πŸ›‘ Cybersecurity & Privacy πŸ›‘ - News
25.8K subscribers
89.2K links
πŸ—ž The finest daily news on cybersecurity and privacy.

πŸ”” Daily releases.

πŸ’» Is your online life secure?

πŸ“© lalilolalo.dev@gmail.com
Download Telegram
β€Ό CVE-2022-41060 β€Ό

Microsoft Word Information Disclosure Vulnerability. This CVE ID is unique from CVE-2022-41103.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2022-41105 β€Ό

Microsoft Excel Information Disclosure Vulnerability.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2020-12930 β€Ό

Improper parameters handling in AMD Secure Processor (ASP) drivers may allow a privileged attacker to elevate their privileges potentially leading to loss of integrity.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2022-38023 β€Ό

Netlogon RPC Elevation of Privilege Vulnerability.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2022-41114 β€Ό

Windows Bind Filter Driver Elevation of Privilege Vulnerability.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2022-31687 β€Ό

VMware Workspace ONE Assist prior to 22.10 contains a Broken Access Control vulnerability. A malicious actor with network access to Workspace ONE Assist may be able to obtain administrative access without the need to authenticate to the application.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2021-26360 β€Ό

An attacker with local access to the system can make unauthorized modifications of the security configuration of the SOC registers. This could allow potential corruption of AMD secure processorÒ€ℒs encrypted memory contents which may lead to arbitrary code execution in ASP.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2022-31688 β€Ό

VMware Workspace ONE Assist prior to 22.10 contains a Reflected cross-site scripting (XSS) vulnerability. Due to improper user input sanitization, a malicious actor with some user interaction may be able to inject javascript code in the target user's window.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2022-41054 β€Ό

Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2022-39879 β€Ό

Improper authorization vulnerability in?CallBGProvider prior to SMR Nov-2022 Release 1 allows local attacker to grant permission for accessing information with phone uid.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2022-41048 β€Ό

Microsoft ODBC Driver Remote Code Execution Vulnerability. This CVE ID is unique from CVE-2022-41047.

πŸ“– Read

via "National Vulnerability Database".
πŸ‘1
β€Ό CVE-2022-41085 β€Ό

Azure CycleCloud Elevation of Privilege Vulnerability.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2022-41063 β€Ό

Microsoft Excel Remote Code Execution Vulnerability. This CVE ID is unique from CVE-2022-41106.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2022-41050 β€Ό

Windows Extensible File Allocation Table Elevation of Privilege Vulnerability.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2022-39885 β€Ό

Improper access control vulnerability in BootCompletedReceiver_CMCC in DeviceManagement prior to SMR Nov-2022 Release 1 allows local attacker to access to Device information.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2022-44550 β€Ό

The graphics display module has a UAF vulnerability when traversing graphic layers. Successful exploitation of this vulnerability may affect system availability.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2022-41101 β€Ό

Windows Overlay Filter Elevation of Privilege Vulnerability. This CVE ID is unique from CVE-2022-41102.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2022-41118 β€Ό

Windows Scripting Languages Remote Code Execution Vulnerability. This CVE ID is unique from CVE-2022-41128.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2022-41086 β€Ό

Windows Group Policy Elevation of Privilege Vulnerability. This CVE ID is unique from CVE-2022-37992.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2022-41092 β€Ό

Windows Win32k Elevation of Privilege Vulnerability. This CVE ID is unique from CVE-2022-41109.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2022-44549 β€Ό

The LBS module has a vulnerability in geofencing API access. Successful exploitation of this vulnerability may cause third-party apps to access the geofencing APIs without authorization, affecting user confidentiality.

πŸ“– Read

via "National Vulnerability Database".