https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 09 Oct 2026 03:33:21 +0000 https://cve.radiocsirt.org/vuln/certfr-2015-avi-061 certfr-2015-avi-061 https://cve.radiocsirt.org/vuln/certfr-2015-avi-061 https://cve.radiocsirt.org/vuln/cnvd-2015-01099 cnvd-2015-01099 https://cve.radiocsirt.org/vuln/cnvd-2015-01099 https://cve.radiocsirt.org/vuln/euvd-2026-89013 EUVD-2026-89013 https://cve.radiocsirt.org/vuln/euvd-2026-89013 https://cve.radiocsirt.org/vuln/fkie_cve-2015-0010 <p>The CryptProtectMemory function in cng.sys (aka the Cryptography Next Generation driver) in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1, when the CRYPTPROTECTMEMORY_SAME_LOGON option is used, does not check an impersonation token&#39;s level, which allows local users to bypass intended decryption restrictions by leveraging a service that (1) has a named-pipe planting vulnerability or (2) uses world-readable shared memory for encrypted data, aka &#34;CNG Security Feature Bypass Vulnerability&#34; or MSRC ID 20707.</p> <p>The CryptProtectMemory function in cng.sys (aka the Cryptography Next Generation driver) in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1, when the CRYPTPROTECTMEMORY_SAME_LOGON option is used, does not check an impersonation token&#39;s level, which allows local users to bypass intended decryption restrictions by leveraging a service that (1) has a named-pipe planting vulnerability or (2) uses world-readable shared memory for encrypted data, aka &#34;CNG Security Feature Bypass Vulnerability&#34; or MSRC ID 20707.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2015-0010 https://cve.radiocsirt.org/vuln/ghsa-m8v6-5m42-3wc3 <p>The CryptProtectMemory function in cng.sys (aka the Cryptography Next Generation driver) in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1, when the CRYPTPROTECTMEMORY_SAME_LOGON option is used, does not check an impersonation token&#39;s level, which allows local users to bypass intended decryption restrictions by leveraging a service that (1) has a named-pipe planting vulnerability or (2) uses world-readable shared memory for encrypted data, aka &#34;CNG Security Feature Bypass Vulnerability&#34; or MSRC ID 20707.</p> <p>The CryptProtectMemory function in cng.sys (aka the Cryptography Next Generation driver) in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1, when the CRYPTPROTECTMEMORY_SAME_LOGON option is used, does not check an impersonation token&#39;s level, which allows local users to bypass intended decryption restrictions by leveraging a service that (1) has a named-pipe planting vulnerability or (2) uses world-readable shared memory for encrypted data, aka &#34;CNG Security Feature Bypass Vulnerability&#34; or MSRC ID 20707.</p> https://cve.radiocsirt.org/vuln/ghsa-m8v6-5m42-3wc3 https://cve.radiocsirt.org/vuln/gsd-2015-0010 gsd-2015-0010 https://cve.radiocsirt.org/vuln/gsd-2015-0010