Podatności

Luka w Windows Common Log File System Driver umożliwia eskalację uprawnień.

Potwierdzone wykorzystanie · CISA KEV

Przepełnienie całkowitej liczby w funkcji fb_mmap w jądrze Linux umożliwia lokalnym użytkownikom eskalację uprawnień.

Potwierdzone wykorzystanie · CISA KEV

A memory corruption issue was addressed by removing the vulnerable code. This issue is fixed in iOS 13.6 and iPadOS 13.6, tvOS 13.4.8. An application may be able to execute arbitrary code with kernel privileges.

Potwierdzone wykorzystanie · CISA KEV

In binder_transaction of binder.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android…

Potwierdzone wykorzystanie · CISA KEV

An information disclosure vulnerability exists in the way that the Windows SMB Server handles certain requests, aka 'Windows SMB Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-0704, CVE-2019-0821.

Potwierdzone wykorzystanie · CISA KEV

Lokalna luka w GDI w systemach Windows umożliwia eskalację uprawnień przez złośliwą aplikację.

Potwierdzone wykorzystanie · CISA KEV

Luka w Windows CNG umożliwia eskalację uprawnień do systemu.

Potwierdzone wykorzystanie · CISA KEV

An elevation of privilege vulnerability exists when Windows improperly handles calls to Win32k.sys, aka "Windows Win32k Elevation of Privilege Vulnerability." This affects Windows Server 2008, Windows 7, Windows Server 2008 R2.

Potwierdzone wykorzystanie · CISA KEV

Luka w VMware ESXi pozwala na dowolne zapisywanie, co może prowadzić do ucieczki z piaskownicy.

Potwierdzone wykorzystanie · CISA KEV

Wykorzystanie luki w Microsoft Office Access Connectivity Engine umożliwia zdalne wykonanie kodu.

Potwierdzone wykorzystanie · CISA KEV

there is a possible way to bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.

Potwierdzone wykorzystanie · CISA KEV

Improper path validation in promecefpluginhost.exe in Kingsoft WPS Office version ranging from 12.2.0.13110 to 12.2.0.16412 (exclusive) on Windows allows an attacker to load an arbitrary Windows library. The vulnerability was found weaponized as a single-click exploit in the form of a deceptive…

Potwierdzone wykorzystanie · CISA KEV

A buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS 15.2 and iPadOS 15.2. An application may be able to execute arbitrary code with kernel privileges.

Potwierdzone wykorzystanie · CISA KEV

Błąd w LiteLLM umożliwia atakującym dostęp do narzędzi MCP bez ważnego klucza.

Potwierdzone wykorzystanie · CISA KEV

Vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1.37.279 FIPS and NDcPP; Gateway: before 14.1-73.37 and before 13.1-64.23 leading to Remote Code Execution or Denial of Service

Potwierdzone wykorzystanie · CISA KEV

In the Linux kernel, the following vulnerability has been resolved: net: fix __dst_negative_advice() race __dst_negative_advice() does not enforce proper RCU rules when sk->dst_cache must be cleared, leading to possible UAF. RCU rules are that we must first clear sk->sk_dst_cache, then call…

Potwierdzone wykorzystanie · CISA KEV

A vulnerability in Trend Micro Apex One and Worry-Free Business Security 10.0 SP1 on Microsoft Windows may allow an attacker to manipulate a particular product folder to disable the security temporarily, abuse a specific Windows function and attain privilege escalation. An attacker must first…

Potwierdzone wykorzystanie · CISA KEV

Improper access control in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally.

Potwierdzone wykorzystanie · CISA KEV

In onCreate of WindowState.java, there is a possible way to launch a background activity due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

Potwierdzone wykorzystanie · CISA KEV

A double free bug in packet_set_ring() in net/packet/af_packet.c can be exploited by a local user through crafted syscalls to escalate privileges or deny service. We recommend upgrading kernel past the effected versions or rebuilding past ec6af094ea28f0f2dda1a6a33b14cd57e36a9755

Potwierdzone wykorzystanie · CISA KEV

In SonicWall SMA100, an unauthenticated Directory Traversal vulnerability in the handleWAFRedirect CGI allows the user to test for the presence of a file on the server.

Potwierdzone wykorzystanie · CISA KEV

Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.

Potwierdzone wykorzystanie · CISA KEV

Access of resource using incompatible type ('type confusion') in Desktop Window Manager allows an authorized attacker to elevate privileges locally.

Potwierdzone wykorzystanie · CISA KEV

Windows Kernel Local Elevation of Privilege Vulnerability

Potwierdzone wykorzystanie · CISA KEV

A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to iOS 12, macOS Mojave 10.14, tvOS 12, watchOS 5.

Potwierdzone wykorzystanie · CISA KEV