CVE-2024-33228

HIGH Year: 2024
CVSS v3 Score
8.4
High
Weakness Type
CWE-94
View all →

Vulnerability Description

An issue in the component segwindrvx64.sys of Insyde Software Corp SEG Windows Driver v100.00.07.02 allows attackers to escalate privileges and execute arbitrary code via sending crafted IOCTL requests.

Related Vulnerabilities

CVE-2016-7102

HIGH
CVSS:8.4(High)

ownCloud Desktop before 2.2.3 allows local users to execute arbitrary code and possibly gain privileges via a Trojan library in a "special path" in the C: drive.

CWE-942016

CVE-2021-3661

HIGH
CVSS:8.4(High)

A potential security vulnerability has been identified in certain HP Workstation BIOS (UEFI firmware) which may allow arbitrary code execution. HP is releasing firmware mitigations for the potential v...

CWE-942021

CVE-2024-13952

HIGH
CVSS:8.4(High)

Predictable filename vulnerabilities in ASPECT may expose sensitive information to a potential attacker if administrator credentials become compromisedThis issue affects ASPECT-Enterprise: through 3.*...

CWE-942024

CVE-2024-21760

HIGH
CVSS:8.4(High)

An improper control of generation of code ('Code Injection') vulnerability [CWE-94] in FortiSOAR Connector FortiSOAR 7.4 all versions, 7.3 all versions, 7.2 all versions, 7.0 all versions, 6.4 all ver...

CWE-942024

CVE-2024-23727

HIGH
CVSS:8.4(High)

The YI Smart Kami Vision com.kamivision.yismart application through 1.0.0_20231219 for Android allows a remote attacker to execute arbitrary JavaScript code via an implicit intent to the com.ants360.y...

CWE-942024

CVE-2024-28886

HIGH
CVSS:8.4(High)

OS command injection vulnerability exists in UTAU versions prior to v0.4.19. If a user of the product opens a crafted UTAU project file (.ust file), an arbitrary OS command may be executed.

CWE-942024