141 matches found
CVE-2020-0836
CVE-2020-0836 describes a denial-of-service vulnerability in Windows DNS where the DNS service can become nonresponsive if it fails to properly handle queries. An authenticated attacker could exploit this by sending crafted DNS queries, leading to resource exhaustion and service unavailability. T...
KB4577070: Windows Server 2008 September 2020 Security Update
The remote Windows host is missing security update 4577070 or cumulative update 4577064. It is, therefore, affected by multiple vulnerabilities : - An elevation of privilege vulnerability exists when the Windows RSoP Service Application improperly handles memory. CVE-2020-0648 - An elevation of...
KB4577053: Windows 7 and Windows Server 2008 R2 September 2020 Security Update
The remote Windows host is missing security update 4577053 or cumulative update 4577051. It is, therefore, affected by multiple vulnerabilities : - An elevation of privilege vulnerability exists when the Windows RSoP Service Application improperly handles memory. CVE-2020-0648 - An elevation of...
CVE-2019-0836
creationtimestamp| type| source ---|---|--- 2019-04-16 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/46718 2024-03-15 08:58:02+00:00| seen| https://t.me/ptsoft/243 2024-05-03 09:04:40+00:00| published-proof-of-concept| https://t.me/ptsoft/270 2024-10-15 18:31:53+00:00|...
CVE-2019-0836
An elevation of privilege vulnerability exists when Windows improperly handles calls to the LUAFV driver luafv.sys, aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-0730, CVE-2019-0731, CVE-2019-0796, CVE-2019-0805, CVE-2019-0841...
Privilege escalation
An elevation of privilege vulnerability exists when Windows AppX Deployment Service AppXSVC improperly handles hard links, aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-0730, CVE-2019-0731, CVE-2019-0796, CVE-2019-0805, CVE-2019-0836...
Privilege escalation
An elevation of privilege vulnerability exists when Windows improperly handles calls to the LUAFV driver luafv.sys, aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-0731, CVE-2019-0796, CVE-2019-0805, CVE-2019-0836, CVE-2019-0841...
CVE-2019-0836
CVE-2019-0836 is a Windows local privilege-escalation vulnerability tied to the LUAFV driver (luafv.sys). CIRCL sightings confirm in-the-wild exploitation, with exploits documented (e.g., exploit-db entries 46718). The CVE entry identifies an elevation-of-privilege flaw when Windows improperly ha...
Microsoft Windows LUAFV Driver CVE-2019-0836 Local Privilege Escalation Vulnerability
Description Microsoft Windows is prone to a local privilege-escalation vulnerability. An attacker can exploit this issue to execute arbitrary code with elevated privileges on the system. Failed exploit attempts may result in a denial of service condition. Technologies Affected Microsoft Windows 1...
Microsoft Windows LUAFV Elevation of Privilege (CVE-2019-0836)
An elevation of privilege vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Security Bulletin: Multiple vulnerabilities in IBM QRadar SIEM (CVE-2014-0838, CVE-2014-0835, CVE-2014-0836, CVE-2014-0837)
Summary Multiple vulnerabilities exist in the AutoUpdate settings page and the AutoUpdate process within the IBM QRadar SIEM that when used together could result in remote code execution. Vulnerability Details VULNERABILITY DETAILS: CVE ID: CVE-2014-0838 DESCRIPTION: A flaw in the IBM QRadar...
CVE-2009-0836
creationtimestamp| type| source ---|---|--- 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/pdf/foxit/authbypass.rb 2025-02-06 03:13:39+00:00| seen| MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd 2025-02-23 04:08:36+00:00| seen|...
Memory corruption
Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, due to how the scripting engine handles objects in memory, aka...
Memory corruption
Microsoft Edge in Microsoft Windows 10 1607, 1703, and Windows Server 2016 allows remote code execution, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2018-0834, CVE-2018-0835, CVE-2018-0836,...
CVE-2018-0836
The CVE-2018-0836 entry concerns Microsoft Edge and ChakraCore in Windows 10 (1703/1709) where remote code execution is possible due to how the scripting engine handles objects in memory (Scripting Engine Memory Corruption). Connected advisories (GHSA) corroborate a ChakraCore RCE vulnerability a...
KB4074592: Windows 10 Version 1703 February 2018 Security Update (Meltdown)(Spectre)
The remote Windows host is missing security update 4074592. It is, therefore, affected by multiple vulnerabilities : - An vulnerability exists within microprocessors utilizing speculative execution and indirect branch prediction, which may allow an attacker with local user access to disclose...
KLA11199 Multiple vulnerabilities in Microsoft Browsers
Multiple vulnerabilities were found in Microsoft Browsers. Malicious users can exploit these vulnerabilities to obtain sensitive information, bypass security restrictions, execute arbitrary code. Below is a complete list of vulnerabilities: 1. A memory corruption vulnerability in Microsoft Edge c...
CVE-2017-0836
A remote code execution vulnerability in the Android media framework libhevc. Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-64893226...
