KATALOG INFORMACJI
Znajdź podatności, zrozum powód priorytetu i sprawdź informacje u źródła.
Data publikacji: ostatnie 7 dni. Starsze wpisy dostępne w pełnym katalogu i widoku KEV. Dopasowanie kategorii lub producenta nie potwierdza podatności konkretnej wersji produktu.
Heap-based buffer overflow in Microsoft Streaming Service allows an authorized attacker to elevate privileges locally.
Integer overflow or wraparound in Microsoft Streaming Service allows an authorized attacker to elevate privileges locally.
Heap-based buffer overflow in Microsoft COM for Windows allows an authorized attacker to elevate privileges locally.
Heap-based buffer overflow in HID class driver allows an authorized attacker to elevate privileges locally.
Improper access control in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to elevate privileges locally.
Improper access control in Windows Geotag Broker allows an authorized attacker to elevate privileges locally.
Improper access control in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally.
Insufficient granularity of access control in Windows Server Update Service allows an authorized attacker to elevate privileges locally.
Insufficient granularity of access control in Windows Server Update Service allows an authorized attacker to elevate privileges locally.
Spotweb through 1.5.8 contains an OS command injection vulnerability in the runcommand NZB handler that allows remote attackers to execute commands by publishing spots with malicious titles. Attackers can post self-signed spots over Usenet with shell metacharacters in the title, which are…
Improper verification of cryptographic signature in Windows Audio Service allows an authorized attacker to elevate privileges locally.
Improper access control in Windows NTFS allows an authorized attacker to elevate privileges locally.
Improper access control in WebDAV allows an authorized attacker to elevate privileges locally.
Weak authentication in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.
Improper access control in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally.
Incorrect authorization in Windows Device Install Service allows an authorized attacker to elevate privileges locally.
Improper authorization in Windows Virtual Input allows an authorized attacker to elevate privileges locally.
Missing authentication for critical function in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally.
Weak authentication in Windows Resilient File System (ReFS) Deduplication Service allows an authorized attacker to elevate privileges locally.
Improper privilege management in Windows Group Policy allows an authorized attacker to elevate privileges locally.
The Divi Plus plugin for WordPress is vulnerable to Arbitrary File Read in versions up to, and including, 2.4.0 via the 'svg_image' parameter of the /wp-json/elicus/v1/dipl-modules/svg-animator REST endpoint. This is due to the endpoint's permission callback…
Improper link resolution before file access ('link following') in Windows WalletService allows an authorized attacker to elevate privileges locally.
Improper link resolution before file access ('link following') in Windows User Profile Service allows an authorized attacker to elevate privileges locally.
Use after free in Windows Direct Composition allows an authorized attacker to elevate privileges locally.
Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to execute code locally.
| Producent / podatność | Opis | Rekomendacja i powód | CVSS | EPSS | Daty źródłowe | Zapis |
|---|---|---|---|---|---|---|
| Heap-based buffer overflow in Microsoft Streaming Service allows an authorized attacker to elevate privileges locally. | Heap-based buffer overflow in Microsoft Streaming Service allows an authorized attacker to elevate privileges locally. |
Obserwuj | 7,8 | 0,31 % | ||
| Integer overflow or wraparound in Microsoft Streaming Service allows an authorized attacker to elevate privileges locally. | Integer overflow or wraparound in Microsoft Streaming Service allows an authorized attacker to elevate privileges locally. |
Obserwuj | 7,8 | 0,31 % | ||
| Heap-based buffer overflow in Microsoft COM for Windows allows an authorized attacker to elevate privileges locally. | Heap-based buffer overflow in Microsoft COM for Windows allows an authorized attacker to elevate privileges locally. |
Obserwuj | 7,8 | 0,31 % | ||
| Heap-based buffer overflow in HID class driver allows an authorized attacker to elevate privileges locally. | Heap-based buffer overflow in HID class driver allows an authorized attacker to elevate privileges locally. |
Obserwuj | 7,8 | 0,31 % | ||
| Improper access control in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to elevate privileges… | Improper access control in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to elevate privileges locally. |
Obserwuj | 7,8 | 0,3 % | ||
| Improper access control in Windows Geotag Broker allows an authorized attacker to elevate privileges locally. | Improper access control in Windows Geotag Broker allows an authorized attacker to elevate privileges locally. |
Obserwuj | 7,8 | 0,3 % | ||
| Improper access control in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally. | Improper access control in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally. |
