KATALOG INFORMACJI
Znajdź podatności, zrozum powód priorytetu i sprawdź informacje u źródła.
Pełny dostępny katalog: publikacje z ostatnich 365 dni oraz całe dostępne KEV. Dopasowanie kategorii lub producenta nie potwierdza podatności konkretnej wersji produktu.
Use after free in Windows DWM allows an authorized attacker to elevate privileges locally.
Deserialization of Untrusted Data vulnerability in N-able N-central allows Local Execution of Code.This issue affects N-central: before 2025.3.1.
An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-0808.
Windows COM+ Event System Service Elevation of Privilege Vulnerability
Null pointer dereference in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
Niskopoziomowe sterowniki GIGABYTE APP Center umożliwiają wykonanie kodu z podwyższonymi uprawnieniami.
An elevation of privilege vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard links, aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-1130.
Podatność w Windows AppX Deployment Service umożliwia eskalację uprawnień przez niewłaściwe zarządzanie dowiązaniami twardymi.
Windows Power Dependency Coordinator Elevation of Privilege Vulnerability
Memory corruption due to improper check to return error when user application requests memory allocation of a huge size in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon…
Reliance on untrusted inputs in a security decision in Microsoft Office Word allows an unauthorized attacker to bypass a security feature locally.
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability
Possible use after free due to improper handling of memory mapping of multiple processes simultaneously. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
Luka w jądrze Windows umożliwia eskalację uprawnień.
A improper input validation vulnerability in Trend Micro Apex One, Apex One as a Service, OfficeScan XG and Worry-Free Business Security 10.0 SP1 allows a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute…
Korupcja pamięci w systemach Apple może umożliwić obejście ochrony pamięci jądra.
In WorkSource, there is a possible parcel mismatch. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-12 Android-12L Android-13Android ID: A-220302519
An elevation of privilege vulnerability exists when the Windows Common Log File System (CLFS) driver improperly handles objects in memory, aka 'Windows Common Log File System Driver Elevation of Privilege Vulnerability'.
Use after free in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.
Korupcja pamięci w systemach Apple może umożliwić obejście ochrony pamięci jądra.
Korupcja pamięci w systemach Apple umożliwia zdalne wykonanie kodu przez atakującego.
Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability
The issue was addressed with improved handling of caches. This issue is fixed in tvOS 16.3, iOS 16.3 and iPadOS 16.3, macOS Monterey 12.6.8, macOS Big Sur 11.7.9, iOS 15.7.8 and iPadOS 15.7.8, macOS Ventura 13.2, watchOS 9.3. Processing a font file may lead to arbitrary code execution. Apple is…
In the ioctl handlers of the Mediatek Command Queue driver, there is a possible out of bounds write due to insufficient input sanitization and missing SELinux restrictions. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not…
| Producent / podatność | Opis | Rekomendacja i powód | CVSS | EPSS | Daty źródłowe | Zapis |
|---|---|---|---|---|---|---|
| Use after free in Windows DWM allows an authorized attacker to elevate privileges locally. | Use after free in Windows DWM allows an authorized attacker to elevate privileges locally. |
Pilne działanie | 7,8 | 1,92 % | ||
| Deserialization of Untrusted Data vulnerability in N-able N-central allows Local Execution of Code.This issue affects N-central: before… | Deserialization of Untrusted Data vulnerability in N-able N-central allows Local Execution of Code.This issue affects N-central: before 2025.3.1. |
Pilne działanie | 7,8 | 1,9 % | ||
| An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka… | An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-0808. |
Pilne działanie | 7,8 | 1,89 % | ||
| Windows COM+ Event System Service Elevation of Privilege Vulnerability | Windows COM+ Event System Service Elevation of Privilege Vulnerability |
Pilne działanie | 7,8 | 1,89 % | ||
| Null pointer dereference in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. | Null pointer dereference in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. |
Pilne działanie | 7,8 | 1,82 % | ||
| Niskopoziomowe sterowniki GIGABYTE APP Center umożliwiają wykonanie kodu z podwyższonymi uprawnieniami. | Niskopoziomowe sterowniki GIGABYTE APP Center umożliwiają wykonanie kodu z podwyższonymi uprawnieniami. |
Pilne działanie | 7,8 | 1,82 % | ||
| An elevation of privilege vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard links, aka 'Windows… | An elevation of privilege vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard links, aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-1130. |
