UBUNTU-CVE-2022-3310

Insufficient policy enforcement in custom tabs in Google Chrome on Android prior to 106.0.5249.62 allowed an attacker who convinced the user to install an application to bypass same origin policy via a crafted application. Chromium security severity: Medium...

The vulnerability of AppX Deployment Extensions for Windows operating systems stems from deficiencies in access control, allowing attackers to escalate their privileges.

The vulnerability of AppX Deployment Extensions in Windows operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges through a specially created application...

Information Disclosure

chromium-browser:bionic is vulnerable to information disclosure. Inappropriate implementation in WebView in Google Chrome on Android allowed a remote attacker to leak cross-origin data via a crafted app...

CVE-2021-37990

Inappropriate implementation in WebView in Google Chrome on Android prior to 95.0.4638.54 allowed a remote attacker to leak cross-origin data via a crafted app...

UBUNTU-CVE-2021-37990

Inappropriate implementation in WebView in Google Chrome on Android prior to 95.0.4638.54 allowed a remote attacker to leak cross-origin data via a crafted app...

Google Chrome 安全特征问题漏洞

Chrome is a web browsing tool developed by Google. versions prior to Google Chrome 95.0.4638.54 are vulnerable to a WebView misimplementation. An attacker could exploit this vulnerability to leak cross-domain data through a crafted application...

The vulnerability of the iOS operating system’s kernel, which allows a hacker to obtain confidential information

The vulnerability of the iOS operating system’s kernel is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker to obtain confidential information through a specially created application...

CVE-2021-22382

Huawei LTE USB Dongle products have an improper permission assignment vulnerability. An attacker can locally access and log in to a PC to induce a user to install a specially crafted application. After successfully exploiting this vulnerability, the attacker can perform unauthenticated operations...

The vulnerability of the Windows Graphics Device Interface Plus (GDI+) component in Windows operating systems allows a hacker to gain unauthorized access to protected information.

The vulnerability of the Windows Graphics Device Interface Plus GDI+ component in operating systems involves errors in memory object handling. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information through a specially created application...

CVE-2020-16950

An information disclosure vulnerability exists when Microsoft SharePoint Server fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could obtain information to further compromise the user’s system. To exploit the vulnerability, an attacker would...

CVE-2020-16910

A security feature bypass vulnerability exists when Microsoft Windows fails to handle file creation permissions, which could allow an attacker to create files in a protected Unified Extensible Firmware Interface UEFI location. To exploit this vulnerability, an attacker could run a specially craft...

PT-2020-4245 · Microsoft · Windows Event System +1

Name of the Vulnerable Software and Affected Versions: Windows Event System affected versions not specified Description: The issue is related to the improper handling of objects in memory by the Windows Event System, which can lead to an elevation of privilege. To exploit this, an attacker must...

PT-2020-4379 · Microsoft · Sharepoint Server

Name of the Vulnerable Software and Affected Versions: Microsoft SharePoint Server affected versions not specified Description: An information disclosure issue exists due to Microsoft SharePoint Server's improper handling of objects in memory. This could allow an attacker to obtain information th...

PT-2020-4247

Name of the Vulnerable Software and Affected Versions: Windows kernel affected versions not specified Description: The issue is related to how the Windows kernel image handles objects in memory. An attacker could exploit this to execute code with elevated permissions by running a specially crafte...

PT-2020-4327 · Microsoft · Windows Application Compatibility Client Library +1

Name of the Vulnerable Software and Affected Versions: Windows Application Compatibility Client Library affected versions not specified Description: The issue is related to the improper handling of registry operations by the Windows Application Compatibility Client Library, which could allow an...

The vulnerability of the Windows Runtime component of the Windows operating system allows a perpetrator to execute arbitrary code with elevated privileges.

The vulnerability of the Windows Runtime component of the Windows operating system is related to access control errors. Exploiting this vulnerability allows an attacker to execute arbitrary code with elevated privileges through a specially crafted application...

CVE-2020-1590

An elevation of privilege vulnerability exists when the Connected User Experiences and Telemetry Service improperly handles file operations. An attacker who successfully exploited this vulnerability could gain elevated privileges on the victim system. To exploit the vulnerability, an attacker wou...

CVE-2020-1033

An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory. An attacker who successfully exploited this vulnerability could obtain information to further compromise the user’s system. An authenticated attacker could exploit this vulnerability by...

CVE-2020-0838

An elevation of privilege vulnerability exists when NTFS improperly checks access. An attacker who successfully exploited this vulnerability could run processes in an elevated context. To exploit the vulnerability, an attacker would first have to log on to the system, and then run a specially...

The vulnerability of the Windows Graphics Device Interface component of the Windows operating system, which allows a hacker to exploit their privileges

The vulnerability of the Windows Graphics Device Interface component in the Windows operating system arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to enhance their privileges through a specially created application...