EUVD-2020-8987

Malware in sbrugna...

The vulnerability of the Windows MSCTF Server component of the Windows operating system allows attackers to disclose protected information.

The vulnerability of the Windows MSCTF Server component exists due to insufficient testing of input data. Exploiting this vulnerability can allow an attacker to disclose protected information...

Microsoft Windows/Windows Server Information Disclosure Vulnerability (CNVD-2021-63304)

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation USA, Microsoft Windows is an operating system for personal devices, and Microsoft Windows Server is a server operating system. Microsoft Windows/Windows Server MSCTF Server is vulnerable to information...

CVE-2020-17030

Windows MSCTF Server Information Disclosure Vulnerability...

CVE-2020-17030

Windows MSCTF Server Information Disclosure Vulnerability...

Information disclosure

Windows MSCTF Server Information Disclosure Vulnerability...

CVE-2020-17030

Technical details for CVE-2020-17030 are not publicly available in the provided documents. Monitor for updates from the connected feeds for affected products, components, and remediation guidance.

CVE-2020-17030 Windows MSCTF Server Information Disclosure Vulnerability

...

CVE-2020-17030: Undefined Security Weakness

Windows MSCTF Server Information Disclosure Vulnerability...

Windows MSCTF Server Information Disclosure Vulnerability

...

KLA12004 Multiple vulnerabilities in Microsoft Windows

Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to obtain sensitive information, execute arbitrary code, gain privileges, bypass security restrictions, cause denial of service, spoof user interface. Below is a complete list of...

KB4586785: Windows 10 Version 1803 November 2020 Security Update

The Microsoft 4586785 Product is missing security updates. - Remote Desktop Protocol Server Information Disclosure Vulnerability CVE-2020-16997 - DirectX Elevation of Privilege Vulnerability CVE-2020-16998 - Windows WalletService Information Disclosure Vulnerability CVE-2020-16999 - Remote Deskto...

Microsoft Internet Explorer CTSF3CandidateMessage Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Internet Explorer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

April 21, 2020—KB4550969 (OS Build 17763.1192)

None None...

Microsoft Windows Text Services Framework MSCTF - Multiple Vulnerabilities

Microsoft Windows Text Services Framework MSCTF - Multiple Vulnerabilities The msctf subsystem is part of the Text Services Framework, The TSF manages things like input methods, keyboard layouts, text processing and so on. There are two main components, the ctfmon server and the msctf client. The...

Microsoft Windows Text Services Framework MSCTF - Multiple Vulnerabilities

The msctf subsystem is part of the Text Services Framework, The TSF manages things like input methods, keyboard layouts, text processing and so on. There are two main components, the ctfmon server and the msctf client. The ctfmon service creates an ALPC port in a well known location, to which...

Microsoft Windows Text Services Framework MSCTF - Multiple Vulnerabilities

The msctf subsystem is part of the Text Services Framework, The TSF manages things like input methods, keyboard layouts, text processing and so on. There are two main components, the ctfmon server and the msctf client. The ctfmon service creates an ALPC port in a well known location, to which...

Google Discloses 20-Year-Old Unpatched Flaw Affecting All Versions of Windows

Update — With this month's patch Tuesday updates, Microsoft has finally addressed this vulnerability, tracked as CVE-2019-1162, by correcting how the Windows operating system handles calls to Advanced Local Procedure Call ALPC. A Google security researcher has just disclosed details of a...

CVE-2017-10773

XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to "Data from Faulting Address controls Branch Selection starting at MSCTF!CtfImeCreateThreadMgr+0x00000000000000a8."...

Microsoft Internet Explorer CACPWrap Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Internet Explorer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The vulnerability relates to how...