Obserwuj | 7,8 | 0,3 % | ||
| Insufficient granularity of access control in Windows Server Update Service allows an authorized attacker to elevate privileges locally. | Insufficient granularity of access control in Windows Server Update Service allows an authorized attacker to elevate privileges locally. |
Obserwuj | 7,8 | 0,3 % | ||
| Insufficient granularity of access control in Windows Server Update Service allows an authorized attacker to elevate privileges locally. | Insufficient granularity of access control in Windows Server Update Service allows an authorized attacker to elevate privileges locally. |
Obserwuj | 7,8 | 0,3 % | ||
| Spotweb through 1.5.8 contains an OS command injection vulnerability in the runcommand NZB handler that allows remote attackers to execute… | Spotweb through 1.5.8 contains an OS command injection vulnerability in the runcommand NZB handler that allows remote attackers to execute commands by publishing spots with malicious titles. Attackers can post self-signed spots over Usenet with shell metacharacters in the title, which are… |
Obserwuj | 7,7 | 0,8 % | ||
| Improper verification of cryptographic signature in Windows Audio Service allows an authorized attacker to elevate privileges locally. | Improper verification of cryptographic signature in Windows Audio Service allows an authorized attacker to elevate privileges locally. |
Obserwuj | 7,8 | 0,3 % | ||
| Improper access control in Windows NTFS allows an authorized attacker to elevate privileges locally. | Improper access control in Windows NTFS allows an authorized attacker to elevate privileges locally. |
Obserwuj | 7,8 | 0,28 % | ||
| Improper access control in WebDAV allows an authorized attacker to elevate privileges locally. | Improper access control in WebDAV allows an authorized attacker to elevate privileges locally. |
Obserwuj | 7,8 | 0,28 % | ||
| Weak authentication in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally. | Weak authentication in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally. |
Obserwuj | 7,8 | 0,28 % | ||
| Improper access control in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally. | Improper access control in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally. |
Obserwuj | 7,8 | 0,28 % | ||
| Incorrect authorization in Windows Device Install Service allows an authorized attacker to elevate privileges locally. | Incorrect authorization in Windows Device Install Service allows an authorized attacker to elevate privileges locally. |
Obserwuj | 7,8 | 0,28 % | ||
| Improper authorization in Windows Virtual Input allows an authorized attacker to elevate privileges locally. | Improper authorization in Windows Virtual Input allows an authorized attacker to elevate privileges locally. |
Obserwuj | 7,8 | 0,28 % | ||
| Missing authentication for critical function in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges… | Missing authentication for critical function in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally. |
Obserwuj | 7,8 | 0,28 % | ||
| Weak authentication in Windows Resilient File System (ReFS) Deduplication Service allows an authorized attacker to elevate privileges… | Weak authentication in Windows Resilient File System (ReFS) Deduplication Service allows an authorized attacker to elevate privileges locally. |
Obserwuj | 7,8 | 0,28 % | ||
| Improper privilege management in Windows Group Policy allows an authorized attacker to elevate privileges locally. | Improper privilege management in Windows Group Policy allows an authorized attacker to elevate privileges locally. |
Obserwuj | 7,8 | 0,28 % | ||
| The Divi Plus plugin for WordPress is vulnerable to Arbitrary File Read in versions up to, and including, 2.4.0 via the 'svg_image'… | The Divi Plus plugin for WordPress is vulnerable to Arbitrary File Read in versions up to, and including, 2.4.0 via the 'svg_image' parameter of the /wp-json/elicus/v1/dipl-modules/svg-animator REST endpoint. This is due to the endpoint's permission callback… |
Obserwuj | 7,5 | 1,78 % | ||
| Improper link resolution before file access ('link following') in Windows WalletService allows an authorized attacker to elevate… | Improper link resolution before file access ('link following') in Windows WalletService allows an authorized attacker to elevate privileges locally. |
Obserwuj | 7,8 | 0,28 % | ||
| Improper link resolution before file access ('link following') in Windows User Profile Service allows an authorized attacker to elevate… | Improper link resolution before file access ('link following') in Windows User Profile Service allows an authorized attacker to elevate privileges locally. |
Obserwuj | 7,8 | 0,28 % | ||
| Use after free in Windows Direct Composition allows an authorized attacker to elevate privileges locally. | Use after free in Windows Direct Composition allows an authorized attacker to elevate privileges locally. |
Obserwuj | 7,8 | 0,28 % | ||
| Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to execute code locally. | Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to execute code locally. |
Obserwuj | 7,8 | 0,27 % |
Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.