PT-2020-12579

Name of the Vulnerable Software and Affected Versions Windows Client Server Run-Time Subsystem CSRSS affected versions not specified Description An information disclosure issue exists due to the improper handling of objects in memory by the Windows Client Server Run-Time Subsystem CSRSS. This...

PT-2020-2823

Name of the Vulnerable Software and Affected Versions Windows Push Notification Service affected versions not specified Description The issue is related to an elevation of privilege vulnerability in the way the Windows Push Notification Service handles objects in memory. This vulnerability can be...

PT-2020-2519

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description A remote code execution issue exists in the way Windows handles objects in memory. This allows remote attackers to execute arbitrary code and affect the system. Recommendations At the moment,...

CVE-2020-0999

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0889, CVE-2020-0953, CVE-2020-0959, CVE-2020-0960, CVE-2020-0988, CVE-2020-099...

CVE-2020-0992

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0889, CVE-2020-0953, CVE-2020-0959, CVE-2020-0960, CVE-2020-0988, CVE-2020-099...

CVE-2020-0895

A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'Windows VBScript Engine Remote Code Execution Vulnerability'...

CVE-2020-0953: Undefined Security Weakness

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0889, CVE-2020-0959, CVE-2020-0960, CVE-2020-0988, CVE-2020-0992, CVE-2020-099...

CVE-2020-0992: Undefined Security Weakness

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0889, CVE-2020-0953, CVE-2020-0959, CVE-2020-0960, CVE-2020-0988, CVE-2020-099...

Media Foundation Information Disclosure Vulnerability

An information disclosure vulnerability exists when Media Foundation improperly handles objects in memory. An attacker who successfully exploited this vulnerability could obtain information to further compromise the user’s system. To exploit this vulnerability, an attacker would have to log onto ...

PT-2020-2286

Name of the Vulnerable Software and Affected Versions Internet Explorer affected versions not specified Description A remote code execution issue exists due to the way the VBScript engine handles objects in memory. This could allow an attacker to execute arbitrary code in the context of the curre...

PT-2020-2282

Name of the Vulnerable Software and Affected Versions Internet Explorer affected versions not specified Description A remote code execution issue exists due to the way the VBScript engine handles objects in memory. This could allow an attacker to execute arbitrary code in the context of the curre...

PT-2020-2050

Name of the Vulnerable Software and Affected Versions Microsoft Graphics Components affected versions not specified Description A remote code execution issue exists in the way Microsoft Graphics Components handle objects in memory. This allows remote attackers to execute arbitrary code and affect...

PT-2020-2056

Name of the Vulnerable Software and Affected Versions Windows Hyper-V affected versions not specified Description The issue is related to an elevation of privilege vulnerability. It occurs due to improper handling of objects in memory by Windows Hyper-V on a host server. This vulnerability can be...

PT-2020-2248

Name of the Vulnerable Software and Affected Versions Windows Graphics Component affected versions not specified Description The issue is related to the improper handling of objects in memory by the Windows Graphics Component, which can lead to an elevation of privilege. This can potentially allo...

PT-2020-2048

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description A denial of service issue exists due to improper handling of objects in memory. This could allow an attacker to cause a denial of service. Recommendations At the moment, there is no informati...

PT-2020-2049

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description An information disclosure issue exists due to improper handling of objects in memory by the Windows kernel. This allows an attacker to potentially obtain sensitive information. There is no...

Security Updates for Microsoft Excel Products (April 2020)

The Microsoft Excel Products are missing security updates. It is, therefore, affected by multiple vulnerabilities : - A remote code execution vulnerability exists when Microsoft Office improperly loads arbitrary type libraries. An attacker could then install programs; view, change, or delete data...

PT-2020-20310 · Intuit · Argo Api

Name of the Vulnerable Software and Affected Versions: Argo API version 1.5.0 Description: The Argo API does not implement anti-automation measures such as rate limiting, account lockouts, or other anti-bruteforce measures, allowing attackers to submit an unlimited number of authentication attemp...

containers/image: Container images read entire image manifest into memory

A malicious container image can consume an unbounded amount of memory when being pulled to a container runtime host, such as Red Hat Enterprise Linux using podman, or OpenShift Container Platform. An attacker can use this flaw to trick a user, with privileges to pull container images, into crashi...

CVE-2020-0802

An elevation of privilege vulnerability exists in the way that the Windows Network Connections Service handles objects in memory, aka 'Windows Network Connections Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0778, CVE-2020-0803, CVE-2020-0804, CVE-2020-0845...