L4Ys

An origin validation issue in the Apex One/SEP agent allows a local attacker to escalate privileges. This flaw exists within a process protection communication mechanism. To exploit this, an attacker must already have the ability to execute low-privileged code on the target system.

An origin validation issue in the Apex One/SEP agent allows a local attacker to escalate privileges. This flaw exists within an inter-process communication mechanism, which is the method used by different processes to share data. To exploit this, an attacker must already have the ability to execute low-privileged code on the target system.

An origin validation error in the process protection communication mechanism allows a local attacker to escalate privileges. To exploit this issue, the attacker must first have the ability to execute low-privileged code on the target system.

An origin validation error in the process protection mechanism allows a local attacker to escalate privileges. To exploit this issue, the attacker must first have the ability to execute low-privileged code on the target system.

An origin validation issue in the agent could allow a local attacker to escalate privileges on affected installations. To exploit this, an attacker must first have the ability to execute low-privileged code on the target system.

An origin validation error in the agent's named pipe communication mechanism allows a local attacker to escalate privileges. To exploit this issue, the attacker must first have the ability to execute low-privileged code on the target system.

A time-of-check time-of-use (TOCTOU) issue exists in the agent, which occurs when a program checks a condition (such as a file's existence or permissions) and then uses the result of that check, but the condition changes between the check and the use. This could allow a local attacker who already has the ability to execute low-privileged code on the target system to escalate privileges.

The issue is related to insufficient input validation in the Windows kernel, which can be exploited by an attacker to cause a denial of service using a specially crafted malicious file. This can affect the system, leading to a denial of service.

A heap buffer overflow issue in the Blink component of Google Chrome allows a remote attacker to potentially perform a sandbox escape via a crafted HTML page, if the user is convinced to engage in specific UI gestures.

The issue is related to errors in security settings, allowing a remote attacker to potentially elevate their privileges.

A remote code execution issue exists due to the improper handling of objects in memory by the Windows Jet Database Engine. This can be exploited by remote attackers to execute arbitrary code on the system, potentially using a specially crafted file. The vulnerability is related to a buffer overflow in memory.