Pilne działanie | 7,8 | 1,78 % | ||
| Podatność w Windows AppX Deployment Service umożliwia eskalację uprawnień przez niewłaściwe zarządzanie dowiązaniami twardymi. | Podatność w Windows AppX Deployment Service umożliwia eskalację uprawnień przez niewłaściwe zarządzanie dowiązaniami twardymi. |
Pilne działanie | 7,8 | 1,72 % | ||
| Windows Power Dependency Coordinator Elevation of Privilege Vulnerability | Windows Power Dependency Coordinator Elevation of Privilege Vulnerability |
Pilne działanie | 7,8 | 1,64 % | ||
| Memory corruption due to improper check to return error when user application requests memory allocation of a huge size in Snapdragon… | Memory corruption due to improper check to return error when user application requests memory allocation of a huge size in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon… |
Pilne działanie | 7,8 | 1,6 % | ||
| Reliance on untrusted inputs in a security decision in Microsoft Office Word allows an unauthorized attacker to bypass a security feature… | Reliance on untrusted inputs in a security decision in Microsoft Office Word allows an unauthorized attacker to bypass a security feature locally. |
Pilne działanie | 7,8 | 1,6 % | ||
| Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability |
Pilne działanie | 7,8 | 1,57 % | ||
| Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability | Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability |
Pilne działanie | 7,8 | 1,56 % | ||
| Possible use after free due to improper handling of memory mapping of multiple processes simultaneously. | Possible use after free due to improper handling of memory mapping of multiple processes simultaneously. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables |
Pilne działanie | 7,8 | 1,54 % | ||
| Luka w jądrze Windows umożliwia eskalację uprawnień. | Luka w jądrze Windows umożliwia eskalację uprawnień. |
Pilne działanie | 7,2 | 4,54 % | ||
| A improper input validation vulnerability in Trend Micro Apex One, Apex One as a Service, OfficeScan XG and Worry-Free Business Security… | A improper input validation vulnerability in Trend Micro Apex One, Apex One as a Service, OfficeScan XG and Worry-Free Business Security 10.0 SP1 allows a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute… |
Pilne działanie | 7,8 | 1,48 % | ||
| Korupcja pamięci w systemach Apple może umożliwić obejście ochrony pamięci jądra. | Korupcja pamięci w systemach Apple może umożliwić obejście ochrony pamięci jądra. |
Pilne działanie | 7,8 | 1,48 % | ||
| In WorkSource, there is a possible parcel mismatch. | In WorkSource, there is a possible parcel mismatch. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-12 Android-12L Android-13Android ID: A-220302519 |
Pilne działanie | 7,8 | 1,47 % | ||
| An elevation of privilege vulnerability exists when the Windows Common Log File System (CLFS) driver improperly handles objects in memory,… | An elevation of privilege vulnerability exists when the Windows Common Log File System (CLFS) driver improperly handles objects in memory, aka 'Windows Common Log File System Driver Elevation of Privilege Vulnerability'. |
Pilne działanie | 7,8 | 1,42 % | ||
| Use after free in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally. | Use after free in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally. |
Pilne działanie | 7,8 | 1,42 % | ||
| Korupcja pamięci w systemach Apple może umożliwić obejście ochrony pamięci jądra. | Korupcja pamięci w systemach Apple może umożliwić obejście ochrony pamięci jądra. |
Pilne działanie | 7,8 | 1,41 % | ||
| Korupcja pamięci w systemach Apple umożliwia zdalne wykonanie kodu przez atakującego. | Korupcja pamięci w systemach Apple umożliwia zdalne wykonanie kodu przez atakującego. |
Pilne działanie | 7,8 | 1,39 % | ||
| Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability | Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability |
Pilne działanie | 7,8 | 1,39 % | ||
| The issue was addressed with improved handling of caches. | The issue was addressed with improved handling of caches. This issue is fixed in tvOS 16.3, iOS 16.3 and iPadOS 16.3, macOS Monterey 12.6.8, macOS Big Sur 11.7.9, iOS 15.7.8 and iPadOS 15.7.8, macOS Ventura 13.2, watchOS 9.3. Processing a font file may lead to arbitrary code execution. Apple is… |
Pilne działanie | 7,8 | 1,39 % | ||
| In the ioctl handlers of the Mediatek Command Queue driver, there is a possible out of bounds write due to insufficient input sanitization… | In the ioctl handlers of the Mediatek Command Queue driver, there is a possible out of bounds write due to insufficient input sanitization and missing SELinux restrictions. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not… |
Pilne działanie | 7,8 | 1,37 % |
Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.