98 matches found
The vulnerability of the Win32k component in Windows operating systems, which allows attackers to increase their privileges
The vulnerability of the Win32k component in Windows operating systems arises from the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to enhance their privileges and gain full control over the system through a specially created...
PT-2018-1502 · Microsoft · Excel Viewer +2
Name of the Vulnerable Software and Affected Versions: Microsoft Office affected versions not specified Microsoft Excel affected versions not specified Microsoft Excel Viewer affected versions not specified Description: The issue is related to incorrect handling of objects in memory, which can...
The vulnerability of the Microsoft Malware Protection Engine, which is used in Microsoft’s built-in security tools, allows a malicious actor to execute arbitrary code with SYSTEM privileges and gain full control over the system.
The vulnerability of the Microsoft Malware Protection Engine, which is used in Microsoft’s built-in security mechanisms, relates to the execution of operations beyond the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code with SYSTEM privileges and...
Input validation
A vulnerability in Sierra Wireless AirLink GX400, GX440, ES440, and LS300 routers with firmware before 4.4.5 and GX450, ES450, RV50, RV50X, MP70, and MP70E routers with firmware before 4.9 could allow an authenticated remote attacker to execute arbitrary code and gain full control of an affected...
Default configuration
An Incorrect Default Permissions issue was discovered in OSIsoft PI Data Archive versions 2017 and prior. Insecure default configuration may allow escalation of privileges that gives the actor full control over the system...
CVE-2018-7533
An Incorrect Default Permissions issue was discovered in OSIsoft PI Data Archive versions 2017 and prior. Insecure default configuration may allow escalation of privileges that gives the actor full control over the system...
Juniper Networks NorthStar Controller Application Information Disclosure Vulnerability
Juniper Networks NorthStar Controller Application is a traffic planning controller from Juniper Networks, Inc. The controller optimizes service provider transport networks by establishing open industry standard protocols. An information disclosure vulnerability exists in Juniper Networks NorthSta...
Microsoft Edge browser vulnerability, allowing a hacker to execute arbitrary code
The vulnerability of Microsoft Edge arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to cause memory corruption in such a way that they can execute arbitrary code within the context of the current user. A successful...
Multiple Trend Micro Product DLL Load Local Code Injection Vulnerabilities
Trend Micro Maximum Security and others are antivirus programs from Trend Micro. A local code injection vulnerability exists in multiple Trend Micro products. A local attacker can exploit this vulnerability to execute arbitrary code in the context of a system running in an affected program to gai...
Microsoft Windows Graphics Remote Code Execution Vulnerability
Microsoft Windows is the popular computer operating system. A remote code execution vulnerability exists in Microsoft Windows due to a font library that does not properly handle constructed embedded fonts. This vulnerability could be exploited by an attacker to take full control of an affected...
The vulnerability of the Microsoft Lync Attendee User software allows a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information.
A vulnerability that allows for remote execution of code exists in vulnerable components and is related to the processing of specially crafted font files. Exploiting this vulnerability enables remote execution of code, provided that the user opens a specially crafted file or webpage. Exploiting...
The vulnerability of Microsoft Lync Server software allows a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the GDI+ component of the Microsoft Lync Attendee User program, related to the processing of specially crafted images, allows for remote execution of code when a user opens a specially crafted image. Exploiting this vulnerability enables a malicious individual to gain full...
The vulnerability in Microsoft.NET Framework software allows a malicious attacker to compromise the confidentiality, integrity, and accessibility of protected information.
A vulnerability that allows for remote execution of code exists in the Microsoft .NET Framework. This vulnerability is related to incorrect handling of localized resource identifiers. Exploiting this vulnerability enables a malicious individual to gain full control over the system. They can then...
Vulnerability of Microsoft Office Web Apps, which allows a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information
The vulnerability of Microsoft Office Web Apps allows for the execution of code remotely. If a user with administrative privileges accesses the system, a malicious individual can gain full control over the system. They can install programs, view, modify, or delete data, as well as create new...
Vulnerability of Microsoft Word software, which allows a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information
A vulnerability that allows for remote execution of code exists in Microsoft Office and is related to the processing of certain properties of Microsoft Word files. If a user with administrative privileges accesses the system, a malicious individual can gain full control over the system. They can...
The vulnerability of the Windows operating system allows a malicious intruder to compromise the confidentiality, integrity, and accessibility of protected information.
A vulnerability that allows for remote execution of code exists in the Windows event log system and is related to the processing of specially crafted files. Exploiting this vulnerability enables remote execution of code provided that the user opens a specially crafted event log file. If the user...
Vulnerability of Microsoft Office software, which allows a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information
The vulnerability in GDI+, related to the processing of specially crafted images, allows for remote execution of code provided that the user opens a specially crafted image. Exploiting this vulnerability enables a malicious individual to gain full control over the system. They can then install...
The vulnerability of the Microsoft Lync Attendee User software allows a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the GDI+ component in Microsoft Lync Attendee User allows for remote execution of code, provided that the user opens a specially crafted image. Exploiting this vulnerability enables a malicious individual to gain full control over the system. They can then install programs,...
The vulnerability of Microsoft Lync Server software allows a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information.
A vulnerability that allows for remote execution of code exists in vulnerable components and is related to the processing of specially crafted font files. Exploiting this vulnerability enables remote execution of code, provided that the user opens a specially crafted file or webpage. Exploiting...
Vulnerability of Microsoft Office software, which allows a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information
A vulnerability that allows for remote execution of code exists in vulnerable components and is related to the processing of specially crafted font files. Exploiting this vulnerability enables remote execution of code, provided that the user opens a specially crafted file or webpage. Exploiting...