CVE Vulnerability Advisory Database

[Affected Scope] VMware Workspace ONE Access, Identity Manager (vIDM), and vRealize Automation (vRA).

[Impact] A local attacker with low-privilege access can exploit improper permissions in support scripts to escalate privileges to root, leading to full system compromise.

[Mitigation] Apply official security patches immediately in accordance with VMware Advisory VMSA-2022-0011.

[Affected Scope] Windows endpoints running McAfee Total Protection (MTP) prior to version 16.0.30

[Impact] Local attackers with low privileges can bypass MTP self-defense mechanisms, escalate privileges to SYSTEM, and execute arbitrary code

[Mitigation] Immediately upgrade McAfee Total Protection to version 16.0.30 or higher and restrict unauthorized local access to endpoints

[Affected Scope] Docker Desktop Community Edition versions prior to 2.1.0.1 on Windows platforms

[Impact] Local low-privilege users can execute arbitrary code with administrative or SYSTEM privileges by hijacking credential helper binaries

[Mitigation] Immediately upgrade Docker Desktop to version 2.1.0.1 or later, or restrict write permissions on the vulnerable directory

[Affected Scope] Enterprise network environments running FortiOS 6.0.2, 5.6.7 and before, or FortiADC 6.1.0, 6.0.0 to 6.0.1, 5.4.0 to 5.4.4

[Impact] An authenticated attacker can redirect LDAP connectivity test requests to a rogue LDAP server, exposing configured LDAP administrator credentials in plaintext or reversible format

[Mitigation] Upgrade FortiOS and FortiADC to the latest patched versions immediately and restrict administrative access using trusted host configurations