Microsoft Windows User Profile Service Privilege Escalation Vulnerability
Windows User Profile Service Elevation of Privilege Vulnerability
Microsoft Win32k Privilege Escalation Vulnerability
Win32k Elevation of Privilege Vulnerability
Microsoft Windows AppX Installer Spoofing Vulnerability
We have investigated reports of a spoofing vulnerability in AppX installer that affects Microsoft Windows. Microsoft is aware of attacks that attempt to exploit this vulnerability by using specially crafted packages that include the malware family known as Emotet/Trickbot/Bazaloader. An attacker could craft a malicious attachment to be used in phishing campaigns. The attacker would then have to convince the user to open the specially crafted attachment. Users whose accounts…
Microsoft Windows Privilege Escalation Vulnerability
Windows Common Log File System Driver Elevation of Privilege Vulnerability
Microsoft Active Directory Domain Services Privilege Escalation Vulnerability
Active Directory Domain Services Elevation of Privilege Vulnerability
Microsoft Active Directory Domain Services Privilege Escalation Vulnerability
Active Directory Domain Services Elevation of Privilege Vulnerability
Microsoft Windows Installer Privilege Escalation Vulnerability
Windows Installer Elevation of Privilege Vulnerability
Microsoft Win32k Privilege Escalation Vulnerability
Win32k Elevation of Privilege Vulnerability
Microsoft Win32k Privilege Escalation Vulnerability
Win32k Elevation of Privilege Vulnerability
Microsoft Windows Win32k Privilege Escalation Vulnerability
Win32k Elevation of Privilege Vulnerability
Microsoft MSHTML Remote Code Execution Vulnerability
Microsoft is investigating reports of a remote code execution vulnerability in MSHTML that affects Microsoft Windows. Microsoft is aware of targeted attacks that attempt to exploit this vulnerability by using specially-crafted Microsoft Office documents. An attacker could craft a malicious ActiveX control to be used by a Microsoft Office document that hosts the browser rendering engine. The attacker would then have to convince the user to open the malicious document. Users…
Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability
Windows Common Log File System Driver Elevation of Privilege Vulnerability
Adobe Acrobat and Reader Use-After-Free Vulnerability
Acrobat Reader DC versions versions 2021.001.20150 (and earlier), 2020.001.30020 (and earlier) and 2017.011.30194 (and earlier) are affected by a Use After Free vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Microsoft Windows Update Medic Service Privilege Escalation Vulnerability
Windows Update Medic Service Elevation of Privilege Vulnerability
Microsoft Windows Local Security Authority (LSA) Spoofing Vulnerability
Windows LSA Spoofing Vulnerability
Microsoft Windows Event Tracing Privilege Escalation Vulnerability
Windows Event Tracing Elevation of Privilege Vulnerability
Microsoft Windows User Profile Service Privilege Escalation Vulnerability
Windows User Profile Service Elevation of Privilege Vulnerability
Trend Micro Multiple Products Improper Input Validation Vulnerability
A improper input validation vulnerability in Trend Micro Apex One, Apex One as a Service, OfficeScan XG and Worry-Free Business Security 10.0 SP1 allows a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.
Trend Micro Multiple Products Improper Input Validation Vulnerability
An improper input validation vulnerability in Trend Micro Apex One, Apex One as a Service, OfficeScan XG, and Worry-Free Business Security 10.0 SP1 allows a remote attached to upload arbitrary files on affected installations. Please note: an attacker must first obtain the ability to logon to the product�s management console in order to exploit this vulnerability.
Microsoft Windows SAM Local Privilege Escalation Vulnerability
An elevation of privilege vulnerability exists because of overly permissive Access Control Lists (ACLs) on multiple system files, including the Security Accounts Manager (SAM) database. An attacker who successfully exploited this vulnerability could run arbitrary code with SYSTEM privileges. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. An attacker must have the ability to execute code on a victim system…
Microsoft Windows Scripting Engine Memory Corruption Vulnerability
Scripting Engine Memory Corruption Vulnerability
Microsoft Windows Kernel Privilege Escalation Vulnerability
Windows Kernel Elevation of Privilege Vulnerability
Microsoft Windows Kernel Privilege Escalation Vulnerability
Windows Kernel Elevation of Privilege Vulnerability
Microsoft Windows Print Spooler Remote Code Execution Vulnerability
A remote code execution vulnerability exists when the Windows Print Spooler service improperly performs privileged file operations. An attacker who successfully exploited this vulnerability could run arbitrary code with SYSTEM privileges. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. UPDATE July 7, 2021: The security update for Windows Server 2012, Windows Server 2016 and Windows 10, Version 1607 have…
OpenPLC ScadaBR Cross-site Scripting Vulnerability
OpenPLC ScadaBR through 0.9.1 on Linux and through 1.12.4 on Windows allows stored XSS via system_settings.shtm.
OpenPLC ScadaBR Unrestricted Upload of File with Dangerous Type Vulnerability
OpenPLC ScadaBR through 0.9.1 on Linux and through 1.12.4 on Windows allows remote authenticated users to upload and execute arbitrary JSP files via view_edit.shtm.
Microsoft Windows MSHTML Platform Remote Code Execution Vulnerability
Windows MSHTML Platform Remote Code Execution Vulnerability
Microsoft Desktop Window Manager (DWM) Core Library Privilege Escalation Vulnerability
Microsoft DWM Core Library Elevation of Privilege Vulnerability
Microsoft Windows NTFS Privilege Escalation Vulnerability
Windows NTFS Elevation of Privilege Vulnerability
Microsoft Windows Kernel Information Disclosure Vulnerability
Windows Kernel Information Disclosure Vulnerability