Windows Kernel Elevation of Privilege Vulnerability
Windows Kernel Elevation of Privilege Vulnerability
- CVSS
- 7,0
- EPSS
- 6,34 %
- Poprawka
- Status poprawki nieustalony
- Publikacja
- Aktualizacja NVD
KATALOG INFORMACJI
Podatności
Znajdź podatności, zrozum powód priorytetu i sprawdź informacje u źródła.
Pełny dostępny katalog: publikacje z ostatnich 365 dni oraz całe dostępne KEV. Dopasowanie kategorii lub producenta nie potwierdza podatności konkretnej wersji produktu.
Filtry katalogu · zakres, producent, rekomendacja
Improper input validation in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.
Improper input validation in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.
- CVSS
- 7,8
- EPSS
- 2,33 %
- Poprawka
- Status poprawki nieustalony
- Publikacja
- Aktualizacja NVD
A local elevation of privilege vulnerability exists in how splwow64.exe handles certain calls, aka 'Microsoft splwow64 Elevation of…
A local elevation of privilege vulnerability exists in how splwow64.exe handles certain calls, aka 'Microsoft splwow64 Elevation of Privilege Vulnerability'.
- CVSS
- 7,8
- EPSS
- 2,31 %
- Poprawka
- Status poprawki nieustalony
- Publikacja
- Aktualizacja NVD
Podatność w Windows Print Spooler umożliwia eskalację uprawnień.
Podatność w Windows Print Spooler umożliwia eskalację uprawnień.
- CVSS
- 7,8
- EPSS
- 2,28 %
- Poprawka
- Status poprawki nieustalony
- Publikacja
- Aktualizacja NVD
Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally.
Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally.
- CVSS
- 7,8
- EPSS
- 2,22 %
- Poprawka
- Status poprawki nieustalony
- Publikacja
- Aktualizacja NVD
A deserialization issue was addressed through improved validation.
A deserialization issue was addressed through improved validation. This issue is fixed in Security Update 2021-005 Catalina, iOS 12.5.5, iOS 14.8 and iPadOS 14.8, macOS Big Sur 11.6, watchOS 7.6.2. A sandboxed process may be able to circumvent sandbox restrictions. Apple was aware of a report that…
- CVSS
- 7,5
- EPSS
- 3,67 %
- Poprawka
- Status poprawki nieustalony
- Publikacja
- Aktualizacja NVD
Luka w SIMATIC CP 1543-1 pozwala na zapis zmiennych SNMP, co może prowadzić do awarii.
Luka w SIMATIC CP 1543-1 pozwala na zapis zmiennych SNMP, co może prowadzić do awarii.
- CVSS
- 7,5
- EPSS
- 3,61 %
- Poprawka
- Status poprawki nieustalony
- Publikacja
- Aktualizacja NVD
Proself Enterprise/Standard Edition Ver5.62 and earlier, Proself Gateway Edition Ver1.65 and earlier, and Proself Mail Sanitize Edition…
Proself Enterprise/Standard Edition Ver5.62 and earlier, Proself Gateway Edition Ver1.65 and earlier, and Proself Mail Sanitize Edition Ver1.08 and earlier allow a remote unauthenticated attacker to conduct XML External Entity (XXE) attacks. By processing a specially crafted request containing…
- CVSS
- 7,5
- EPSS
- 3,54 %
- Poprawka
- Status poprawki nieustalony
- Publikacja
- Aktualizacja NVD
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Kernel allows an authorized…
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Kernel allows an authorized attacker to elevate privileges locally.
- CVSS
- 7,0
- EPSS
- 5,99 %
- Poprawka
- Status poprawki nieustalony
- Publikacja
- Aktualizacja NVD
A use-after-free issue was addressed with improved memory management.
A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 17 and iPadOS 17, iOS 15.8.7 and iPadOS 15.8.7. An app may be able to execute arbitrary code with kernel privileges.
