CVE-2020-0728

An information vulnerability exists when Windows Modules Installer Service improperly discloses file information, aka 'Windows Modules Installer Service Information Disclosure Vulnerability'...

Information disclosure

An information vulnerability exists when Windows Modules Installer Service improperly discloses file information, aka 'Windows Modules Installer Service Information Disclosure Vulnerability'...

CVE-2020-0728

CNVD-2020-10129 and related OpenVAS entries describe CVE-2020-0728 as an information disclosure vulnerability in Microsoft Windows, specifically involving the Windows Modules Installer Service. The root cause is improper disclosure of file information by the service, enabling an attacker to view ...

Windows Modules Installer Service Information Disclosure Vulnerability

An information vulnerability exists when Windows Modules Installer Service improperly discloses file information. Successful exploitation of the vulnerability could allow the attacker to read any file on the file system. To exploit the vulnerability, an attacker would have to log onto an affected...

PT-2020-1596

Name of the Vulnerable Software and Affected Versions Windows Modules Installer Service affected versions not specified Description The issue is related to the improper disclosure of file information by the Windows Modules Installer Service, which can allow an attacker to gain unauthorized access...

CVE-2020-0728: Undefined Security Weakness

An information vulnerability exists when Windows Modules Installer Service improperly discloses file information, aka 'Windows Modules Installer Service Information Disclosure Vulnerability'...

CVE-2019-2218

In createSessionInternal of PackageInstallerService.java, there is a possible improper permission grant due to a missing permission check. This could lead to local escalation of privilege by installing malicious packages with User execution privileges needed. User interaction is not needed for...

CVE-2019-1382

An elevation of privilege vulnerability exists when ActiveX Installer service may allow access to files without proper authentication, aka 'Microsoft ActiveX Installer Service Elevation of Privilege Vulnerability'...

Information disclosure

An information vulnerability exists when Windows Modules Installer Service improperly discloses file information, aka 'Windows Modules Installer Service Information Disclosure Vulnerability'...

CVE-2019-1418

The CVE-2019-1418 entry describes an information-disclosure vulnerability in Windows where the Windows Modules Installer Service improperly discloses file information. The affected component is the Windows Modules Installer Service; the underlying issue is an information disclosure vulnerability ...

Microsoft ActiveX Installer Service CVE-2019-1382 Local Privilege Escalation Vulnerability

Description Microsoft ActiveX Installer Service is prone to a local privilege-escalation vulnerability. An attacker can exploit this issue to gain the elevated privileges. Technologies Affected Microsoft Windows 10 Version 1607 for 32-bit Systems Microsoft Windows 10 Version 1607 for x64-based...

PT-2019-3878

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description The issue is related to an elevation of privilege vulnerability in the ActiveX Installer service, which may allow access to files without proper authentication. This could enable an attacker ...

PT-2019-3950

Name of the Vulnerable Software and Affected Versions Windows Modules Installer Service affected versions not specified Description The issue is related to the improper disclosure of file information by the Windows Modules Installer Service, potentially allowing unauthorized access to protected...

CVE-2019-1382: Undefined Security Weakness

An elevation of privilege vulnerability exists when ActiveX Installer service may allow access to files without proper authentication, aka 'Microsoft ActiveX Installer Service Elevation of Privilege Vulnerability'...

CVE-2019-1418: Exposure of Sensitive Information to an Unauthorized Actor

An information vulnerability exists when Windows Modules Installer Service improperly discloses file information, aka 'Windows Modules Installer Service Information Disclosure Vulnerability'...

KB4523205: Windows 10 Version 1809 and Windows Server 2019 November 2019 Security Update

The remote Windows host is missing security update 4523205. It is, therefore, affected by multiple vulnerabilities : - A security feature bypass vulnerability exists when Windows Netlogon improperly handles a secure communications channel. An attacker who successfully exploited the vulnerability...

KB4525233: Windows 7 and Windows Server 2008 R2 November 2019 Security Update

The remote Windows host is missing security update 4525233 or cumulative update 4525235. It is, therefore, affected by multiple vulnerabilities : - A remote code execution vulnerability exists when Windows Hyper-V Network Switch on a host server fails to properly validate input from an...

KLA11871 Multiple vulnerabilities in Microsoft Products (ESU)

Multiple vulnerabilities were found in Microsoft Products Extended Support Update. Malicious users can exploit these vulnerabilities to cause denial of service, gain privileges, execute arbitrary code, obtain sensitive information, bypass security restrictions. Below is a complete list of...

KB4525237: Windows 10 Version 1803 November 2019 Security Update

The remote Windows host is missing security update 4525237. It is, therefore, affected by multiple vulnerabilities : - A security feature bypass vulnerability exists when Windows Netlogon improperly handles a secure communications channel. An attacker who successfully exploited the vulnerability...

KLA11608 Multiple vulnerabilities in Microsoft Windows

Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to gain privileges, obtain sensitive information, cause denial of service, bypass security restrictions, execute arbitrary code. Below is a complete list of vulnerabilities: 1. An elevation...