KATALOG INFORMACJI
Znajdź podatności, zrozum powód priorytetu i sprawdź informacje u źródła.
Data publikacji: ostatnie 7 dni. Starsze wpisy dostępne w pełnym katalogu i widoku KEV. Dopasowanie kategorii lub producenta nie potwierdza podatności konkretnej wersji produktu.
Untrusted search path in Windows Update allows an authorized attacker to elevate privileges locally.
Improper verification of cryptographic signature in Windows Key Distribution Center allows an authorized attacker to elevate privileges locally.
Improper link resolution before file access ('link following') in Windows Update allows an authorized attacker to elevate privileges locally.
Improper neutralization of special elements used in a command ('command injection') in Windows Update allows an authorized attacker to elevate privileges locally.
Heap-based buffer overflow in Windows Update allows an authorized attacker to elevate privileges locally.
Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.
Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally.
Use after free in Windows Perception Simulation Service allows an authorized attacker to elevate privileges locally.
Heap-based buffer overflow in Windows kernel32.dll allows an authorized attacker to elevate privileges locally.
Improper resource shutdown or release in Windows UEFI allows an authorized attacker to bypass a security feature locally.
Rovr through 0.10.3 on Windows contains an OS command injection vulnerability that allows attackers to execute commands by crafting malicious file names. Attackers can deliver a file named with shell metacharacters like & alongside a payload, which runs with user privileges when the file is opened…
Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
Heap-based buffer overflow in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privileges locally.
Release of invalid pointer or reference in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally.
Adobe Framemaker is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Heap-based buffer overflow in HID class driver allows an authorized attacker to elevate privileges locally.
Out-of-bounds read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.
Adobe Framemaker is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Adobe Framemaker is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Adobe Framemaker is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Adobe Framemaker is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Adobe Framemaker is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Adobe Framemaker is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Credential Providers allows an authorized attacker to elevate privileges locally.
Out-of-bounds read in Windows Partition Management Driver allows an authorized attacker to elevate privileges locally.
| Producent / podatność | Opis | Rekomendacja i powód | CVSS | EPSS | Daty źródłowe | Zapis |
|---|---|---|---|---|---|---|
| Untrusted search path in Windows Update allows an authorized attacker to elevate privileges locally. | Untrusted search path in Windows Update allows an authorized attacker to elevate privileges locally. |
Obserwuj | 7,8 | Nieustalone | ||
| Improper verification of cryptographic signature in Windows Key Distribution Center allows an authorized attacker to elevate privileges… | Improper verification of cryptographic signature in Windows Key Distribution Center allows an authorized attacker to elevate privileges locally. |
Obserwuj | 7,8 | Nieustalone | ||
| Improper link resolution before file access ('link following') in Windows Update allows an authorized attacker to elevate privileges… | Improper link resolution before file access ('link following') in Windows Update allows an authorized attacker to elevate privileges locally. |
Obserwuj | 7,8 | Nieustalone | ||
| Improper neutralization of special elements used in a command ('command injection') in Windows Update allows an authorized attacker to… | Improper neutralization of special elements used in a command ('command injection') in Windows Update allows an authorized attacker to elevate privileges locally. |
Obserwuj | 7,8 | Nieustalone | ||
| Heap-based buffer overflow in Windows Update allows an authorized attacker to elevate privileges locally. | Heap-based buffer overflow in Windows Update allows an authorized attacker to elevate privileges locally. |
Obserwuj | 7,8 | Nieustalone | ||
| Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally. | Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally. |
Obserwuj | 7,8 | Nieustalone | ||
| Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally. | Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally. |
Obserwuj | 7,8 | Nieustalone | ||
| Use after free in Windows Perception Simulation Service allows an authorized attacker to elevate privileges locally. | Use after free in Windows Perception Simulation Service allows an authorized attacker to elevate privileges locally. |
Obserwuj | 7,8 | Nieustalone | ||
| Heap-based buffer overflow in Windows kernel32.dll allows an authorized attacker to elevate privileges locally. | Heap-based buffer overflow in Windows kernel32.dll allows an authorized attacker to elevate privileges locally. |
Obserwuj | 7,8 | Nieustalone | ||
| Improper resource shutdown or release in Windows UEFI allows an authorized attacker to bypass a security feature locally. | Improper resource shutdown or release in Windows UEFI allows an authorized attacker to bypass a security feature locally. |
Obserwuj | 7,8 | Nieustalone | ||
| Rovr through 0.10.3 on Windows contains an OS command injection vulnerability that allows attackers to execute commands by crafting… | Rovr through 0.10.3 on Windows contains an OS command injection vulnerability that allows attackers to execute commands by crafting malicious file names. Attackers can deliver a file named with shell metacharacters like & alongside a payload, which runs with user privileges when the file is opened… |
Obserwuj | 7,8 | Nieustalone | ||
| Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. | Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. |
Obserwuj | 7,8 | Nieustalone | ||
| Heap-based buffer overflow in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privileges… | Heap-based buffer overflow in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privileges locally. |
Obserwuj | 7,8 | Nieustalone | ||
| Release of invalid pointer or reference in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges… | Release of invalid pointer or reference in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally. |
Obserwuj | 7,8 | Nieustalone | ||
| Adobe Framemaker is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the… | Adobe Framemaker is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. |
Obserwuj | 7,8 | Nieustalone | ||
| Heap-based buffer overflow in HID class driver allows an authorized attacker to elevate privileges locally. | Heap-based buffer overflow in HID class driver allows an authorized attacker to elevate privileges locally. |
Obserwuj | 7,8 | Nieustalone | ||
| Out-of-bounds read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally. | Out-of-bounds read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally. |
Obserwuj | 7,8 | Nieustalone | ||
| Adobe Framemaker is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current… | Adobe Framemaker is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. |
Obserwuj | 7,8 | Nieustalone | ||
| Adobe Framemaker is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of… | Adobe Framemaker is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. |
Obserwuj | 7,8 | Nieustalone | ||
| Adobe Framemaker is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of… | Adobe Framemaker is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. |
Obserwuj | 7,8 | Nieustalone | ||
| Adobe Framemaker is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the… | Adobe Framemaker is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. |
Obserwuj | 7,8 | Nieustalone | ||
| Adobe Framemaker is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of… | Adobe Framemaker is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. |
Obserwuj | 7,8 | Nieustalone | ||
| Adobe Framemaker is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the… | Adobe Framemaker is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. |
Obserwuj | 7,8 | Nieustalone | ||
| Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Credential Providers allows an… | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Credential Providers allows an authorized attacker to elevate privileges locally. |
Obserwuj | 7,8 | Nieustalone | ||
| Out-of-bounds read in Windows Partition Management Driver allows an authorized attacker to elevate privileges locally. | Out-of-bounds read in Windows Partition Management Driver allows an authorized attacker to elevate privileges locally. |
Obserwuj | 7,8 | Nieustalone |
Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.