Cedric Cochin

The issue is related to an elevation of privilege vulnerability in Microsoft Cortana, which allows arbitrary website browsing on the lockscreen. This is due to insufficient access restrictions in the virtual voice assistant Cortana in Windows operating systems. The exploitation of this issue may allow an attacker to elevate their privileges.

An Elevation of Privilege issue exists due to Cortana retrieving data from user input services without considering status. This allows attackers to affect the system. There is no information provided about the estimated number of potentially affected devices worldwide or details about real-world incidents where this issue was exploited.

A cross-site scripting (XSS) issue allows remote attackers to inject arbitrary web script or HTML via EXIF data, such as the Camera Model Tag. This could potentially lead to unauthorized actions on the affected system.

A cross-site scripting (XSS) issue allows remote attackers to inject arbitrary web script or HTML via EXIF data, such as the Camera Model Tag.

The issue allows remote attackers to inject arbitrary web script or HTML via EXIF data, such as the Camera Model Tag, due to a cross-site scripting (XSS) vulnerability.

A cross-site scripting issue allows remote attackers to inject arbitrary web script or HTML via EXIF data, such as the `Camera Model Tag`.

Name of the Vulnerable Software and Affected Versions: phpMyAdmin versions 2.6.0-pl2 and earlier Description: The issue allows remote attackers to inject arbitrary web script or HTML via several parameters and components, including the `PmaAbsoluteUri` parameter, the `zero rows` parameter in `read dump.php`, the confirm form, or an error message generated by the internal phpMyAdmin parser. Recommendations: For phpMyAdmin versions 2.6.0-pl2 and earlier, update to a version later than 2.6.0-pl2 to resolve the issue.