The vulnerability of the Update Orchestrator Service for Windows operating systems allows a perpetrator to escalate their privileges and execute arbitrary code.

The vulnerability of the Update Orchestrator Service service for Windows operating systems is related to improper handling of file operations. Exploiting this vulnerability can allow an attacker to enhance their privileges and execute arbitrary code using a specially created application...

The vulnerability of the Windows operating system’s kernel allows attackers to enhance their privileges.

The vulnerability of the kernel of Microsoft Windows relates to buffer overflow vulnerabilities in memory handling. Exploiting this vulnerability can allow an attacker to enhance their privileges through a specially created application...

The vulnerability of the diagnostic tool for Mobile Device Management applications, which allows attackers to escalate their privileges.

The vulnerability of the diagnostic tool for Mobile Device Management MDM applications that diagnose Windows operating systems involves insecure management of privileges. Exploiting this vulnerability can allow attackers to enhance their privileges through a specially created application...

The vulnerability of the Windows Runtime component of the Windows operating system, related to errors in object handling in memory, allows attackers to exploit their privileges.

The vulnerability of the Windows Runtime component of the Windows operating system is related to errors in object handling in memory. Exploiting this vulnerability can allow a remote attacker to increase their privileges through a specially created application...

Windows AppX Deployment Extensions Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists when the Windows AppX Deployment Extensions improperly performs privilege management, resulting in access to system files. To exploit this vulnerability, an authenticated attacker would need to run a specially crafted application to elevate privilege...

Windows Server Resource Management Service Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists in the way that the srmsvc.dll handles objects in memory. An attacker who successfully exploited the vulnerability could execute code with elevated permissions. To exploit the vulnerability, a locally authenticated attacker could run a specially...

Windows Work Folder Service Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists when the Windows Work Folder Service improperly handles file operations. An attacker who successfully exploited this vulnerability could run processes in an elevated context. An attacker could exploit this vulnerability by running a specially crafted...

PT-2020-3841 · Microsoft · Windows Backup Service +1

Name of the Vulnerable Software and Affected Versions: Windows Backup Service versions affected versions not specified Description: The issue is related to errors in handling memory objects, which can be exploited by an attacker to elevate their privileges using a specially crafted application. T...

PT-2020-3702 · Microsoft · Windows Runtime +1

Name of the Vulnerable Software and Affected Versions: Windows Runtime affected versions not specified Description: The issue is related to errors in handling objects in memory within the Windows Runtime component of the Windows operating system. Exploitation of this issue could allow an attacker...

PT-2020-3835 · Microsoft · Windows Walletservice +1

Name of the Vulnerable Software and Affected Versions: Windows WalletService affected versions not specified Description: The issue is related to the way the Windows WalletService handles objects in memory, allowing for an elevation of privilege. This could enable an attacker to execute code with...

PT-2020-3801 · Microsoft · Windows Speech Runtime +1

Name of the Vulnerable Software and Affected Versions: Windows Speech Runtime affected versions not specified Description: The issue is related to an elevation of privilege vulnerability that occurs when the Windows Speech Runtime improperly handles memory. To exploit this, an attacker must first...

PT-2020-3680 · Microsoft · Windows Work Folder Service +1

Name of the Vulnerable Software and Affected Versions: Windows Work Folders Service affected versions not specified Description: The issue is related to an elevation of privilege vulnerability. It occurs when the Windows Work Folders Service improperly handles memory. To exploit this, an attacker...

PT-2020-3714 · Microsoft · Office Click-To-Run

Name of the Vulnerable Software and Affected Versions: Microsoft Office Click-to-Run C2R affected versions not specified Description: An elevation of privilege issue exists due to the way Microsoft Office Click-to-Run C2R components handle objects in memory. This could allow an attacker to elevat...

PT-2020-3802 · Microsoft · Windows Custom Protocol Engine +1

Name of the Vulnerable Software and Affected Versions: Windows Custom Protocol Engine affected versions not specified Description: The issue is caused by a buffer overflow in memory due to improper handling by the Windows Custom Protocol Engine. To exploit this, an attacker must first gain...

PT-2020-3758 · Microsoft · Windows Backup Engine +1

Name of the Vulnerable Software and Affected Versions: Windows Backup Engine affected versions not specified Description: The issue is related to an elevation of privilege vulnerability that occurs when the Windows Backup Engine improperly handles memory. To exploit this, an attacker must first...

PT-2020-3682 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to how the Windows Graphics Device Interface GDI handles objects in memory, allowing an attacker to potentially run arbitrary code in kernel mode. This could enable the...

PT-2020-3823 · Microsoft · Windows State Repository Service +1

Name of the Vulnerable Software and Affected Versions: Windows State Repository Service affected versions not specified Description: An information disclosure issue exists due to the improper handling of objects in memory by the Windows State Repository Service. This could allow an attacker to...

PT-2020-3811 · Microsoft · Windows Waasmedic Service +1

Name of the Vulnerable Software and Affected Versions: Windows WaasMedic Service affected versions not specified Description: An information disclosure issue exists due to improper memory handling by the Windows WaasMedic Service. To exploit this, an attacker must first gain execution on the vict...

PT-2020-3830 · Microsoft · Windows Speech Shell Components +1

Name of the Vulnerable Software and Affected Versions: Windows Speech Shell Components affected versions not specified Description: The issue is related to errors in handling memory objects, which can be exploited by an attacker to elevate privileges using a specially crafted application. To...

PT-2020-3833 · Microsoft · Windows Remote Access +1

Name of the Vulnerable Software and Affected Versions: Windows Remote Access affected versions not specified Description: The issue is related to an elevation of privilege vulnerability in Windows Remote Access, which occurs due to improper handling of memory. This can allow an attacker to elevat...