Lookup for vulnerabilities affecting packages.
| Vulnerability_id | VCID-uyxv-5n5p-ducn |
| Summary | Acceptance of extraneous untrusted data with trusted data in Windows COM allows an unauthorized attacker to elevate privileges locally. |
| Aliases |
|
| Fixed_packages |
|
| Affected_packages |
|
| References |
|
| Weaknesses |
| 0 |
| cwe_id |
349 |
| name |
Acceptance of Extraneous Untrusted Data With Trusted Data |
| description |
The product, when processing trusted data, accepts any untrusted data that is also included with the trusted data, treating the untrusted data as if it were trusted. |
|
|
| Exploits |
|
| Severity_range_score | 8.4 - 8.4 |
| Exploitability | null |
| Weighted_severity | null |
| Risk_score | null |
| Resource_url | http://public2.vulnerablecode.io/vulnerabilities/VCID-uyxv-5n5p-ducn |