Windows Error Reporting Manager Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists when Windows Error Reporting manager improperly handles file and folder links. An attacker who successfully exploited this vulnerability could overwrite a targeted file leading to an elevated status. To exploit this vulnerability, an attacker would...

LAquis SCADA LGX File Insufficient UI Warning Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of LAquis SCADA. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling ...

ansible: secrets readable after ansible-vault edit

A flaw was found in Ansible Engine when using Ansible Vault for editing encrypted files. When a user executes "ansible-vault edit", another user on the same computer can read the old and new secret, as it is created in a temporary file with mkstemp and the returned file descriptor is closed and t...

Microsoft Windows Connected User Experiences and Telemetry Service Elevation of Privilege Vulnerability

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation, U.S.A. Microsoft Windows is an operating system for personal devices.Microsoft Windows Server is a server operating system.Connected User Experiences and Telemetry Service is one of the components that can...

CVE-2020-1011

An elevation of privilege vulnerability exists when the Windows System Assessment Tool improperly handles file operations, aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0934, CVE-2020-0983, CVE-2020-1009, CVE-2020-1015...

CVE-2020-0944

An elevation of privilege vulnerability exists when Connected User Experiences and Telemetry Service improperly handles file operations, aka 'Connected User Experiences and Telemetry Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0942, CVE-2020-1029...

procps: Local privilege escalation in top

If the HOME environment variable is unset or empty, top will read its configuration file from the current working directory without any security check. If a user runs top with HOME unset in an attacker-controlled directory, the attacker could achieve privilege escalation by exploiting one of...

CVE-2017-12189

It was discovered that the jboss init script performed unsafe file handling which could result in local privilege escalation...

The vulnerability of Windows operating system installers allows a hacker to execute arbitrary code with elevated privileges.

The vulnerability of Windows operating system installers is related to the incorrect handling of certain file system operations. Exploiting this vulnerability allows an attacker to execute arbitrary code with elevated privileges...

The vulnerability of the Work Folder Service in Windows operating systems allows a perpetrator to escalate their privileges.

The vulnerability of the Work Folder Service service in Windows operating systems is related to improper handling of file operations. Exploiting this vulnerability can allow an attacker to enhance their privileges through a specially created application...

The vulnerability of the AppX Deployment Server for Windows operating systems allows attackers to increase their privileges.

The vulnerability of the AppX Deployment Server for Windows operating systems is related to incorrect handling of file operations. Exploiting this vulnerability can allow attackers to enhance their privileges through a specially created application...

The vulnerability of the Update Orchestrator Service for Windows operating systems allows a perpetrator to increase their privileges.

The vulnerability of the Update Orchestrator Service service for Windows operating systems is related to improper handling of file operations. Exploiting this vulnerability can allow an attacker to enhance their privileges through a specially created application...

The vulnerability of the Work Folder Service in Windows operating systems allows a perpetrator to escalate their privileges.

The vulnerability of the Work Folder Service service in Windows operating systems is related to improper handling of file operations. Exploiting this vulnerability can allow an attacker to enhance their privileges through a specially created application...

The vulnerability of the Work Folder Service in Windows operating systems allows a perpetrator to escalate their privileges.

The vulnerability of the Work Folder Service service in Windows operating systems is related to improper handling of file operations. Exploiting this vulnerability can allow an attacker to enhance their privileges through a specially created application...

The vulnerability of the Work Folder Service in Windows operating systems allows a perpetrator to escalate their privileges.

The vulnerability of the Work Folder Service service in Windows operating systems is related to improper handling of file operations. Exploiting this vulnerability can allow an attacker to enhance their privileges through a specially created application...

The vulnerability of the Update Orchestrator Service for Windows operating systems allows a perpetrator to increase their privileges.

The vulnerability of the Update Orchestrator Service service for Windows operating systems is related to improper handling of file operations. Exploiting this vulnerability can allow an attacker to enhance their privileges through a specially created application...

The vulnerability of Windows operating system’s folder permissions allows attackers to increase their privileges.

The vulnerability of Windows operating system’s folder service is related to errors in file handling operations. Exploiting this vulnerability can allow an attacker to gain increased privileges...

Microsoft Windows Work Folder Service Privilege Mobilization Vulnerability (CNVD-2020-23447)

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is a set of operating systems for personal devices.Microsoft Windows Server is a set of server operating systems.Work Work Folder Service is one of the Work Folder Service components. A...

The vulnerability of the diagnostic tool for Mobile Device Management applications, which allows attackers to escalate their privileges.

The vulnerability of the diagnostic tool for Mobile Device Management MDM applications that diagnose Windows operating systems involves improper handling of files. Exploiting this vulnerability can allow attackers to enhance their privileges through a specially created application...

CVE-2020-0867

An elevation of privilege vulnerability exists when the Windows Update Orchestrator Service improperly handles file operations, aka 'Windows Update Orchestrator Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0868...