PT-2020-3757 · Microsoft · Windows Cdp User Components +1

Name of the Vulnerable Software and Affected Versions: Windows CDP User Components affected versions not specified Description: The issue is related to improper memory handling by the Windows CDP User Components, which can lead to an elevation of privilege. To exploit this, an attacker must first...

PT-2020-3798 · Microsoft · Sharepoint Foundation +1

Name of the Vulnerable Software and Affected Versions: Microsoft SharePoint Server affected versions not specified Microsoft SharePoint Foundation affected versions not specified Microsoft SharePoint Enterprise Server affected versions not specified Description: An information disclosure issue...

PT-2020-3831 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to errors in handling memory objects in the Windows Network Connection Broker component. It allows an attacker to elevate their privileges using a specially crafted...

KB4565349: Windows 10 Version 1809 and Windows Server 2019 August 2020 Security Update

The remote Windows host is missing security update 4565349. It is, therefore, affected by multiple vulnerabilities : - A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory. An attacker who successfully exploited the vulnerability could instal...

Security Updates for Microsoft Access Products (August 2020)

The Microsoft Access Products are missing a security update. It is, therefore, affected by the following vulnerability : - A remote code execution vulnerability exists in Microsoft Access software when the software fails to properly handle objects in memory. An attacker who successfully exploited...

PT-2020-3823 · Microsoft · Windows State Repository Service +1

Name of the Vulnerable Software and Affected Versions: Windows State Repository Service affected versions not specified Description: An information disclosure issue exists due to the improper handling of objects in memory by the Windows State Repository Service. This could allow an attacker to...

Security Updates for Microsoft SharePoint 2016 (August 2020)

The Microsoft SharePoint Server installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities : - A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected...

PT-2020-3943 · Microsoft · Windows Gdi +1

Name of the Vulnerable Software and Affected Versions: Windows GDI component affected versions not specified Description: An information disclosure issue exists due to the improper handling of memory contents by the Windows GDI component. This could allow an attacker to obtain information that...

PT-2020-3941 · Microsoft · Windows Graphics +1

Name of the Vulnerable Software and Affected Versions: Microsoft Windows Graphics Component affected versions not specified Description: An information disclosure issue exists due to the improper handling of objects in memory by the Microsoft Windows Graphics Component. This could allow an attack...

PT-2020-3936 · Microsoft · Graphics +1

Name of the Vulnerable Software and Affected Versions: Microsoft Graphics Component affected versions not specified Description: The issue is related to the incorrect handling of objects in memory, which can allow an attacker to gain unauthorized access to protected information using a specially...

PT-2020-3980 · Microsoft · Windows Graphics +1

Name of the Vulnerable Software and Affected Versions: Windows Graphics Component affected versions not specified Description: The issue is related to the improper handling of objects in memory by the Windows Graphics Component, allowing an attacker to potentially run processes in an elevated...

PT-2020-3982 · Microsoft · Windows Function Discovery Ssdp Provider +1

Name of the Vulnerable Software and Affected Versions: Windows Function Discovery SSDP Provider affected versions not specified Description: The issue is related to an elevation of privilege vulnerability that exists when the Windows Function Discovery SSDP Provider improperly handles memory. To...

PT-2020-3935 · Microsoft · Windows Modules Installer +1

Name of the Vulnerable Software and Affected Versions: Windows Modules Installer affected versions not specified Description: An elevation of privilege issue exists due to the improper handling of objects in memory by Windows Modules Installer. This could allow an attacker to run arbitrary code i...

PT-2020-3942 · Microsoft · Windows Gdi +1

Name of the Vulnerable Software and Affected Versions: Windows GDI affected versions not specified Description: The issue is related to the improper handling of objects in memory by the Windows GDI component, which can lead to information disclosure. An attacker could exploit this by convincing a...

PT-2020-3975 · Microsoft · Edge +2

Name of the Vulnerable Software and Affected Versions: Windows Text Service Module affected versions not specified Description: A remote code execution issue exists due to improper memory handling by the Windows Text Service Module, allowing an attacker to gain execution on a victim system. This...

PT-2020-3939 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: An elevation of privilege issue exists due to the way the ssdpsrv.dll handles objects in memory. This could allow a locally authenticated attacker to execute code with elevated permissions ...

The vulnerability of the Windows Operating System’s Diagnostics & Feedback service allows attackers to disclose sensitive information.

The vulnerability of the Windows Operating Systems’ Diagnostics & Feedback service is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to disclose sensitive information that is protected by the system...

USN-4450-1: Whoopsie vulnerabilities

Seong-Joong Kim discovered that Whoopsie incorrectly handled memory. A local attacker could use this issue to cause Whoopsie to consume memory, resulting in a denial of service. CVE-2020-11937 Seong-Joong Kim discovered that Whoopsie incorrectly handled parsing files. A local attacker could use...

Microsoft Word Remote Code Execution Vulnerability (CNVD-2021-11035)

Microsoft Word is a word processing software in the Office suite of the U.S. company Microsoft Microsoft. A remote code execution vulnerability exists in Microsoft Word, which arises from the program's failure to properly handle objects in memory, and can be exploited by an attacker with the help...

Microsoft Windows Win32k Privilege Escalation

Exploit Title: Elevation of Privilege Author: nu11secur1ty Date: 08.03.2020 Exploit Date: 01/14/2020 Vendor: Microsoft Software Link: https://support.microsoft.com/en-us/help/3095649/win32k-sys-update-in-windows-october-2015 Exploit link:...