165 matches found
Chromium: CVE-2022-0802 Inappropriate implementation in Full screen mode
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
KLA12473 Multiple vulnerabilities in Google Chrome
Multiple vulnerabilities were found in Google Chrome. Malicious users can exploit these vulnerabilities to cause denial of service, execute arbitrary code, bypass security restrictions, gain privileges, spoof user interface. Below is a complete list of vulnerabilities: 1. Out of bounds memory...
Mozilla Firefox Security Advisory (MFSA2015-42) - Linux
This host is missing a security update for Mozilla Firefox. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; y...
Microsoft Office Memory Corruption Vulnerability
Microsoft Office contains a memory corruption vulnerability due to the way objects are handled in memory. Successful exploitation allows for remote code execution in the context of the current user. This vulnerability is known to be chained with CVE-2018-0802...
IT threat evolution Q2 2021
Targeted attacks The leap of a Cycldek-related threat actor It is quite common for Chinese-speaking threat actors to share tools and methodologies: one such example is the infamous "DLL side-loading triad": a legitimate executable, a malicious DLL to be side-loaded by it and an encoded payload,...
CVE-2013-0802
This CVE-2013-0802 entry is rejected/not used and does not represent an active vulnerability.
Privilege escalation
An elevation of privilege vulnerability exists in the way that the Windows Network Connections Service handles objects in memory, aka 'Windows Network Connections Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0778, CVE-2020-0802, CVE-2020-0804, CVE-2020-0845...
CVE-2020-0802
Technical details for CVE-2020-0802 are not publicly provided in the supplied documents. Monitor for updates from official advisories; no affected products, root cause, or fixes are described here.
KB4540694: Windows Server 2012 March 2020 Security Update
The remote Windows host is missing security update 4540694 or cumulative update 4541510. It is, therefore, affected by multiple vulnerabilities : - An elevation of privilege vulnerability exists when the Windows Device Setup Manager improperly handles file operations. An attacker who successfully...
Microsoft Windows Graphics Device Interface Information Disclosure (CVE-2019-0802)
An information disclosure vulnerability exists in Microsoft Graphics Device Interface of Microsoft Windows. The vulnerability is due to improper handling of objects in memory. Successful exploitation could result in disclosure of information which could be used to further compromise the target...
Mozilla Firefox ESR < 31.6 Multiple Vulnerabilities
Binary data 701254.prm...
Information disclosure
An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows GDI Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-0802...
CVE-2019-0802
An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows GDI Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-0849...
CVE-2019-0802
CVE-2019-0802 refers to a Windows Graphics Device Interface information disclosure vulnerability. The connected sources describe an issue in GDI where memory objects are not handled securely, enabling an information disclosure under exploitation. Impact is information disclosure of memory content...
Microsoft Windows GDI Component CVE-2019-0802 Information Disclosure Vulnerability
Description Microsoft Windows is prone to an information-disclosure vulnerability. Attackers can exploit this issue to obtain sensitive information that may aid in launching further attacks. Technologies Affected Microsoft Windows 10 Version 1607 for 32-bit Systems Microsoft Windows 10 Version 16...
Description of the security update for the information disclosure vulnerability in Windows Embedded POSReady 2009: April 9, 2019
Description of the security update for the information disclosure vulnerability in Windows Embedded POSReady 2009: April 9, 2019 Summary An information disclosure vulnerability exists when the Windows GDI component incorrectly discloses the contents of its memory. To learn more about the...
A use cve-2017-11882 and cve-2018-0802 combination of vulnerability a malicious document analysis-vulnerability warning-the black bar safety net
! Recently intercepted an extension doc word document to attack the samples, which format is actually RTF format. By analyzing the document composition the use of a cve-2017-11882 and cve-2018-0802 vulnerability, and use the embedded excel object is used to trigger the vulnerability. The release ...