Windows Device Setup Manager Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists when the Windows Device Setup Manager improperly handles file operations. An attacker who successfully exploited this vulnerability could run processes in an elevated context. An attacker could exploit this vulnerability by running a specially crafte...

Diagnostics Hub Standard Collector Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector Service improperly handles file operations. An attacker who successfully exploited this vulnerability could gain elevated privileges. An attacker with unprivileged access to a vulnerable system could exploi...

Connected User Experiences and Telemetry Service Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists when Connected User Experiences and Telemetry Service improperly handles file operations. An attacker who successfully exploited this vulnerability could run processes in an elevated context. An attacker could exploit this vulnerability by running a...

Windows Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists when the Windows AppX Deployment Server improperly handles file operations. To exploit this vulnerability, an attacker would first have to gain execution on the victim system. An attacker could then run a specially crafted application to elevate...

Windows Error Reporting Information Disclosure Vulnerability

An information disclosure vulnerability exists when Windows Error Reporting improperly handles file operations. To exploit this vulnerability, an attacker would first have to gain execution on the victim system. An attacker could then run a specially crafted application to disclose information. T...

Provisioning Runtime Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists in the way the Provisioning Runtime validates certain file operations. An attacker who successfully exploited the vulnerability could gain elevated privileges on a victim system. To exploit the vulnerability, an attacker would require unprivileged co...

Windows Work Folder Service Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists when the Windows Work Folder Service improperly handles file operations. An attacker who successfully exploited this vulnerability could run processes in an elevated context. An attacker could exploit this vulnerability by running a specially crafted...

Windows Work Folder Service Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists when the Windows Work Folder Service improperly handles file operations. An attacker who successfully exploited this vulnerability could run processes in an elevated context. An attacker could exploit this vulnerability by running a specially crafted...

Windows Work Folder Service Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists when the Windows Work Folder Service improperly handles file operations. An attacker who successfully exploited this vulnerability could run processes in an elevated context. An attacker could exploit this vulnerability by running a specially crafted...

Windows Work Folder Service Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists when the Windows Work Folder Service improperly handles file operations. An attacker who successfully exploited this vulnerability could run processes in an elevated context. An attacker could exploit this vulnerability by running a specially crafted...

PT-2020-1924

Name of the Vulnerable Software and Affected Versions Windows Device Setup Manager affected versions not specified Description The issue is related to errors in file operations handling by the Windows Device Setup Manager, which can be exploited to run processes with elevated privileges using a...

PT-2020-1824

Name of the Vulnerable Software and Affected Versions Connected User Experiences and Telemetry Service affected versions not specified Description The issue is related to improper handling of file operations by the Connected User Experiences and Telemetry Service, which can lead to an elevation o...

Horde Groupware Webmail Edition edit Page Directory Traversal Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute local PHP files on affected installations of Horde Groupware Webmail Edition. Authentication is required to exploit this vulnerability. The specific flaw exists within edit.php. When parsing the paramstemplate parameter, the process does not...

PT-2020-1928

Name of the Vulnerable Software and Affected Versions Windows Language Pack Installer affected versions not specified Description The issue is related to an elevation of privilege vulnerability in the Windows Language Pack Installer, which improperly handles file operations. This can allow an...

PT-2020-1782

Name of the Vulnerable Software and Affected Versions Windows Update Orchestrator Service affected versions not specified Description The issue is related to an elevation of privilege vulnerability that occurs when the Windows Update Orchestrator Service improperly handles file operations. This c...

PT-2020-1800

Name of the Vulnerable Software and Affected Versions Windows Update Orchestrator Service affected versions not specified Description The issue is related to an elevation of privilege vulnerability that occurs when the Windows Update Orchestrator Service improperly handles file operations. This c...

PT-2020-1901

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description The issue is related to an elevation of privilege vulnerability in the Provisioning Runtime component of Windows operating systems. This vulnerability is caused by errors in handling file...

PT-2020-1799

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description The issue is related to incorrect handling of file operations in the Work Folder Service of Windows operating systems. It allows an attacker to potentially elevate their privileges using a...

PT-2020-1903

Name of the Vulnerable Software and Affected Versions Windows AppX Deployment Server affected versions not specified Description The issue is related to an elevation of privilege vulnerability in the Windows AppX Deployment Server, which improperly handles file operations. To exploit this, an...

PT-2020-1914

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description The issue is related to incorrect handling of file operations in the Work Folder Service of Windows operating systems. It allows an attacker to potentially elevate their privileges using a...