Page 91 of 620 results (0.005 seconds)

CVSS: 7.8EPSS: 0%CPEs: 8EXPL: 0

Windows Kernel Elevation of Privilege Vulnerability This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of Microsoft Windows. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of relocation tables in PE files. The issue results from the lack of proper validation of user-supplied data, which can result in an integer overflow when performing a bounds check before reading from memory. An attacker can leverage this vulnerability to create a persistent denial-of-service condition on the system. • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24949 • CWE-190: Integer Overflow or Wraparound •

CVSS: 7.8EPSS: 0%CPEs: 11EXPL: 0

Windows Backup Service Elevation of Privilege Vulnerability • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24946 • CWE-591: Sensitive Data Storage in Improperly Locked Memory •

CVSS: 5.5EPSS: 0%CPEs: 15EXPL: 0

Windows iSCSI Target Service Information Disclosure Vulnerability • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24945 • CWE-190: Integer Overflow or Wraparound •

CVSS: 6.5EPSS: 0%CPEs: 8EXPL: 0

Windows Bluetooth Driver Information Disclosure Vulnerability • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24944 • CWE-843: Access of Resource Using Incompatible Type ('Type Confusion') •

CVSS: 7.8EPSS: 0%CPEs: 5EXPL: 0

Remote Desktop Client Remote Code Execution Vulnerability • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24905 • CWE-284: Improper Access Control •