CVE-2020-1541

CVE-2020-1541 is a Windows vulnerability in the Windows Backup Engine that enables elevation of privilege by abusing memory handling. Public documentation in the connected CNVD and NVD entries confirms the root cause as improper memory handling within Windows Backup Engine, requiring prior code e...

CVE-2020-1541 Windows Backup Engine Elevation of Privilege Vulnerability

...

CVE-2020-1542

CVE-2020-1542 is a Windows Backup Engine elevation-of-privilege vulnerability caused by improper memory handling. An attacker must first gain execution on the victim and then run a crafted application to elevate privileges. Windows updates fix the issue by correcting how the Backup Engine handles...

CVE-2020-1539 Windows Backup Engine Elevation of Privilege Vulnerability

...

CVE-2020-1540

CVE-2020-1540 is an elevation-of-privilege issue in Windows Backup Engine caused by improper memory handling. The CNVD entry explicitly notes a memory-handling root cause and that exploitation would require prior execution on the target. Both the NVD entry and Microsoft advisories indicate that a...

CVE-2020-1540 Windows Backup Engine Elevation of Privilege Vulnerability

...

CVE-2020-1539

CVE-2020-1539 is an Elevation of Privilege vulnerability in Windows Backup Engine caused by incorrect memory handling. An attacker who can execute code locally could exploit this by running a crafted program to elevate privileges. Microsoft’s security update addresses the issue by correcting how ...

CVE-2020-1536 Windows Backup Engine Elevation of Privilege Vulnerability

...

CVE-2020-1536

CVE-2020-1536 is a Windows elevation of privilege vulnerability in the Windows Backup Engine caused by improper handling of memory. An attacker must first gain execution on the target, then run a specially crafted application to elevate privileges. The vulnerability is addressed by a security upd...

CVE-2020-1534

CVE-2020-1534 is an Elevation of Privilege in Windows Backup Engine/Windows Backup Service. The connected AVLEONOV post confirms the affected component as Windows Backup Engine and describes the root cause as improper handling of file operations by the Backup Service, enabling privilege escalatio...

CVE-2020-1535 Windows Backup Engine Elevation of Privilege Vulnerability

...

CVE-2020-1534 Windows Backup Service Elevation of Privilege Vulnerability

...

CVE-2020-13941

Reported in SOLR-14515 private and fixed in SOLR-14561 public, released in Solr version 8.6.0. The Replication handler https://lucene.apache.org/solr/guide/86/index-replication.htmlhttp-api-commands-for-the-replicationhandler allows commands backup, restore and deleteBackup. Each of these take a...

CVE-2020-13941

Reported in SOLR-14515 private and fixed in SOLR-14561 public, released in Solr version 8.6.0. The Replication handler https://lucene.apache.org/solr/guide/86/index-replication.htmlhttp-api-commands-for-the-replicationhandler allows commands backup, restore and deleteBackup. Each of these take a...

CVE-2020-13941

Reported in SOLR-14515 private and fixed in SOLR-14561 public, released in Solr version 8.6.0. The Replication handler https://lucene.apache.org/solr/guide/86/index-replication.htmlhttp-api-commands-for-the-replicationhandler allows commands backup, restore and deleteBackup. Each of these take a...

CVE-2020-13941

Reported in SOLR-14515 private and fixed in SOLR-14561 public, released in Solr version 8.6.0. The Replication handler https://lucene.apache.org/solr/guide/86/index-replication.htmlhttp-api-commands-for-the-replicationhandler allows commands backup, restore and deleteBackup. Each of these take a...

CVE-2020-13941

Reported in SOLR-14515 private and fixed in SOLR-14561 public, released in Solr version 8.6.0. The Replication handler https://lucene.apache.org/solr/guide/86/index-replication.htmlhttp-api-commands-for-the-replicationhandler allows commands backup, restore and deleteBackup. Each of these take a...

Acronis: TrueImage for Acronis True Image 2020 - Untrusted DLL Search-Ordering lead to Privilege Escalation as Administrative account

Vulnerability description not provided...

Acronis: Self XSS on Acronis Cyber Cloud

Self-XSS was possible in Cyber Protect Console via backup plan name...

Microsoft Windows Backup Engine elevation of privilege vulnerability (CNVD-2020-52067)

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation, U.S.A. Microsoft Windows is an operating system for personal devices.Microsoft Windows Server is a server operating system. Windows Backup Engine is one of the Windows backup engines. An elevation of...