CISA Known Exploited Vulnerabilities

Description:

A buffer overflow vulnerability in SonicOS allows a remote attacker to cause Denial of Service (DoS) and potentially execute arbitrary code by sending a malicious request to the firewall.

Description:

A privilege escalation vulnerability exists when the Windows UPnP service improperly allows COM object creation.

Description:

A privilege escalation vulnerability exists when Windows improperly handles authentication requests. An attacker who successfully exploited this vulnerability could run processes in an elevated context.

Description:

A privilege escalation vulnerability exists when Windows Error Reporting manager improperly handles hard links. An attacker who successfully exploited this vulnerability could overwrite a targeted file leading to an elevated status.

Description:

A privilege escalation vulnerability exists when the Windows AppX Deployment Server improperly handles junctions.

Description:

A privilege escalation vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory.

Description:

A privilege escalation vulnerability exists when Windows AppXSVC improperly handles hard links. An attacker who successfully exploited this vulnerability could run processes in an elevated context.

Description:

A privilege escalation vulnerability exists in the way the Task Scheduler Service validates certain file operations.

Description:

A privilege escalation vulnerability exists when Windows AppXSVC improperly handles hard links. An attacker who successfully exploited this vulnerability could run processes in an elevated context.

Description:

A privilege escalation vulnerability exists when Windows AppXSVC improperly handles hard links. An attacker who successfully exploited this vulnerability could run processes in an elevated context.

Description:

A privilege escalation vulnerability exists when Windows improperly handles authentication requests. An attacker who successfully exploited this vulnerability could run processes in an elevated context.

Description:

A privilege escalation vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory.

Description:

A privilege escalation vulnerability exists when the Windows Transaction Manager improperly handles objects in memory.

Description:

A privilege escalation vulnerability exists when the Windows kernel fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode.

Description:

The kernel-mode driver in Microsoft Windows OS and Server allows local users to gain privileges via a crafted application.