Lucene search
+L

2183 matches found

Cvelist
Cvelist
added 2020/10/16 10:17 p.m.29 views

CVE-2020-16914 Windows GDI+ Information Disclosure Vulnerability

...

5.5CVSS6.8AI score0.01356EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2020/10/16 10:17 p.m.32 views

CVE-2020-16911 GDI+ Remote Code Execution Vulnerability

...

8.8CVSS8.6AI score0.04418EPSS
SaveExploits0References1
CVE
CVE
added 2020/10/16 10:17 p.m.162 views

CVE-2020-16911

CVE-2020-16911 is a Windows GDI memory handling remote code execution vulnerability. An attacker can exploit memory objects via network/vector (e.g., via crafted web content or documents) to gain code execution and install/modify data or create accounts. The vulnerability is addressed by a Micros...

9.3CVSS8.7AI score0.04418EPSS
SaveExploits0References1Affected Software7
CNVD
CNVD
added 2020/10/15 12:0 a.m.28 views

Microsoft Windows and Windows Server Remote Code Execution Vulnerability (CNVD-2021-71413)

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation, an operating system for personal devices, and Microsoft Windows Server, a server operating system. A remote code execution vulnerability exists in Microsoft Windows and Windows Server, which stems from a...

9.3CVSS2.3AI score0.04418EPSS
SaveExploits0References1
Microsoft CVE
Microsoft CVE
added 2020/10/13 7:0 a.m.38 views

Windows GDI+ Information Disclosure Vulnerability

An information disclosure vulnerability exists in the way that the Windows Graphics Device Interface Plus GDI+ handles objects in memory, allowing an attacker to retrieve information from a targeted system. By itself, the information disclosure does not allow arbitrary code execution; however, it...

5.5CVSS2.4AI score0.01356EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2020/10/13 7:0 a.m.53 views

GDI+ Remote Code Execution Vulnerability

A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface GDI handles objects in the memory. An attacker who successfully exploited this vulnerability could take control of the affected system. An attacker could then install programs; view, change, or dele...

9.3CVSS8.8AI score0.04418EPSS
SaveExploits0
Kaspersky
Kaspersky
added 2020/10/13 12:0 a.m.55 views

KLA11978 Multiple vulnerabilities in Microsoft Products (ESU)

Multiple vulnerabilities were found in Microsoft Products Extended Support Update. Malicious users can exploit these vulnerabilities to obtain sensitive information, gain privileges, execute arbitrary code, cause denial of service, spoof user interface. Below is a complete list of vulnerabilities...

9.3CVSS9.5AI score0.05847EPSS
SaveExploits0References37
Tenable Nessus
Tenable Nessus
added 2020/10/13 12:0 a.m.140 views

KB4580346: Windows 10 Version 1607 and Windows Server 2016 October 2020 Security Update

The remote Windows host is missing security update 4580346. It is, therefore, affected by multiple vulnerabilities : - A spoofing vulnerability exists when Windows incorrectly validates file signatures. An attacker who successfully exploited this vulnerability could bypass security features and...

9.3CVSS8AI score0.10456EPSS
SaveExploits0References40
Tenable Nessus
Tenable Nessus
added 2020/10/13 12:0 a.m.109 views

KB4580328: Windows 10 Version 1709 October 2020 Security Update

The remote Windows host is missing security update 4580328 or 4577041. It is, therefore, affected by multiple vulnerabilities : - A spoofing vulnerability exists when Windows incorrectly validates file signatures. An attacker who successfully exploited this vulnerability could bypass security...

9.3CVSS7.9AI score0.13348EPSS
SaveExploits12References48
Tenable Nessus
Tenable Nessus
added 2020/10/13 12:0 a.m.66 views

KB4577671: Windows 10 Version 1903 and Windows 10 Version 1909 October 2020 Security Update

The remote Windows host is missing security update 4577671. It is, therefore, affected by multiple vulnerabilities : - A spoofing vulnerability exists when Windows incorrectly validates file signatures. An attacker who successfully exploited this vulnerability could bypass security features and...

9.3CVSS7.9AI score0.13348EPSS
SaveExploits12References50
BDU FSTEC
BDU FSTEC
added 2020/09/29 12:0 a.m.13 views

The vulnerability of the Windows GDI component in Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the Windows GDI component in Windows operating systems is related to errors in memory object handling. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...

10CVSS7.9AI score0.03819EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2020/09/24 12:0 a.m.7 views

The vulnerability of the Windows GDI component in Windows operating systems allows attackers to disclose protected information.

The vulnerability of the Windows GDI component in Windows operating systems is related to deficiencies in security mechanisms. Exploiting this vulnerability can allow a malicious actor to disclose protected information remotely...

7.1CVSS6.2AI score0.04601EPSS
SaveExploits0References2
NVD
NVD
added 2020/09/11 5:15 p.m.14 views

CVE-2020-1256

An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user’s system. There are multiple ways an attacker could explo...

6.5CVSS0.04601EPSS
SaveExploits0References1
NVD
NVD
added 2020/09/11 5:15 p.m.20 views

CVE-2020-1097

An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise a user’s system. There are multiple ways an attacker could exploit...

6.5CVSS0.0459EPSS
SaveExploits0References1
NVD
NVD
added 2020/09/11 5:15 p.m.18 views

CVE-2020-1091

An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise a user’s system. There are multiple ways an attacker could exploit...

6.5CVSS0.04477EPSS
SaveExploits0References1
OSV
OSV
added 2020/09/11 5:15 p.m.3 views

CVE-2020-1097

An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise a user’s system. There are multiple ways an attacker could exploit...

6.5CVSS6.9AI score0.0459EPSS
SaveExploits0References1
Prion
Prion
added 2020/09/11 5:15 p.m.28 views

Remote code execution

A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface GDI handles objects in the memory. An attacker who successfully exploited this vulnerability could take control of the affected system. An attacker could then install programs; view, change, or dele...

9.3CVSS8.9AI score0.03819EPSS
SaveExploits0References1Affected Software5
Prion
Prion
added 2020/09/11 5:15 p.m.20 views

Information disclosure

An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user’s system. There are multiple ways an attacker could explo...

4.3CVSS6.6AI score0.04601EPSS
SaveExploits0References1Affected Software5
Prion
Prion
added 2020/09/11 5:15 p.m.25 views

Information disclosure

An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise a user’s system. There are multiple ways an attacker could exploit...

4.3CVSS7AI score0.04477EPSS
SaveExploits0References1Affected Software5
CVE
CVE
added 2020/09/11 5:9 p.m.145 views

CVE-2020-1285

Technical details about CVE-2020-1285 are not provided in the connected documents. The sources reference other CVEs and Windows updates; monitor for updates on CVE-2020-1285.

9.3CVSS8.7AI score0.03819EPSS
SaveExploits0References1Affected Software8
Rows per page
Query Builder