Page 15 of 291 results (0.005 seconds)

CVSS: 6.7EPSS: 0%CPEs: 16EXPL: 0

08 Aug 2024 — Summary: Microsoft was notified that an elevation of privilege vulnerability exists in Windows based systems supporting Virtualization Based Security (VBS) including a subset of Azure Virtual Machine SKUS; enabling an attacker with administrator privileges to replace current versions of Windows system files with outdated versions. By exploiting this vulnerability, an attacker could reintroduce previously mitigated vulnerabilities, circumvent some features of VBS, and exfiltrate data protected by VBS. For mo... • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21302 • CWE-284: Improper Access Control •

CVSS: 8.8EPSS: 0%CPEs: 11EXPL: 0

09 Jul 2024 — Windows Text Services Framework Elevation of Privilege Vulnerability Vulnerabilidad de elevación de privilegios en Windows Text Services Framework • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21417 • CWE-862: Missing Authorization •

CVSS: 7.8EPSS: 0%CPEs: 24EXPL: 0

09 Jul 2024 — Windows Graphics Component Elevation of Privilege Vulnerability • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38079 • CWE-122: Heap-based Buffer Overflow •

CVSS: 7.5EPSS: 0%CPEs: 4EXPL: 0

09 Jul 2024 — Xbox Wireless Adapter Remote Code Execution Vulnerability • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38078 • CWE-416: Use After Free •

CVSS: 6.5EPSS: 0%CPEs: 24EXPL: 0

09 Jul 2024 — Windows Network Driver Interface Specification (NDIS) Denial of Service Vulnerability • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38048 • CWE-125: Out-of-bounds Read •

CVSS: 7.8EPSS: 0%CPEs: 14EXPL: 0

09 Jul 2024 — PowerShell Elevation of Privilege Vulnerability • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38047 • CWE-20: Improper Input Validation •

CVSS: 8.4EPSS: 0%CPEs: 19EXPL: 0

09 Jul 2024 — Secure Boot Security Feature Bypass Vulnerability • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-37984 • CWE-121: Stack-based Buffer Overflow •

CVSS: 8.3EPSS: 1%CPEs: 6EXPL: 0

09 Jul 2024 — Secure Boot Security Feature Bypass Vulnerability • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-37977 • CWE-122: Heap-based Buffer Overflow •

CVSS: 8.3EPSS: 1%CPEs: 19EXPL: 0

09 Jul 2024 — Secure Boot Security Feature Bypass Vulnerability • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-37975 • CWE-191: Integer Underflow (Wrap or Wraparound) •

CVSS: 8.8EPSS: 0%CPEs: 19EXPL: 0

09 Jul 2024 — Secure Boot Security Feature Bypass Vulnerability • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-37973 • CWE-674: Uncontrolled Recursion •