- CVSS
- 7,8
- EPSS
- 1,96 %
- Poprawka
- Status poprawki nieustalony
- Publikacja
- Aktualizacja NVD
Use after free in Windows DWM allows an authorized attacker to elevate privileges locally.
Use after free in Windows DWM allows an authorized attacker to elevate privileges locally.
- CVSS
- 7,8
- EPSS
- 1,92 %
- Poprawka
- Status poprawki nieustalony
- Publikacja
- Aktualizacja NVD
Deserialization of Untrusted Data vulnerability in N-able N-central allows Local Execution of Code.This issue affects N-central: before…
Deserialization of Untrusted Data vulnerability in N-able N-central allows Local Execution of Code.This issue affects N-central: before 2025.3.1.
- CVSS
- 7,8
- EPSS
- 1,9 %
- Poprawka
- Status poprawki nieustalony
- Publikacja
- Aktualizacja NVD
An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka…
An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-0808.
- CVSS
- 7,8
- EPSS
- 1,89 %
- Poprawka
- Status poprawki nieustalony
- Publikacja
- Aktualizacja NVD
Windows COM+ Event System Service Elevation of Privilege Vulnerability
Windows COM+ Event System Service Elevation of Privilege Vulnerability
- CVSS
- 7,8
- EPSS
- 1,89 %
- Poprawka
- Status poprawki nieustalony
- Publikacja
- Aktualizacja NVD
A certificate validation issue was addressed.
A certificate validation issue was addressed. This issue is fixed in macOS Ventura 13.6, iOS 16.7 and iPadOS 16.7. A malicious app may be able to bypass signature validation. Apple is aware of a report that this issue may have been actively exploited against versions of iOS before iOS 16.7.
- CVSS
- 5,5
- EPSS
- 13,38 %
- Poprawka
- Status poprawki nieustalony
- Publikacja
- Aktualizacja NVD
Null pointer dereference in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
Null pointer dereference in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
- CVSS
- 7,8
- EPSS
- 1,82 %
- Poprawka
- Status poprawki nieustalony
- Publikacja
- Aktualizacja NVD
Niskopoziomowe sterowniki GIGABYTE APP Center umożliwiają wykonanie kodu z podwyższonymi uprawnieniami.
Niskopoziomowe sterowniki GIGABYTE APP Center umożliwiają wykonanie kodu z podwyższonymi uprawnieniami.
- CVSS
- 7,8
- EPSS
- 1,82 %
- Poprawka
- Status poprawki nieustalony
- Publikacja
- Aktualizacja NVD
An elevation of privilege vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard links, aka 'Windows…
An elevation of privilege vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard links, aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-1130.
- CVSS
- 7,8
- EPSS
- 1,78 %
- Poprawka
- Status poprawki nieustalony
- Publikacja
- Aktualizacja NVD
Podatność w Windows AppX Deployment Service umożliwia eskalację uprawnień przez niewłaściwe zarządzanie dowiązaniami twardymi.
Podatność w Windows AppX Deployment Service umożliwia eskalację uprawnień przez niewłaściwe zarządzanie dowiązaniami twardymi.
- CVSS
- 7,8
- EPSS
- 1,72 %
- Poprawka
- Status poprawki nieustalony
- Publikacja
- Aktualizacja NVD
Windows Power Dependency Coordinator Elevation of Privilege Vulnerability
Windows Power Dependency Coordinator Elevation of Privilege Vulnerability
- CVSS
- 7,8
- EPSS
- 1,64 %
- Poprawka
- Status poprawki nieustalony
- Publikacja
- Aktualizacja NVD
An information disclosure vulnerability exists when Internet Explorer improperly handles objects in memory.An attacker who successfully…
An information disclosure vulnerability exists when Internet Explorer improperly handles objects in memory.An attacker who successfully exploited this vulnerability could test for the presence of files on disk, aka 'Internet Explorer Information Disclosure Vulnerability'.
