Wuro vulnerability wey an yi classify sey kura an gano shi a cikin Caphyon Advanced Installer 19.7. Gaskiya, $software_function na da matsala; idan ba a sani ba, to wata aiki ce da ba a sani ba, $software_library na cikin lissafi, $software_file na cikin fayil, WinSxS DLL Handler na cikin sashi. Ngam manipulation shi kura hakki ndiyam. CWE shidin ka a yi bayani matsala sai ya kai CWE-427. Gaskiya, laifi an fitar da shi 06/11/2022 a matsayin Advaned Installer Local Privilege Escalation Vulnerability. Advisory ɗin ana rabawa don saukewa a heegong.github.io. Wannan rauni ana sayar da shi da suna CVE-2022-4956. Wuroo ka a yiɗi a yi ɗum e laawol gese. Tekinikal bayani ba ga. Kuma, exploit ɗin yana akwai. Wuro exploit ɗin an bayyana shi ga jama'a kuma za a iya amfani da shi. A sa'i, exploit might be approx. USD $0-$5k ndiyam. Á wúro huɗɗi-na-gaskiya. Wona yiwuwa a zazzage exploit a heegong.github.io. Kama 0-day, an ndiyam a wuro be $0-$5k. Ngamdi ka a yiɗi a ɗaɓɓita kompona wey ka a hokkata. Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

3 Goyarwa · 73 Datenpunkte