KATALOG INFORMACJI
Znajdź podatności, zrozum powód priorytetu i sprawdź informacje u źródła.
Pełny dostępny katalog: publikacje z ostatnich 365 dni oraz całe dostępne KEV. Dopasowanie kategorii lub producenta nie potwierdza podatności konkretnej wersji produktu.
Przepełnienie całkowitej liczby w funkcji fb_mmap w jądrze Linux umożliwia lokalnym użytkownikom eskalację uprawnień.
A memory corruption issue was addressed by removing the vulnerable code. This issue is fixed in iOS 13.6 and iPadOS 13.6, tvOS 13.4.8. An application may be able to execute arbitrary code with kernel privileges.
In binder_transaction of binder.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android…
An information disclosure vulnerability exists in the way that the Windows SMB Server handles certain requests, aka 'Windows SMB Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-0704, CVE-2019-0821.
Lokalna luka w GDI w systemach Windows umożliwia eskalację uprawnień przez złośliwą aplikację.
Luka w Windows CNG umożliwia eskalację uprawnień do systemu.
An elevation of privilege vulnerability exists when Windows improperly handles calls to Win32k.sys, aka "Windows Win32k Elevation of Privilege Vulnerability." This affects Windows Server 2008, Windows 7, Windows Server 2008 R2.
Luka w VMware ESXi pozwala na dowolne zapisywanie, co może prowadzić do ucieczki z piaskownicy.
Wykorzystanie luki w Microsoft Office Access Connectivity Engine umożliwia zdalne wykonanie kodu.
there is a possible way to bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.
Improper path validation in promecefpluginhost.exe in Kingsoft WPS Office version ranging from 12.2.0.13110 to 12.2.0.16412 (exclusive) on Windows allows an attacker to load an arbitrary Windows library. The vulnerability was found weaponized as a single-click exploit in the form of a deceptive…
A buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS 15.2 and iPadOS 15.2. An application may be able to execute arbitrary code with kernel privileges.
Błąd w LiteLLM umożliwia atakującym dostęp do narzędzi MCP bez ważnego klucza.
Vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1.37.279 FIPS and NDcPP; Gateway: before 14.1-73.37 and before 13.1-64.23 leading to Remote Code Execution or Denial of Service
In the Linux kernel, the following vulnerability has been resolved: net: fix __dst_negative_advice() race __dst_negative_advice() does not enforce proper RCU rules when sk->dst_cache must be cleared, leading to possible UAF. RCU rules are that we must first clear sk->sk_dst_cache, then call…
A vulnerability in Trend Micro Apex One and Worry-Free Business Security 10.0 SP1 on Microsoft Windows may allow an attacker to manipulate a particular product folder to disable the security temporarily, abuse a specific Windows function and attain privilege escalation. An attacker must first…
Improper access control in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally.
In onCreate of WindowState.java, there is a possible way to launch a background activity due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
A double free bug in packet_set_ring() in net/packet/af_packet.c can be exploited by a local user through crafted syscalls to escalate privileges or deny service. We recommend upgrading kernel past the effected versions or rebuilding past ec6af094ea28f0f2dda1a6a33b14cd57e36a9755
In SonicWall SMA100, an unauthenticated Directory Traversal vulnerability in the handleWAFRedirect CGI allows the user to test for the presence of a file on the server.
Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.
Access of resource using incompatible type ('type confusion') in Desktop Window Manager allows an authorized attacker to elevate privileges locally.
Windows Kernel Local Elevation of Privilege Vulnerability
A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to iOS 12, macOS Mojave 10.14, tvOS 12, watchOS 5.
Wykorzystanie luki w menedżerze powiadomień o aktualizacjach pozwala na eskalację uprawnień.
| Producent / podatność | Opis | Rekomendacja i powód | CVSS | EPSS | Daty źródłowe | Zapis |
|---|---|---|---|---|---|---|
| Przepełnienie całkowitej liczby w funkcji fb_mmap w jądrze Linux umożliwia lokalnym użytkownikom eskalację uprawnień. | Przepełnienie całkowitej liczby w funkcji fb_mmap w jądrze Linux umożliwia lokalnym użytkownikom eskalację uprawnień. |
Pilne działanie | 7,8 | 3,21 % | ||
| A memory corruption issue was addressed by removing the vulnerable code. | A memory corruption issue was addressed by removing the vulnerable code. This issue is fixed in iOS 13.6 and iPadOS 13.6, tvOS 13.4.8. An application may be able to execute arbitrary code with kernel privileges. |
Pilne działanie | 7,8 | 3,2 % | ||
| In binder_transaction of binder.c, there is a possible out of bounds write due to an incorrect bounds check. | In binder_transaction of binder.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android… |
Pilne działanie | 7,8 | 3,15 % | ||
| An information disclosure vulnerability exists in the way that the Windows SMB Server handles certain requests, aka 'Windows SMB… | An information disclosure vulnerability exists in the way that the Windows SMB Server handles certain requests, aka 'Windows SMB Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-0704, CVE-2019-0821. |
Pilne działanie | 6,5 | 9,64 % | ||
| Lokalna luka w GDI w systemach Windows umożliwia eskalację uprawnień przez złośliwą aplikację. | Lokalna luka w GDI w systemach Windows umożliwia eskalację uprawnień przez złośliwą aplikację. |
Pilne działanie | 7,8 | 3,11 % | ||
| Luka w Windows CNG umożliwia eskalację uprawnień do systemu. | Luka w Windows CNG umożliwia eskalację uprawnień do systemu. |
Pilne działanie | 7,8 | 3,05 % | ||
