Semaine du 12 août au 18 août 2024

SolarWinds Web Help Desk

SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability — SolarWinds Web Help Desk contains a deserialization of untrusted data vulnerability that could allow for remote code execution.

Microsoft Windows

Microsoft Windows SmartScreen Security Feature Bypass Vulnerability — Microsoft Windows SmartScreen contains a security feature bypass vulnerability that allows an attacker to bypass the SmartScreen user experience via a malicious file.

Microsoft Windows

Microsoft Windows Ancillary Function Driver for WinSock Privilege Escalation Vulnerability — Microsoft Windows Ancillary Function Driver for WinSock contains an unspecified vulnerability that allows for privilege escalation, enabling a local attacker to gain SYSTEM privileges.

Microsoft Project

Microsoft Project Remote Code Execution Vulnerability — Microsoft Project contains an unspecified vulnerability that allows for remote code execution via a malicious file.

Microsoft Windows

Microsoft Windows Scripting Engine Memory Corruption Vulnerability — Microsoft Windows Scripting Engine contains a memory corruption vulnerability that allows unauthenticated attacker to initiate remote code execution via a specially crafted URL.

Microsoft Windows

Microsoft Windows Power Dependency Coordinator Privilege Escalation Vulnerability — Microsoft Windows Power Dependency Coordinator contains an unspecified vulnerability that allows for privilege escalation, enabling a local attacker to obtain SYSTEM privileges.

Microsoft Windows

Microsoft Windows Kernel Privilege Escalation Vulnerability — Microsoft Windows Kernel contains an unspecified vulnerability that allows for privilege escalation, enabling a local attacker to gain SYSTEM privileges. Successful exploitation of this vulnerability requires an attacker to win a race condition.