CVE-2020-1347

An elevation of privilege vulnerability exists when the Windows Storage Services improperly handle file operations, aka 'Windows Storage Services Elevation of Privilege Vulnerability'...

CVE-2020-1347

An elevation of privilege vulnerability exists when the Windows Storage Services improperly handle file operations, aka 'Windows Storage Services Elevation of Privilege Vulnerability'...

CVE-2020-1360

An elevation of privilege vulnerability exists when the Windows Profile Service improperly handles file operations, aka 'Windows Profile Service Elevation of Privilege Vulnerability'...

CVE-2020-1357

An elevation of privilege vulnerability exists when the Windows System Events Broker improperly handles file operations, aka 'Windows System Events Broker Elevation of Privilege Vulnerability'...

CVE-2020-1346

Technical details about CVE-2020-1346 are not publicly provided in the connected documents. Monitor for updates from official advisories and third-party analyses.

CVE-2020-1346

An elevation of privilege vulnerability exists when the Windows Modules Installer improperly handles file operations, aka 'Windows Modules Installer Elevation of Privilege Vulnerability'...

Microsoft OneDrive Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists in Microsoft OneDrive that allows file deletion in arbitrary locations. To exploit the vulnerability, an attacker would first have to log on to the system. An attacker could then run a specially crafted application that could exploit the vulnerabilit...

Windows System Events Broker Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists when the Windows System Events Broker improperly handles file operations. An attacker who successfully exploited this vulnerability could gain elevated privileges. To exploit the vulnerability, an attacker would first need code execution on a victim...

Windows Error Reporting Information Disclosure Vulnerability

An information disclosure vulnerability exists when Windows Error Reporting improperly handles file operations. To exploit this vulnerability, an attacker would first have to gain execution on the victim system. An attacker could then run a specially crafted application to disclose information. T...

Windows iSCSI Target Service Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists when the Windows iSCSI Target Service improperly handles file operations. An attacker who successfully exploited this vulnerability could gain elevated privileges. To exploit the vulnerability, an attacker would first need code execution on a victim...

Windows Storage Services Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists when the Windows Storage Services improperly handle file operations. An attacker who successfully exploited this vulnerability could gain elevated privileges. To exploit the vulnerability, an attacker would first need code execution on a victim syste...

Windows Profile Service Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists when the Windows Profile Service improperly handles file operations. An attacker who successfully exploited this vulnerability could gain elevated privileges. To exploit the vulnerability, an attacker would first need code execution on a victim syste...

Windows Modules Installer Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists when the Windows Modules Installer improperly handles file operations. An attacker who successfully exploited this vulnerability could gain elevated privileges. To exploit the vulnerability, an attacker would first need code execution on a victim...

KB4558998: Windows 10 Version 1809 and Windows Server 2019 July 2020 Security Update

The remote Windows host is missing security update 4558998. It is, therefore, affected by multiple vulnerabilities : - An elevation of privilege vulnerability exists when the Windows System Events Broker improperly handles file operations. An attacker who successfully exploited this vulnerability...

KB4565503: Windows 10 Version 2004 July 2020 Security Update

The remote Windows host is missing security update 4565503. It is, therefore, affected by multiple vulnerabilities : - An elevation of privilege vulnerability exists when the Windows System Events Broker improperly handles file operations. An attacker who successfully exploited this vulnerability...

The vulnerability of the Windows Backup Service, a backup service for Microsoft Windows operating systems, allows attackers to exploit their privileges.

The vulnerability of the Windows Backup Service in operating systems relates to improper handling of file operations. Exploiting this vulnerability can allow attackers to enhance their privileges through a specially created application...

Check Point ZoneAlarm Symlink Following Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Check Point ZoneAlarm. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the ZoneAlarm...

The vulnerability of the Diagnostics Hub Standard Collector Service in the Visual Studio software allows a malicious individual to escalate their privileges.

The vulnerability of the Diagnostics Hub Standard Collector Service in the Visual Studio software is related to errors in file operation processing. Exploiting this vulnerability can allow attackers to gain increased privileges...

(0Day) NEC ESMPRO Manager GetEuaLogDownloadAction Directory Traversal Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of NEC ESMPRO Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within the GetEuaLogDownloadAction class. The issue results from the lack of proper...

(0Day) CentOS Web Panel ajax_mod_security archivo Arbitrary File Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to write arbitrary files on affected installations of CentOS Web Panel. Authentication is not required to exploit this vulnerability. The specific flaw exists within ajaxmodsecurity.php. When parsing the archivo parameter, the process does not properly...