| An elevation of privilege vulnerability exists when Windows improperly handles calls to Win32k.sys, aka "Windows Win32k Elevation of… | An elevation of privilege vulnerability exists when Windows improperly handles calls to Win32k.sys, aka "Windows Win32k Elevation of Privilege Vulnerability." This affects Windows Server 2008, Windows 7, Windows Server 2008 R2. |
Pilne działanie | 7,8 | 3,02 % | ||
| Luka w VMware ESXi pozwala na dowolne zapisywanie, co może prowadzić do ucieczki z piaskownicy. | Luka w VMware ESXi pozwala na dowolne zapisywanie, co może prowadzić do ucieczki z piaskownicy. |
Pilne działanie | 8,2 | 1,02 % | ||
| Wykorzystanie luki w Microsoft Office Access Connectivity Engine umożliwia zdalne wykonanie kodu. | Wykorzystanie luki w Microsoft Office Access Connectivity Engine umożliwia zdalne wykonanie kodu. |
Pilne działanie | 6,8 | 7,99 % | ||
| there is a possible way to bypass due to a logic error in the code. | there is a possible way to bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation. |
Pilne działanie | 7,8 | 2,99 % | ||
| Improper path validation in promecefpluginhost.exe in Kingsoft WPS Office version ranging from 12.2.0.13110 to 12.2.0.16412 (exclusive) on… | Improper path validation in promecefpluginhost.exe in Kingsoft WPS Office version ranging from 12.2.0.13110 to 12.2.0.16412 (exclusive) on Windows allows an attacker to load an arbitrary Windows library. The vulnerability was found weaponized as a single-click exploit in the form of a deceptive… |
Pilne działanie | 7,8 | 2,94 % | ||
| A buffer overflow issue was addressed with improved memory handling. | A buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS 15.2 and iPadOS 15.2. An application may be able to execute arbitrary code with kernel privileges. |
Pilne działanie | 7,8 | 2,92 % | ||
| Błąd w LiteLLM umożliwia atakującym dostęp do narzędzi MCP bez ważnego klucza. | Błąd w LiteLLM umożliwia atakującym dostęp do narzędzi MCP bez ważnego klucza. |
Pilne działanie | 8,2 | 0,84 % | ||
| Vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. | Vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1.37.279 FIPS and NDcPP; Gateway: before 14.1-73.37 and before 13.1-64.23 leading to Remote Code Execution or Denial of Service |
Pilne działanie | 8,1 | 1,3 % | ||
| In the Linux kernel, the following vulnerability has been resolved: net: fix __dst_negative_advice() race __dst_negative_advice() does… | In the Linux kernel, the following vulnerability has been resolved: net: fix __dst_negative_advice() race __dst_negative_advice() does not enforce proper RCU rules when sk->dst_cache must be cleared, leading to possible UAF. RCU rules are that we must first clear sk->sk_dst_cache, then call… |
Pilne działanie | 7,8 | 2,7 % | ||
| A vulnerability in Trend Micro Apex One and Worry-Free Business Security 10.0 SP1 on Microsoft Windows may allow an attacker to manipulate… | A vulnerability in Trend Micro Apex One and Worry-Free Business Security 10.0 SP1 on Microsoft Windows may allow an attacker to manipulate a particular product folder to disable the security temporarily, abuse a specific Windows function and attain privilege escalation. An attacker must first… |
Pilne działanie | 7,8 | 2,67 % | ||
| Improper access control in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally. | Improper access control in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally. |
Pilne działanie | 7,8 | 2,66 % | ||
| In onCreate of WindowState.java, there is a possible way to launch a background activity due to a logic error in the code. | In onCreate of WindowState.java, there is a possible way to launch a background activity due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. |
Pilne działanie | 7,8 | 2,61 % | ||
| A double free bug in packet_set_ring() in net/packet/af_packet.c can be exploited by a local user through crafted syscalls to escalate… | A double free bug in packet_set_ring() in net/packet/af_packet.c can be exploited by a local user through crafted syscalls to escalate privileges or deny service. We recommend upgrading kernel past the effected versions or rebuilding past ec6af094ea28f0f2dda1a6a33b14cd57e36a9755 |
Pilne działanie | 7,0 | 6,59 % | ||
| In SonicWall SMA100, an unauthenticated Directory Traversal vulnerability in the handleWAFRedirect CGI allows the user to test for the… | In SonicWall SMA100, an unauthenticated Directory Traversal vulnerability in the handleWAFRedirect CGI allows the user to test for the presence of a file on the server. |
Pilne działanie | 7,5 | 4,01 % | ||
| Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally. | Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally. |
Pilne działanie | 7,8 | 2,51 % | ||
| Access of resource using incompatible type ('type confusion') in Desktop Window Manager allows an authorized attacker to elevate… | Access of resource using incompatible type ('type confusion') in Desktop Window Manager allows an authorized attacker to elevate privileges locally. |
Pilne działanie | 7,8 | 2,5 % | ||
| Windows Kernel Local Elevation of Privilege Vulnerability | Windows Kernel Local Elevation of Privilege Vulnerability |
Pilne działanie | 7,2 | 5,43 % | ||
| A memory corruption issue was addressed with improved memory handling. | A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to iOS 12, macOS Mojave 10.14, tvOS 12, watchOS 5. |
Pilne działanie | 7,8 | 2,37 % | ||
| Wykorzystanie luki w menedżerze powiadomień o aktualizacjach pozwala na eskalację uprawnień. | Wykorzystanie luki w menedżerze powiadomień o aktualizacjach pozwala na eskalację uprawnień. |
Pilne działanie | 7,8 | 2,37 % |
Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.