11356 matches found
Windows Imaging API Remote Code Execution Vulnerability
A remote code execution vulnerability exists when the Windows Imaging API improperly handles objects in memory. The vulnerability could corrupt memory in a way that enables an attacker to execute arbitrary code in the context of the current user. To exploit the vulnerability, an attacker would ha...
Microsoft Excel Remote Code Execution Vulnerability
A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is logged on with...
Open Enclave SDK Information Disclosure Vulnerability
An information disclosure vulnerability exists when affected Open Enclave SDK versions improperly handle objects in memory. An attacker who successfully exploited this vulnerability could obtain information stored in the Enclave. To exploit this vulnerability, an attacker would have to successful...
Jet Database Engine Remote Code Execution Vulnerability
A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory. An attacker who successfully exploited this vulnerability could execute arbitrary code on a victim system. An attacker could exploit this vulnerability by enticing a victim to...
Windows Code Integrity Module Information Disclosure Vulnerability
An information disclosure vulnerability exists in the way that the Windows Code Integrity Module handles objects in memory. An attacker who successfully exploited this vulnerability could obtain information to further compromise the user’s system. To exploit the vulnerability, an attacker would...
Windows Denial of Service Vulnerability
A denial of service vulnerability exists when Windows improperly handles objects in memory. An attacker who successfully exploited the vulnerability could cause a target system to stop responding. To exploit this vulnerability, an attacker would have to log on to an affected system and run a...
Windows Denial of Service Vulnerability
A denial of service vulnerability exists when Windows improperly handles objects in memory. An attacker who successfully exploited the vulnerability could cause a target system to stop responding. To exploit this vulnerability, an attacker would have to log on to an affected system and run a...
Win32k Elevation of Privilege Vulnerability
An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs; view, change, or...
PT-2019-3590
Name of the Vulnerable Software and Affected Versions Microsoft Internet Information Services affected versions not specified Description The issue is related to errors in handling objects in memory, which can be exploited by a remote attacker to elevate privileges. This allows an unprivileged...
PT-2019-3541 · Microsoft · Windows Update Client +1
Name of the Vulnerable Software and Affected Versions: Windows Update Client affected versions not specified Description: An information disclosure issue exists due to the Windows Update Client's improper handling of objects in memory. This could allow an attacker to gain unauthorized access to...
PT-2019-3510
Name of the Vulnerable Software and Affected Versions Windows Imaging API affected versions not specified Description The issue is related to the improper handling of objects in memory by the Windows Imaging API, which can be exploited to execute arbitrary code. This can be achieved by using a...
KB4519990: Windows 8.1 and Windows Server 2012 R2 October 2019 Security Update
The remote Windows host is missing security update 4519990 or cumulative update 4520005. It is, therefore, affected by multiple vulnerabilities : - A spoofing vulnerability exists when Microsoft Browsers improperly handle browser cookies. An attacker who successfully exploited this vulnerability...
The vulnerability of the Jet Database Engine database management system in the Windows operating system allows a hacker to execute arbitrary code.
The vulnerability of the Jet Database Engine database management system for the Windows operating system is related to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially created file...
The vulnerability in Microsoft Edge browsers, caused by errors in memory object handling, allows attackers to disclose protected information.
The vulnerability of Microsoft Edge exists due to errors in memory object handling. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information through a specially crafted web page...
The vulnerability of Microsoft Excel spreadsheet editors, as well as Microsoft Office and Office 365 products, relates to errors in memory object handling. This vulnerability allows attackers to execute arbitrary code.
The vulnerability of Microsoft Excel spreadsheet editors, as well as Microsoft Office and Office 365 products, exists due to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially created file...
The vulnerability in the implementation of the Microsoft Server Message Block (SMB) network protocol on Windows operating systems allows attackers to disclose sensitive information.
The vulnerability of the Microsoft Server Message Block SMB network protocol implementation in Windows operating systems exists due to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to disclose sensitive information through a specially created application...
The vulnerability of the Jet Database Engine database management system in the Windows operating system allows a hacker to execute arbitrary code.
The vulnerability of the Jet Database Engine database management system for the Windows operating system is related to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially created file...
The vulnerability of the DirectWrite programming interface in Windows operating systems allows attackers to disclose sensitive information.
The vulnerability of the DirectWrite programming interface in Windows operating systems is related to errors in object handling in memory. Exploiting this vulnerability can allow a remote attacker to disclose sensitive information through a specially crafted document or web page...
The vulnerability of the JavaScript script handler ChakraCore in the Microsoft Edge browser allows a perpetrator to escalate their privileges or execute arbitrary code.
The vulnerability of the ChakraCore JavaScript script handler in Microsoft Edge browser exists due to errors in memory object handling. Exploiting this vulnerability can allow a malicious actor to increase their privileges or execute arbitrary code through a specially created web page...
The vulnerability of the Microsoft JET Database Engine database driver on Windows operating systems, allowing a hacker to execute arbitrary code
The vulnerability of the Microsoft JET Database Engine driver for Windows operating systems is related to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...