Lucene search
K

132 matches found

Positive Technologies
Positive Technologies
added 2020/09/08 12:0 a.m.2 views

PT-2020-3926 · Microsoft · Windows +1

Name of the Vulnerable Software and Affected Versions: Microsoft Component Object Model COM affected versions not specified Description: The issue is related to errors in processing input data in the Microsoft Component Object Model COM component of Windows operating systems. It allows a remote...

10CVSS8.6AI score0.1773EPSS
Exploits0References6
BDU FSTEC
BDU FSTEC
added 2020/07/17 12:0 a.m.4 views

The vulnerability of the Windows COM Server component of the Windows operating system, which allows attackers to escalate their privileges

The vulnerability of the Windows COM Server component of the operating system is related to errors in the processing of COM objects. Exploiting this vulnerability can allow attackers to enhance their privileges through a specially created application...

7.8CVSS7.2AI score0.02025EPSS
Exploits0References4
CNVD
CNVD
added 2020/07/17 12:0 a.m.1 views

Microsoft Windows COM Server Elevation of Privilege Vulnerability

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is an operating system for personal devices.Microsoft Windows Server is a server operating system. An elevation of privilege vulnerability exists in Microsoft Windows COM Server, which aris...

7.8CVSS7.6AI score0.02025EPSS
Exploits0References1
BDU FSTEC
BDU FSTEC
added 2020/06/30 12:0 a.m.2 views

The vulnerability of the Microsoft Component Object Model (COM) in Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the Microsoft Component Object Model COM in Windows operating systems is related to insecure management of privileges. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through a specially created application...

7.8CVSS7.7AI score0.12481EPSS
Exploits0References3
OSV
OSV
added 2020/06/09 8:15 p.m.2 views

CVE-2020-1311

An elevation of privilege vulnerability exists when Component Object Model COM client uses special case IIDs, aka 'Component Object Model Elevation of Privilege Vulnerability'...

7.8CVSS7.1AI score0.12481EPSS
Exploits0References1
Cvelist
Cvelist
added 2020/06/09 7:44 p.m.13 views

CVE-2020-1311

An elevation of privilege vulnerability exists when Component Object Model COM client uses special case IIDs, aka 'Component Object Model Elevation of Privilege Vulnerability'...

8.2AI score0.12481EPSS
Exploits0References1
Kaspersky
Kaspersky
added 2020/06/09 12:0 a.m.63 views

KLA11806 Multiple vulnerabilities in Microsoft Products (ESU)

Multiple vulnerabilities were found in Microsoft Products Extended Support Update. Malicious users can exploit these vulnerabilities to obtain sensitive information, execute arbitrary code, gain privileges, cause denial of service, bypass security restrictions. Below is a complete list of...

9.3CVSS9.8AI score0.59532EPSS
Exploits2References53
CNVD
CNVD
added 2020/06/05 12:0 a.m.1 views

Foxit PhantomPDF COM Object Mishandling Vulnerability

PhantomPDF is a Chinese Foxit Foxit company for enterprise-level users of PDF document processing software. A COM object mishandling vulnerability exists in Foxit PhantomPDF versions prior to 8.3.6 when using Microsoft Word. The vulnerability stems from the program not handling COM objects...

6.5CVSS6.6AI score0.00038EPSS
Exploits0References1
OSV
OSV
added 2020/05/21 11:15 p.m.1 views

CVE-2020-1066

An elevation of privilege vulnerability exists in .NET Framework which could allow an attacker to elevate their privilege level.To exploit the vulnerability, an attacker would first have to access the local machine, and then run a malicious program.The update addresses the vulnerability by...

7.8CVSS7.1AI score0.33109EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2020/05/12 12:0 a.m.2 views

PT-2020-3051

Name of the Vulnerable Software and Affected Versions Microsoft .NET Framework affected versions not specified Description The issue is related to insufficient access restrictions in the Microsoft .NET Framework, allowing a remote attacker to elevate their privileges. To exploit this, an attacker...

