Alexander Pudwill

An insecure access control issue could allow a local attacker to overwrite key memory-mapped files, potentially having severe consequences for the security and stability of affected installations. The attacker must first obtain the ability to execute low-privileged code on the target system to exploit this issue.

The issue is related to improper privilege management in the Windows Kernel, allowing an unauthorized attacker to elevate privileges locally.

The issue is related to incorrect permissions in the SolarWinds Dameware Mini Remote Control Service, which can allow an attacker to escalate privileges locally. This vulnerability requires local access and a valid low-privilege account to be susceptible.

The issue is related to the exposure of sensitive system information to an unauthorized control sphere. A local malicious user could potentially exploit this vulnerability, leading to the disclosure of confidential data. The vulnerability is located in the download operation component.

The issue is related to a Local Privilege Escalation Vulnerability in the custom catalog configuration. A local malicious user may potentially exploit this vulnerability to elevate their privileges.

A Local Privilege Escalation issue exists in the Advanced Driver Restore component, allowing a local malicious user to potentially exploit this issue and gain elevated privileges.

An issue was discovered in Ricoh Windows printer drivers that allows attackers local privilege escalation.