CVE-2020-1534

An elevation of privilege vulnerability exists when the Windows Backup Service improperly handles file operations. To exploit this vulnerability, an attacker would first have to gain execution on the victim system. An attacker could then run a specially crafted application to elevate privileges...

CVE-2020-1490

An elevation of privilege vulnerability exists when the Storage Service improperly handles file operations. An attacker who successfully exploited this vulnerability could gain elevated privileges on the victim system. To exploit the vulnerability, an attacker would first have to gain execution o...

CVE-2020-1455

A denial of service vulnerability exists when Microsoft SQL Server Management Studio SSMS improperly handles files. An attacker could exploit the vulnerability to trigger a denial of service. To exploit the vulnerability, an attacker would first require execution on the victim system. The securit...

CVE-2020-1455

A denial of service vulnerability exists when Microsoft SQL Server Management Studio SSMS improperly handles files. An attacker could exploit the vulnerability to trigger a denial of service. To exploit the vulnerability, an attacker would first require execution on the victim system. The securit...

Microsoft Windows Work Folder Service Elevation of Privilege Vulnerability

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is an operating system for personal devices.Microsoft Windows Server is a server operating system. An elevation of privilege vulnerability exists in Microsoft Windows Work Folder Service,...

The vulnerability of the Update Orchestrator Service for Windows operating systems allows a perpetrator to escalate their privileges and execute arbitrary code.

The vulnerability of the Update Orchestrator Service service for Windows operating systems is related to improper handling of file operations. Exploiting this vulnerability can allow an attacker to enhance their privileges and execute arbitrary code using a specially created application...

PT-2020-3701 · Microsoft · Windows Work Folder Service +1

Name of the Vulnerable Software and Affected Versions: Windows Work Folder Service affected versions not specified Description: The issue is related to the improper handling of file operations by the Windows Work Folder Service, allowing an attacker to run processes in an elevated context. An...

PT-2020-3730 · Microsoft · Sql Server Management Studio

Name of the Vulnerable Software and Affected Versions: Microsoft SQL Server Management Studio affected versions not specified Description: A denial of service issue exists due to improper handling of files by Microsoft SQL Server Management Studio. An attacker could exploit this to trigger a deni...

PT-2020-3812 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to an elevation of privilege vulnerability in the Storage Service component, which improperly handles file operations. This could allow an attacker to gain elevated...

PT-2020-3822 · Microsoft · Connected User Experiences/Telemetry Service +1

Name of the Vulnerable Software and Affected Versions: Connected User Experiences and Telemetry Service affected versions not specified Description: The issue is related to improper handling of file operations by the Connected User Experiences and Telemetry Service, which could allow an attacker ...

PT-2020-3839 · Microsoft · Windows Remote Access +1

Name of the Vulnerable Software and Affected Versions: Windows Remote Access affected versions not specified Description: The issue is related to an elevation of privilege vulnerability in the Windows Remote Access service, which improperly handles file operations. This could allow an attacker to...

Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS : OpenJDK 8 vulnerabilities (USN-4453-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4453-1 advisory. Johannes Kuhn discovered that OpenJDK 8 incorrectly handled access control contexts. An attacker could possibly use this issue to...

CVE-2020-7823 DaviewIndy Multiple Vulnerabilities

DaviewIndy has a Memory corruption vulnerability, triggered when the user opens a malformed image file that is mishandled by Daview.exe. Attackers could exploit this and arbitrary code execution...

Internet Bug Bounty: Uncovering file quarantine and UX security issues in macOS apps ( .terminal, .fileloc and .url)

Slides : https://docs.google.com/presentation/d/19WeQbqcOKnrSv1I3Z4sm-oNAf6IVzHwRyQP4i9BvY/editslide=id.g758ad3e04223231 See Blogpost for more details - https://medium.com/@metnew/exploiting-popular-macos-apps-with-a-single-terminal-file-f6c2efdfedaa Summary Popular macOS apps with a file-sharing...

The vulnerability of the diagnostic tool for Mobile Device Management applications, which allows attackers to escalate their privileges.

The vulnerability of the diagnostic tool for Mobile Device Management MDM applications that diagnose Windows operating systems is related to improper handling of files. Exploiting this vulnerability can allow attackers to enhance their privileges through a specially created application...

The vulnerability of the Windows Modules Installer service in Windows operating systems allows attackers to exploit their privileges.

The vulnerability of the Windows Modules Installer service in Windows operating systems is related to file handling errors. Exploiting this vulnerability can allow an attacker to enhance their privileges through a specially created application...

The vulnerability of the Windows Storage Services service on Windows operating systems allows attackers to escalate their privileges.

The vulnerability of the Windows Storage Services service in Windows operating systems is related to errors in file handling operations. Exploiting this vulnerability can allow an attacker to gain increased privileges...

USN-4428-1 python2.7, python3.4, python3.5, python3.6, python3.8 vulnerabilities

It was discovered that Python documentation had a misleading information. A security issue could be possibly caused by wrong assumptions of this information. This issue only affected Ubuntu 12.04 ESM, Ubuntu 14.04 ESM, Ubuntu 16.04 LTS and Ubuntu 18.04 LTS. CVE-2019-17514 It was discovered that...

Microsoft Windows System Events Broker Elevation of Privilege Vulnerability

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is an operating system for personal devices.Microsoft Windows Server is a server operating system. An elevation of privilege vulnerability exists in Microsoft Windows System Events Broker,...

Microsoft Windows WalletService Denial of Service Vulnerability

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is an operating system for personal devices.Microsoft Windows Server is a server operating system. A denial of service vulnerability exists in Microsoft Windows WalletService, which arises...