2268 matches found
Operation PowerFall: CVE-2020-0986 and variants
In August 2020, we published a blog post about Operation PowerFall. This targeted attack consisted of two zero-day exploits: a remote code execution exploit for Internet Explorer 11 and an elevation of privilege exploit targeting the latest builds of Windows 10. While we already described the...
CVE-2020-1529
An elevation of privilege vulnerability exists in the way that the Windows Graphics Device Interface GDI handles objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs; view, change, or delete...
CVE-2020-1480
An elevation of privilege vulnerability exists in the way that the Windows Graphics Device Interface GDI handles objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs; view, change, or delete...
CVE-2020-1480
An elevation of privilege vulnerability exists in the way that the Windows Graphics Device Interface GDI handles objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs; view, change, or delete...
Privilege escalation
An elevation of privilege vulnerability exists in the way that the Windows Graphics Device Interface GDI handles objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs; view, change, or delete...
Privilege escalation
An elevation of privilege vulnerability exists in the way that the Windows Graphics Device Interface GDI handles objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs; view, change, or delete...
CVE-2020-1529 Windows GDI Elevation of Privilege Vulnerability
...
CVE-2020-1529
CVE-2020-1529 is a Windows GDI elevation-of-privilege vulnerability where improper handling of in-memory GDI objects could allow a local attacker to run code in kernel mode. The initial description notes kernel-mode code execution and privilege elevation after logging on and running a crafted app...
CVE-2020-1480 Windows GDI Elevation of Privilege Vulnerability
...
CVE-2020-1480
CVE-2020-1480 is a Windows GDI Elevation of Privilege vulnerability. It describes a state where the Graphics Device Interface may mishandle objects in memory, allowing a local attacker who can log on to run code in kernel mode and potentially install programs, access data, or create accounts with...
Microsoft Windows findBaseLigature TTF Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Microsoft Windows. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...
Windows GDI Elevation of Privilege Vulnerability
An elevation of privilege vulnerability exists in the way that the Windows Graphics Device Interface GDI handles objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs; view, change, or delete...
KLA11929 Multiple vulnerabilities in Microsoft Products (ESU)
Multiple vulnerabilities were found in Microsoft Products Extended Support Update. Malicious users can exploit these vulnerabilities to execute arbitrary code, gain privileges, obtain sensitive information, spoof user interface. Below is a complete list of vulnerabilities: 1. A memory corruption...
Microsoft Windows GDI Elevation of Privilege (CVE-2020-1480)
An elevation of privilege vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Microsoft Windows GDI Elevation of Privilege (CVE-2020-1529)
An elevation of privilege vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
PT-2020-3943 · Microsoft · Windows Gdi +1
Name of the Vulnerable Software and Affected Versions: Windows GDI component affected versions not specified Description: An information disclosure issue exists due to the improper handling of memory contents by the Windows GDI component. This could allow an attacker to obtain information that...
Denial Of Service (DoS)
FreeRDP is vulnerable to denial of service. A use-after-free in gdiSelectObject causes clients using compatibility mode with /relax-order-checks to be vulnerable to an application crash...
The vulnerability of the Windows GDI component in Windows operating systems allows a hacker to execute arbitrary code.
The vulnerability of the Windows GDI component in Windows operating systems is related to incorrect handling of objects in memory. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...
Microsoft Windows Multiple Vulnerabilities (KB4565541)
This host is missing a critical security update according to Microsoft KB4565541 SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...