Windows Custom Protocol Engine Privilege Escalation

The vulnerability of the Windows Custom Protocol Engine component of the Windows operating system arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to enhance their privileges through a specially created application...

Windows Backup Engine Privilege Escalation

The vulnerability of the Windows Backup Engine system arises from an operation that goes beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to enhance their privileges through a specially created application...

Windows Backup Engine Privilege Escalation

The vulnerability of the Windows Backup Engine system arises from an operation that goes beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to enhance their privileges through a specially created application...

CSC Service Privilege Escalation

The vulnerability of the CSC Service for Windows operating systems is related to incorrect handling of objects in memory. Exploiting this vulnerability can allow an attacker to enhance their privileges through a specially created application...

Windows Speech Runtime Privilege Escalation

The vulnerability of the Windows Speech Runtime component in operating systems is related to errors in memory object handling. Exploiting this vulnerability can allow attackers to enhance their privileges through a specially created application...

Windows Backup Engine Privilege Escalation

The vulnerability of the Windows Backup Engine system arises from an operation that goes beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to enhance their privileges through a specially created application...

File Server Resource Manager Privilege Escalation

The vulnerability of the File Server Resource Manager in Windows operating systems is related to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to increase their privileges through a specially created application...

UPnP Device Host Privilege Escalation

The vulnerability of the UPnP Device Host service for Windows operating systems is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow an attacker to enhance their privileges through a specially created application...

Windows Backup Engine Privilege Escalation

The vulnerability of the Windows Backup Engine system arises from an operation that goes beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to enhance their privileges through a specially created application...

Windows Backup Engine Privilege Escalation

The vulnerability of the Windows Backup Engine system arises from an operation that goes beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to enhance their privileges through a specially created application...

Work Folder Service Privilege Escalation

The vulnerability of the Work Folder Service service in Windows operating systems is related to improper handling of file operations. Exploiting this vulnerability can allow an attacker to enhance their privileges through a specially created application...

Windows Backup Engine Privilege Escalation

The vulnerability of the Windows Backup Engine system arises from an operation that goes beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to enhance their privileges through a specially created application...

Windows Storage Service Privilege Escalation

The vulnerability of the Windows operating system’s Storage Service component is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker to enhance their privileges through a specially created application...

Windows Telephony Server Privilege Escalation

The vulnerability of the Windows Telephony Server server operating system is caused by an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to increase their privileges through a specially created application...

PT-2020-3986 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: A remote code execution issue exists due to improper handling of objects in memory by Windows. To exploit this, an attacker must convince a user to run a specially crafted application...

PT-2020-4152 · Microsoft · Windows Storage Services +1

Name of the Vulnerable Software and Affected Versions: Windows Storage Services affected versions not specified Description: The issue is related to the improper handling of file operations by the Windows Storage Services, which could allow an attacker to gain elevated privileges. To exploit this...

PT-2020-4087 · Microsoft · Windows Routing Utilities +1

Name of the Vulnerable Software and Affected Versions: Windows Routing Utilities affected versions not specified Description: The issue is related to errors in handling input data, which can be exploited to cause a denial of service. This can happen when an attacker logs on to an affected system...

PT-2020-4086 · Microsoft · Store Runtime +1

Name of the Vulnerable Software and Affected Versions: Microsoft Store Runtime affected versions not specified Description: The issue is related to an elevation of privilege vulnerability that occurs when the Microsoft Store Runtime improperly handles memory. To exploit this, an attacker would...

PT-2020-4042 · Microsoft · Windows +1

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to errors in handling objects in memory by the DirectX component of the Windows operating system. This could allow an attacker to elevate their privileges using a...

PT-2020-4084 · Microsoft · Diagnostics Hub Standard Collector +1

Name of the Vulnerable Software and Affected Versions: Diagnostics Hub Standard Collector affected versions not specified Description: The issue is related to the improper handling of data operations by the Diagnostics Hub Standard Collector, which could allow an attacker to run processes in an...