7.8CVSS6.3AI score0.33109EPSS
Exploits0References8
VulnCheck KEV
VulnCheck KEV
added 2020/03/27 12:0 a.m.2 views

VulnCheck KEV: CVE-2019-1405

A privilege escalation vulnerability exists when the Windows UPnP service improperly allows COM object creation...

7.8CVSS7.2AI score0.53912EPSS
Exploits24References1
BDU FSTEC
BDU FSTEC
added 2020/02/27 12:0 a.m.1 views

The vulnerability of the Windows COM Server component of the Windows operating system, which allows a perpetrator to increase their privileges

The vulnerability of the Windows COM Server component of the operating system is related to errors in the processing of COM objects. Exploiting this vulnerability can allow attackers to enhance their privileges through a specially created application...

7CVSS7.1AI score0.00397EPSS
Exploits0References4
OSV
OSV
added 2020/02/11 10:15 p.m.1 views

CVE-2020-0685

An elevation of privilege vulnerability exists when Windows improperly handles COM object creation, aka 'Windows COM Server Elevation of Privilege Vulnerability'...

7.8CVSS7.1AI score0.00397EPSS
Exploits0References1
BDU FSTEC
BDU FSTEC
added 2019/12/17 12:0 a.m.3 views

The vulnerability of the Windows COM Server component of the Windows operating system, which allows a perpetrator to increase their privileges

The vulnerability of the Windows COM Server component of the operating system is related to errors in the processing of COM objects. Exploiting this vulnerability can allow attackers to enhance their privileges through a specially created application...

7.8CVSS7.2AI score0.00397EPSS
Exploits0References3
CNVD
CNVD
added 2019/12/16 12:0 a.m.3 views

Microsoft Windows and Microsoft Windows Server Elevation of Privilege Vulnerability (CNVD-2020-02180)

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is an operating system for personal devices.Microsoft Windows Server is a server operating system. An elevation of privilege vulnerability exists in Microsoft Windows 7 SP1, Windows Server...

7.8CVSS7.5AI score0.00397EPSS
Exploits0References1
OSV
OSV
added 2019/12/10 10:15 p.m.1 views

CVE-2019-1478

An elevation of privilege vulnerability exists when Windows improperly handles COM object creation, aka 'Windows COM Server Elevation of Privilege Vulnerability'...

7.8CVSS7.1AI score0.00397EPSS
Exploits0References1
OSV
OSV
added 2019/11/12 7:15 p.m.1 views

CVE-2019-1405

An elevation of privilege vulnerability exists when the Windows Universal Plug and Play UPnP service improperly allows COM object creation, aka 'Windows UPnP Service Elevation of Privilege Vulnerability'...

7.8CVSS7.2AI score0.53912EPSS
Exploits24References3
BDU FSTEC
BDU FSTEC
added 2019/08/30 12:0 a.m.3 views

The vulnerability of the Core Shell COM Server component in Windows operating systems allows attackers to exploit their privileges.

The vulnerability of the Core Shell COM Server component in Windows operating systems is related to errors in handling COM calls. Exploiting this vulnerability can allow attackers to enhance their privileges through a specially created application...

6.7CVSS5.5AI score0.07274EPSS
Exploits1References2
CNVD
CNVD
added 2019/08/23 12:0 a.m.3 views

Microsoft Windows and Windows Server Privilege Permission and Access Control Issues Vulnerability

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is an operating system for personal devices.Microsoft Windows Server is a server operating system. A privilege-granting and access-control issue vulnerability exists in Microsoft Windows an...

7.2CVSS6.7AI score0.07274EPSS
Exploits1References1
OSV
OSV
added 2019/08/14 9:15 p.m.2 views

CVE-2019-1184

An elevation of privilege vulnerability exists when Windows Core Shell COM Server Registrar improperly handles COM calls. An attacker who successfully exploited this vulnerability could potentially set certain items to run at a higher level and thereby elevate permissions. To exploit this...

6.7CVSS5.8AI score0.07274EPSS
Exploits1References1
Rows per page
Query Builder