Vulnerabilities (CVE)

Filtered by CWE-138
Total 3 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2024-38133 1 Microsoft 10 Windows 10 1809, Windows 10 21h2, Windows 10 22h2 and 7 more 2024-08-16 N/A 7.8 HIGH
Windows Kernel Elevation of Privilege Vulnerability
CVE-2023-7012 2024-08-01 N/A 7.5 HIGH
Insufficient data validation in Permission Prompts in Google Chrome prior to 117.0.5938.62 allowed an attacker who convinced a user to install a malicious app to potentially perform a sandbox escape via a malicious file. (Chromium security severity: Medium)
CVE-2023-42117 2024-05-03 N/A 8.1 HIGH
Exim Improper Neutralization of Special Elements Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Exim. Authentication is not required to exploit this vulnerability. The specific flaw exists within the smtp service, which listens on TCP port 25 by default. The issue results from the lack of proper validation of user-supplied data, which can result in a memory corruption condition. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-17554.