- CVSS
- 6,5
- EPSS
- 8,11 %
- Poprawka
- Status poprawki nieustalony
- Publikacja
- Aktualizacja NVD
Memory corruption due to improper check to return error when user application requests memory allocation of a huge size in Snapdragon…
Memory corruption due to improper check to return error when user application requests memory allocation of a huge size in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon…
- CVSS
- 7,8
- EPSS
- 1,6 %
- Poprawka
- Status poprawki nieustalony
- Publikacja
- Aktualizacja NVD
Reliance on untrusted inputs in a security decision in Microsoft Office Word allows an unauthorized attacker to bypass a security feature…
Reliance on untrusted inputs in a security decision in Microsoft Office Word allows an unauthorized attacker to bypass a security feature locally.
- CVSS
- 7,8
- EPSS
- 1,6 %
- Poprawka
- Status poprawki nieustalony
- Publikacja
- Aktualizacja NVD
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
- CVSS
- 7,8
- EPSS
- 1,57 %
- Poprawka
- Status poprawki nieustalony
- Publikacja
- Aktualizacja NVD
Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability
Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability
- CVSS
- 7,8
- EPSS
- 1,56 %
- Poprawka
- Status poprawki nieustalony
- Publikacja
- Aktualizacja NVD
| Producent / podatność | Opis | Rekomendacja i powód | CVSS | EPSS | Daty źródłowe | Zapis |
|---|---|---|---|---|---|---|
| Windows Kernel Elevation of Privilege Vulnerability | Windows Kernel Elevation of Privilege Vulnerability |
Pilne działanie | 7,0 | 6,34 % | ||
| Improper input validation in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally. | Improper input validation in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally. |
Pilne działanie | 7,8 | 2,33 % | ||
| A local elevation of privilege vulnerability exists in how splwow64.exe handles certain calls, aka 'Microsoft splwow64 Elevation of… | A local elevation of privilege vulnerability exists in how splwow64.exe handles certain calls, aka 'Microsoft splwow64 Elevation of Privilege Vulnerability'. |
Pilne działanie | 7,8 | 2,31 % | ||
| Podatność w Windows Print Spooler umożliwia eskalację uprawnień. | Podatność w Windows Print Spooler umożliwia eskalację uprawnień. |
Pilne działanie | 7,8 | 2,28 % | ||
| Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally. | Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally. |
Pilne działanie | 7,8 | 2,22 % | ||
| A deserialization issue was addressed through improved validation. | A deserialization issue was addressed through improved validation. This issue is fixed in Security Update 2021-005 Catalina, iOS 12.5.5, iOS 14.8 and iPadOS 14.8, macOS Big Sur 11.6, watchOS 7.6.2. A sandboxed process may be able to circumvent sandbox restrictions. Apple was aware of a report that… |
Pilne działanie | 7,5 | 3,67 % | ||
| Luka w SIMATIC CP 1543-1 pozwala na zapis zmiennych SNMP, co może prowadzić do awarii. | Luka w SIMATIC CP 1543-1 pozwala na zapis zmiennych SNMP, co może prowadzić do awarii. |
Pilne działanie | 7,5 | 3,61 % | ||
| Proself Enterprise/Standard Edition Ver5.62 and earlier, Proself Gateway Edition Ver1.65 and earlier, and Proself Mail Sanitize Edition… | Proself Enterprise/Standard Edition Ver5.62 and earlier, Proself Gateway Edition Ver1.65 and earlier, and Proself Mail Sanitize Edition Ver1.08 and earlier allow a remote unauthenticated attacker to conduct XML External Entity (XXE) attacks. By processing a specially crafted request containing… |
Pilne działanie | 7,5 | 3,54 % | ||
| Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Kernel allows an authorized… | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Kernel allows an authorized attacker to elevate privileges locally. |
Pilne działanie | 7,0 | 5,99 % | ||
| A use-after-free issue was addressed with improved memory management. | A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 17 and iPadOS 17, iOS 15.8.7 and iPadOS 15.8.7. An app may be able to execute arbitrary code with kernel privileges. |
Pilne działanie | 7,8 | 1,96 % | ||
