| CVE |
Vendors |
Products |
Updated |
CVSS v3.1 |
| A security vulnerability has been detected in Edimax BR6478ACV2 1.23. The impacted element is the function formPPTPSetup of the file webs. The manipulation of the argument pptpUserName leads to buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way. |
| Use after free in Windows NetBIOS allows an authorized attacker to elevate privileges locally. |
| Heap-based buffer overflow in Windows Diagnostic Policy Service allows an authorized attacker to elevate privileges locally. |
| Missing authorization in Windows Kernel allows an authorized attacker to elevate privileges locally. |
| Improper access control in Windows Cloud Files Mini Filter Driver allows an authorized attacker to disclose information locally. |
| Insufficiently protected credentials in Windows Print Spooler Components allows an authorized attacker to disclose information locally. |
| Heap-based buffer overflow in Microsoft Local Security Authority Server (lsasrv) allows an authorized attacker to deny service over a network. |
| Exposure of sensitive system information to an unauthorized control sphere in Windows Print Spooler Components allows an authorized attacker to disclose information over a network. |
| Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally. |
| Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally. |
| Stored XSS via avatar upload chained with an authentication bypass in /Attachments leads to ATO
in Cervantes version v1.3-beta could allow an attacker to execute arbitrary code in another user's browser with elevated privileges |
| Use after free in Windows SMB Client allows an authorized attacker to elevate privileges locally. |
| Improper access control in Microsoft Account allows an authorized attacker to perform tampering locally. |
| Buffer over-read in Windows USB Video Driver allows an authorized attacker to elevate privileges locally. |
| Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Fast FAT Driver allows an authorized attacker to elevate privileges locally. |
| Use after free in Windows Filter Manager allows an authorized attacker to elevate privileges locally. |
| Out-of-bounds read in Desktop Window Manager allows an authorized attacker to elevate privileges locally. |
| Improper neutralization of special elements used in a command ('command injection') in Windows Active Directory allows an authorized attacker to elevate privileges over a network. |
| Missing authentication for critical function in Azure OpenAI allows an unauthorized attacker to elevate privileges over a network. |
| Execution with unnecessary privileges in Windows PowerShell allows an authorized attacker to bypass a security feature locally. |
