TechSmith Snagit 19.1.0.2653 uses Object Linking and Embedding (OLE) which can allow attackers to obfuscate and embed crafted files used to escalate privileges. NOTE: This implies that Snagit's use of OLE is a security vulnerability unto itself and it is not. See reference document for more details. CVSSv3.1 8.8 (HIGH) · EPSS 12th percentile
ec_verify in kdc/kdc_preauth_ec.c in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) before 1.18.4 and 1.19.x before 1.19.2 allows remote attackers to cause a NULL pointer dereference and daemon crash. This occurs because a return value is not properly managed in a certain situation. CVSSv3.1 7.5 (HIGH) · EPSS 96th percentile
The wordexp function in the GNU C Library (aka glibc) through 2.33 may crash or read arbitrary memory in parse_param (in posix/wordexp.c) when called with an untrusted, crafted pattern, potentially resulting in a denial of service or disclosure of information. This occurs because atoi was used but strtoul should have been used to ensure correct calculations. CVSSv3.1 9.1 (CRITICAL)
An elevation of privilege vulnerability exists because of overly permissive Access Control Lists (ACLs) on multiple system files, including the Security Accounts Manager (SAM) database. An attacker who successfully exploited this vulnerability could run arbitrary code with SYSTEM privileges. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. An attacker must have the ability to execute code on a victim system t CVSSv3.1 7.8 (HIGH) · EPSS 99th percentile
Vulnerability in the Advanced Networking Option component of Oracle Database Server. Supported versions that are affected are 12.1.0.2, 12.2.0.1 and 19c. Difficult to exploit vulnerability allows unauthenticated attacker with network access via Oracle Net to compromise Advanced Networking Option. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Advanced Networking Option, attacks may significantly impact addi CVSSv3.1 8.3 (HIGH) · EPSS 83th percentile
basic/unit-name.c in systemd prior to 246.15, 247.8, 248.5, and 249.1 has a Memory Allocation with an Excessive Size Value (involving strdupa and alloca for a pathname controlled by a local attacker) that results in an operating system crash. CVSSv3.1 5.5 (MEDIUM) · EPSS 95th percentile
A remote code execution vulnerability exists when the Windows Print Spooler service improperly performs privileged file operations. An attacker who successfully exploited this vulnerability could run arbitrary code with SYSTEM privileges. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. UPDATE August 10, 2021: Microsoft has completed the investigation and has released security updates to address this vulnerab CVSSv3.1 8.8 (HIGH) · EPSS 99th percentile
Windows Kernel Remote Code Execution Vulnerability CVSSv3.1 9.9 (CRITICAL) · EPSS 83th percentile
Windows Hyper-V Remote Code Execution Vulnerability CVSSv3.1 8.5 (HIGH) · EPSS 81th percentile
Scripting Engine Memory Corruption Vulnerability CVSSv3.1 6.8 (MEDIUM) · EPSS 98th percentile
Windows HTML Platforms Security Feature Bypass Vulnerability CVSSv3.1 8.0 (HIGH) · EPSS 76th percentile
Windows DNS Server Remote Code Execution Vulnerability CVSSv3.1 8.8 (HIGH) · EPSS 86th percentile
Windows DNS Server Remote Code Execution Vulnerability CVSSv3.1 8.8 (HIGH) · EPSS 80th percentile
Microsoft Exchange Server Elevation of Privilege Vulnerability CVSSv3.1 9.0 (CRITICAL) · EPSS 100th percentile
Microsoft SharePoint Server Remote Code Execution Vulnerability CVSSv3.1 8.1 (HIGH) · EPSS 87th percentile
Windows Kernel Remote Code Execution Vulnerability CVSSv3.1 8.8 (HIGH) · EPSS 80th percentile
Microsoft Excel Remote Code Execution Vulnerability CVSSv3.1 7.8 (HIGH) · EPSS 99th percentile
Windows DNS Server Remote Code Execution Vulnerability CVSSv3.1 8.8 (HIGH)
Windows Certificate Spoofing Vulnerability CVSSv3.1 8.1 (HIGH) · EPSS 82th percentile
Microsoft Dynamics 365 Business Central Remote Code Execution Vulnerability CVSSv3.1 8.0 (HIGH) · EPSS 77th percentile
Microsoft Exchange Server Remote Code Execution Vulnerability CVSSv3.1 9.1 (CRITICAL) · EPSS 100th percentile
Microsoft Exchange Server Elevation of Privilege Vulnerability CVSSv3.1 8.0 (HIGH) · EPSS 87th percentile
Microsoft Office Security Feature Bypass Vulnerability CVSSv3.1 8.2 (HIGH) · EPSS 87th percentile
Windows LSA Security Feature Bypass Vulnerability CVSSv3.1 8.1 (HIGH) · EPSS 78th percentile
Azure AD Security Feature Bypass Vulnerability CVSSv3.1 8.1 (HIGH) · EPSS 81th percentile