CVE-2024-36056

MEDIUM Year: 2024
CVSS v3 Score
5.4
Medium
Weakness Type
CWE-269
View all →

Vulnerability Description

Hw64.sys in Marvin Test HW.exe before 5.0.5.0 allows unprivileged user-mode processes to arbitrarily map physical memory via IOCTL 0x9c406490 (for IoAllocateMdl, MmBuildMdlForNonPagedPool, and MmMapLockedPages), leading to NT AUTHORITY\SYSTEM privilege escalation.

Related Vulnerabilities

CVE-2017-10046

MEDIUM
CVSS:5.4(Medium)

Vulnerability in the Primavera P6 Enterprise Project Portfolio Management component of Oracle Primavera Products Suite (subcomponent: Web Access). Supported versions that are affected are 8.3, 8.4, 15...

CWE-2692017

CVE-2017-10094

MEDIUM
CVSS:5.4(Medium)

Vulnerability in the Oracle Agile PLM component of Oracle Supply Chain Products Suite (subcomponent: Security). Supported versions that are affected are 9.3.5 and 9.3.6. Easily exploitable vulnerabili...

CWE-2692017

CVE-2017-10098

MEDIUM
CVSS:5.4(Medium)

Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Infrastructure). Supported versions that are affected are 11.3.0, 11.4.0, 12.0...

CWE-2692017

CVE-2017-10142

MEDIUM
CVSS:5.4(Medium)

Vulnerability in the Oracle Hospitality Reporting and Analytics component of Oracle Hospitality Applications (subcomponent: Mobile Apps). Supported versions that are affected are 8.5.1 and 9.0.0. Easi...

CWE-2692017

CVE-2017-1493

MEDIUM
CVSS:5.4(Medium)

IBM UrbanCode Deploy (UCD) 6.1 and 6.2 could allow an authenticated user to edit objects that they should not have access to due to improper access controls. IBM X-Force ID: 128691.

CWE-2692017

CVE-2019-4546

MEDIUM
CVSS:5.4(Medium)

After installing the IBM Maximo Health- Safety and Environment Manager 7.6.1, a user is granted additional privileges that they are not normally allowed to access. IBM X-Force ID: 165948.

CWE-2692019