PT-2020-4042 · Microsoft · Windows +1

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to errors in handling objects in memory by the DirectX component of the Windows operating system. This could allow an attacker to elevate their privileges using a...

KB4577015: Windows 10 Version 1607 and Windows Server 2016 September 2020 Security Update

The remote Windows host is missing security update 4577015. It is, therefore, affected by multiple vulnerabilities : - An elevation of privilege vulnerability exists when DirectX improperly handles objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary co...

CVE-2020-1479

An elevation of privilege vulnerability exists when DirectX improperly handles objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs; view, change, or delete data; or create new accounts with...

CVE-2020-1479

An elevation of privilege vulnerability exists when DirectX improperly handles objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs; view, change, or delete data; or create new accounts with...

Privilege escalation

An elevation of privilege vulnerability exists when DirectX improperly handles objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs; view, change, or delete data; or create new accounts with...

CVE-2020-1479 DirectX Elevation of Privilege Vulnerability

...

CVE-2020-1479

CVE-2020-1479 is a Windows/DirectX-related elevation of privilege vulnerability. The issue arises from improper handling of objects in memory, enabling a locally authenticated attacker to run code in kernel mode after logging on and executing a crafted application. The impact, as described in the...

DirectX Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists when DirectX improperly handles objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs; view, change, or delete data; or create new accounts with...

PT-2020-3789 · Microsoft · Windows +1

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to an elevation of privilege vulnerability in DirectX, where it improperly handles objects in memory. This could allow an attacker to run arbitrary code in kernel mode,...

PT-2020-3985 · Microsoft · Windows +1

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to an elevation of privilege vulnerability that exists when DirectX improperly handles objects in memory. This could allow an attacker to run arbitrary code in kernel...

CVE-2020-6102

An exploitable code execution vulnerability exists in the Shader functionality of AMD Radeon DirectX 11 Driver atidxx64.dll 26.20.15019.19000. An attacker can provide a a specially crafted shader file to trigger this vulnerability, resulting in code execution. This vulnerability can be triggered...

CVE-2020-6101

An exploitable code execution vulnerability exists in the Shader functionality of AMD Radeon DirectX 11 Driver atidxx64.dll 26.20.15019.19000. An attacker can provide a specially crafted shader file to trigger this vulnerability, resulting in code execution. This vulnerability can be triggered fr...

CVE-2020-6102

An exploitable code execution vulnerability exists in the Shader functionality of AMD Radeon DirectX 11 Driver atidxx64.dll 26.20.15019.19000. An attacker can provide a a specially crafted shader file to trigger this vulnerability, resulting in code execution. This vulnerability can be triggered...

Remote code execution

An exploitable code execution vulnerability exists in the Shader functionality of AMD Radeon DirectX 11 Driver atidxx64.dll 26.20.15019.19000. An attacker can provide a a specially crafted shader file to trigger this vulnerability, resulting in code execution. This vulnerability can be triggered...

Remote code execution

An exploitable code execution vulnerability exists in the Shader functionality of AMD Radeon DirectX 11 Driver atidxx64.dll 26.20.15019.19000. An attacker can provide a a specially crafted shader file to trigger this vulnerability, resulting in code execution. This vulnerability can be triggered...

CVE-2020-6103

An exploitable code execution vulnerability exists in the Shader functionality of AMD Radeon DirectX 11 Driver atidxx64.dll 26.20.15019.19000. An attacker can provide a a specially crafted shader file to trigger this vulnerability, resulting in code execution. This vulnerability can be triggered...

CVE-2020-6103

CVE-2020-6103 refers to an exploitable memory corruption in the AMD Radeon DirectX 11 Driver (atidxx64.dll) version 26.20.15019.19000, caused by a malformed shader (ROUND_NI) that can trigger code execution. Public writeups confirm the issue affects the RDVFX path in Hyper‑V RemoteFX and may theo...

CVE-2020-6102

CVE-2020-6102 is an exploit in the Shader functionality of the AMD Radeon DirectX 11 Driver (atidxx64.dll, v26.20.15019.19000) that can trigger code execution. The vulnerability is a memory corruption/invalid write when processing a crafted pixel shader, as described by Talos and corroborated by ...

CVE-2020-6101

An exploitable code execution vulnerability exists in the Shader functionality of AMD Radeon DirectX 11 Driver atidxx64.dll 26.20.15019.19000. An attacker can provide a specially crafted shader file to trigger this vulnerability, resulting in code execution. This vulnerability can be triggered fr...

CVE-2020-6101

CVE-2020-6101 affects AMD Radeon DirectX 11 Driver (atidxx64.dll, 26.20.15019.19000). The vulnerability stems from a memory corruption/invalid write in the shader pathway (DCL_OUTPUT handling), enabling code execution if a malformed shader is supplied. Public write-ups indicate this can be trigge...