PT-2020-4148 · Microsoft · Windows Universal Plug/Play (Upnp) Service +1

Name of the Vulnerable Software and Affected Versions: Windows Universal Plug and Play UPnP service affected versions not specified Description: An elevation of privilege issue exists due to the improper handling of objects in memory by the Windows Universal Plug and Play UPnP service. This could...

PT-2020-4041 · Microsoft · Windows Runtime +1

Name of the Vulnerable Software and Affected Versions: Windows Runtime affected versions not specified Description: The issue is related to errors in handling objects in memory within the Windows Runtime component of the Windows operating system. This can be exploited by an attacker to elevate...

PT-2020-4038 · Microsoft · Chakracore +1

Name of the Vulnerable Software and Affected Versions: Microsoft Edge ChakraCore affected versions not specified Description: A remote code execution issue exists in the way the ChakraCore scripting engine handles objects in memory. This could allow an attacker to corrupt memory and execute...

Security Updates for Microsoft Word Products (September 2020)

The Microsoft Word Products are missing a security update. It is, therefore, affected by the following vulnerability : - A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory. An attacker who successfully exploited the...

KB4577071: Windows 8.1 and Windows Server 2012 R2 September 2020 Security Update

The remote Windows host is missing security update 4577071 or cumulative update 4577066. It is, therefore, affected by multiple vulnerabilities : - An elevation of privilege vulnerability exists when the Windows RSoP Service Application improperly handles memory. CVE-2020-0648 - An elevation of...

CVE-2019-8678

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, Safari 12.1.2, iTunes for Windows 12.9.6, iCloud for Windows 7.13, iCloud for Windows 10.6. Processing maliciously crafted web content may lead to...

CVE-2019-8766

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in watchOS 6.1, iCloud for Windows 11.0. Processing maliciously crafted web content may lead to arbitrary code execution...

CVE-2020-3868

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1, tvOS 13.3.1, Safari 13.0.5, iTunes for Windows 12.10.4, iCloud for Windows 11.0, iCloud for Windows 7.17. Processing maliciously crafted web content may lead to...

CVE-2020-3862

A denial of service issue was addressed with improved memory handling. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1, tvOS 13.3.1, Safari 13.0.5, iTunes for Windows 12.10.4, iCloud for Windows 11.0, iCloud for Windows 7.17. A malicious website may be able to cause a denial of service...

CVE-2020-3900

A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 13.4 and iPadOS 13.4, tvOS 13.4, watchOS 6.2, Safari 13.1, iTunes for Windows 12.10.5, iCloud for Windows 10.9.3, iCloud for Windows 7.18. Processing maliciously crafted web content may lead to...

CVE-2020-3901

A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 13.4 and iPadOS 13.4, tvOS 13.4, watchOS 6.2, Safari 13.1, iTunes for Windows 12.10.5, iCloud for Windows 10.9.3, iCloud for Windows 7.18. Processing maliciously crafted web content may lead to arbitrar...

CVE-2020-3897

A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 13.4 and iPadOS 13.4, tvOS 13.4, watchOS 6.2, Safari 13.1, iTunes for Windows 12.10.5, iCloud for Windows 10.9.3, iCloud for Windows 7.18. A remote attacker may be able to cause arbitrary code execution...

The vulnerability of the dnsrslvr.dll library in the Windows operating system allows a hacker to increase their privileges.

The vulnerability of the dnsrslvr.dll library in the Windows operating system is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to enhance their privileges through a specially created application...

The vulnerability of the PDF Reader component of the Microsoft Edge browser, which allows a hacker to execute arbitrary code.

The vulnerability of the PDF Reader component of the Microsoft Edge browser is related to errors in memory object handling. Exploiting this vulnerability may allow a remote attacker to execute arbitrary code...

The vulnerability of Windows CDP user components in the Windows operating system allows attackers to escalate their privileges.

The vulnerability of Windows CDP user components in the Windows operating system is related to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to enhance their privileges by running a specially created application...

The vulnerability of the Internet Explorer browser’s script handler allows a hacker to execute arbitrary code.

The vulnerability of the Internet Explorer browser’s script handler exists due to errors in memory object handling. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the SSDP protocol implementation in the Windows operating system allows attackers to increase their privileges.

The vulnerability of the SSDP protocol implementation in the Windows operating system exists due to errors in memory object handling. Exploiting this vulnerability can allow an attacker to increase their privileges...

Microsoft Excel Remote Code Execution Vulnerability (CNVD-2020-50145)

Microsoft Excel is a spreadsheet processing software in the Office suite from Microsoft USA. A remote code execution vulnerability exists in Microsoft Excel 2010 SP2, which stems from the program's failure to properly handle memory objects. The vulnerability can be exploited to execute arbitrary...

The vulnerability of the DirectWrite programming interface in Windows operating systems allows attackers to disclose sensitive information.

The vulnerability of the DirectWrite programming interface in Windows operating systems is related to errors in object handling in memory. Exploiting this vulnerability can allow a remote attacker to expose sensitive information, by convincing the user to visit a malicious web page or open a...

The vulnerability of the Microsoft Windows Codecs Library, which is used for processing media content on Windows operating systems, allows a hacker to execute arbitrary code.

The vulnerability of the Microsoft Windows Codecs Library for processing media content exists due to errors in object handling in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially created image file from a remote location...