrary code...
The vulnerability of Microsoft SharePoint Server and SharePoint Enterprise Server packages stems from deficiencies in the deserialization mechanism, allowing attackers to exploit their privileges.
The vulnerability of Microsoft SharePoint Server and SharePoint Enterprise Server packages is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability can allow an attacker to increase their privileges remotely...
The vulnerability of the RuBackup backup system, related to access control errors, allows a intruder to gain unauthorized access and edit information.
The vulnerability of the RuBackup backup system is related to errors in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access and edit information in the “Service Task Priorities” panel...
The vulnerability of Microsoft Visual Studio Code’s source editor, related to insufficient input validation, allows attackers to bypass existing security mechanisms.
The vulnerability of Microsoft Visual Studio Code’s source editor is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to bypass existing security mechanisms...
The vulnerability of Microsoft Office and Microsoft 365 Apps for Enterprise packages, related to the misuse of an unreliable pointer, allows a perpetrator to execute arbitrary code.
The vulnerability of Microsoft Office and Microsoft 365 Apps for Enterprise packages is related to the use of an untrusted pointer. Exploiting this vulnerability could allow a attacker to execute arbitrary code...
The vulnerability of the functions File::prohibitWrappers() and IOFactory::load() in the PHP library PhpSpreadsheet allows a attacker to perform an SSRF attack or execute arbitrary code.
The vulnerability of the functions File::prohibitWrappers and IOFactory::load in the PHP spreadsheet library PhpSpreadsheet is related to deficiencies in the deserialization mechanism when processing the parameter filename. Exploiting this vulnerability can allow an attacker to perform an SSRF...
The vulnerability of the UxTheme Library (uxtheme.dll) on Windows operating systems, which allows a perpetrator to trigger a service failure
The vulnerability of the UxTheme Library uxtheme.dll in Windows operating systems is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the Windows operating system’s kernel, which allows a hacker to increase their privileges
The vulnerability of Windows operating system kernels is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...
The vulnerability of the Safe Browsing service in Google Chrome and Microsoft Edge allows a hacker to execute arbitrary code.
The vulnerability of the Safe Browsing service in Google Chrome and Microsoft Edge is related to improper code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code through a malicious file...
Уязвимость пользовательского интерфейса WebUI браузеров Google Chrome и Microsoft Edge, позволяющая нарушителю выполнить подмену домена
Уязвимость пользовательского интерфейса WebUI браузеров Google Chrome и Microsoft Edge связана с ошибками представления информации пользовательским интерфейсом. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, выполнить подмену домена с помощью созданного доменного имени...
The vulnerability of the Windows Push Notifications service allows a perpetrator to escalate their privileges.
The vulnerability of the Windows Push Notifications service is related to the possibility of using memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...
The vulnerability of the Windows Push Notifications service allows a perpetrator to disclose protected information.
The vulnerability of the Microsoft Graphics component in the Windows operating system is related to the disclosure of information. Exploiting this vulnerability can allow an attacker to disclose protected information...
The vulnerability of the Windows kernel component of the Windows operating system allows attackers to increase their privileges.
The vulnerability of the Windows Kernel component of the Windows operating system relates to the possibility of exploiting memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...
The vulnerability of the Windows Push Notifications service allows a perpetrator to escalate their privileges.
The vulnerability of the Windows Push Notifications service is related to the possibility of using memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...
The vulnerability of the Windows Ancillary Function Driver for WinSock on Windows operating systems allows attackers to exploit their privileges.
The vulnerability of the Windows Ancillary Function Driver for WinSock operating systems is related to the possibility of using memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...