| Use after free in Windows DWM allows an authorized attacker to elevate privileges locally. | Use after free in Windows DWM allows an authorized attacker to elevate privileges locally. |
Pilne działanie | 7,8 | 1,92 % | ||
| Deserialization of Untrusted Data vulnerability in N-able N-central allows Local Execution of Code.This issue affects N-central: before… | Deserialization of Untrusted Data vulnerability in N-able N-central allows Local Execution of Code.This issue affects N-central: before 2025.3.1. |
Pilne działanie | 7,8 | 1,9 % | ||
| An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka… | An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-0808. |
Pilne działanie | 7,8 | 1,89 % | ||
| Windows COM+ Event System Service Elevation of Privilege Vulnerability | Windows COM+ Event System Service Elevation of Privilege Vulnerability |
Pilne działanie | 7,8 | 1,89 % | ||
| A certificate validation issue was addressed. | A certificate validation issue was addressed. This issue is fixed in macOS Ventura 13.6, iOS 16.7 and iPadOS 16.7. A malicious app may be able to bypass signature validation. Apple is aware of a report that this issue may have been actively exploited against versions of iOS before iOS 16.7. |
Pilne działanie | 5,5 | 13,38 % | ||
| Null pointer dereference in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. | Null pointer dereference in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. |
Pilne działanie | 7,8 | 1,82 % | ||
| Niskopoziomowe sterowniki GIGABYTE APP Center umożliwiają wykonanie kodu z podwyższonymi uprawnieniami. | Niskopoziomowe sterowniki GIGABYTE APP Center umożliwiają wykonanie kodu z podwyższonymi uprawnieniami. |
Pilne działanie | 7,8 | 1,82 % | ||
| An elevation of privilege vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard links, aka 'Windows… | An elevation of privilege vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard links, aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-1130. |
Pilne działanie | 7,8 | 1,78 % | ||
| Podatność w Windows AppX Deployment Service umożliwia eskalację uprawnień przez niewłaściwe zarządzanie dowiązaniami twardymi. | Podatność w Windows AppX Deployment Service umożliwia eskalację uprawnień przez niewłaściwe zarządzanie dowiązaniami twardymi. |
Pilne działanie | 7,8 | 1,72 % | ||
| Windows Power Dependency Coordinator Elevation of Privilege Vulnerability | Windows Power Dependency Coordinator Elevation of Privilege Vulnerability |
Pilne działanie | 7,8 | 1,64 % | ||
| An information disclosure vulnerability exists when Internet Explorer improperly handles objects in memory.An attacker who successfully… | An information disclosure vulnerability exists when Internet Explorer improperly handles objects in memory.An attacker who successfully exploited this vulnerability could test for the presence of files on disk, aka 'Internet Explorer Information Disclosure Vulnerability'. |
Pilne działanie | 6,5 | 8,11 % | ||
| Memory corruption due to improper check to return error when user application requests memory allocation of a huge size in Snapdragon… | Memory corruption due to improper check to return error when user application requests memory allocation of a huge size in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon… |
Pilne działanie | 7,8 | 1,6 % | ||
| Reliance on untrusted inputs in a security decision in Microsoft Office Word allows an unauthorized attacker to bypass a security feature… | Reliance on untrusted inputs in a security decision in Microsoft Office Word allows an unauthorized attacker to bypass a security feature locally. |
Pilne działanie | 7,8 | 1,6 % | ||
| Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability |
Pilne działanie | 7,8 | 1,57 % | ||
| Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability | Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability |
Pilne działanie | 7,8 | 1,56 % |
Źródła i pokrycie danych
Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.
NVD · publikacjeOstatnie przetworzenie zakończone
NVD · aktualizacjeOstatnie przetworzenie zakończone
CISA KEVOstatnie przetworzenie zakończone
FIRST EPSSOstatnie przetworzenie zakończoneData modelu znajduje się przy rekordzie.