CVE-2020-1555

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge HTML-based. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who...

CVE-2020-1498

A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is logged on with...

CVE-2020-1417: Undefined Security Weakness

An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs; view, change, or delete data; or create ne...

CVE-2020-1566: Undefined Security Weakness

An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs; view, change, or delete data; or create ne...

CVE-2020-1581: Undefined Security Weakness

An elevation of privilege vulnerability exists in the way that Microsoft Office Click-to-Run C2R components handle objects in memory. An attacker who successfully exploited the vulnerability could elevate privileges. The attacker would need to already have the ability to execute code on the syste...

Microsoft Word Remote Code Execution Vulnerability (CNVD-2021-11034)

Microsoft Word is a word processing software in the Office suite of the U.S. company Microsoft Microsoft. A remote code execution vulnerability exists in Microsoft Word, which arises from the program's failure to properly handle memory objects, and can be exploited by an attacker with a specially...

Windows Kernel Privilege Escalation

The vulnerability of the kernel of Microsoft Windows is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to increase their privileges through a specially created application...

State Repository Service RCE

The vulnerability of the State Repository Service component of the Windows operating system is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to enhance their privileges and execute arbitrary code through a specially created application...

PT-2020-3841 · Microsoft · Windows Backup Service +1

Name of the Vulnerable Software and Affected Versions: Windows Backup Service versions affected versions not specified Description: The issue is related to errors in handling memory objects, which can be exploited by an attacker to elevate their privileges using a specially crafted application. T...

PT-2020-3714 · Microsoft · Office Click-To-Run

Name of the Vulnerable Software and Affected Versions: Microsoft Office Click-to-Run C2R affected versions not specified Description: An elevation of privilege issue exists due to the way Microsoft Office Click-to-Run C2R components handle objects in memory. This could allow an attacker to elevat...

Windows Memory Disclosure

The vulnerability of the Windows operating system is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to disclose sensitive information through a specially created application...

Windows kernel Privilege Escalation

The vulnerability of the Windows operating system’s kernel is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to enhance their privileges through a specially created application...

Windows wlansvc.dll Code Execution

The vulnerability of the wlansvc.dll library in the Windows operating system is related to errors in memory object handling. Exploiting this vulnerability allows an attacker to execute arbitrary code by launching a specially created application...

Windows kernel Privilege Escalation

The vulnerability of the Windows operating system’s kernel is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to enhance their privileges through a specially created application...

Windows Memory Error DoS

The vulnerability of Windows operating systems is related to errors in memory object handling. Exploiting this vulnerability can allow a remote attacker to cause a service failure through a specially created application...

Windows Network Connections Service Privilege Escalation

The vulnerability of the Windows Network Connections Service on Windows operating systems is related to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to enhance their privileges and execute arbitrary code using a specially created application...

Microsoft Office Memory Object Processing Unauthorized Access

The vulnerabilities of Microsoft Office packages, Microsoft Office Online Server, Microsoft Office Web Apps Server, Microsoft SharePoint Server, Microsoft SharePoint Enterprise Server, and the word processing software Microsoft Word are related to errors in memory object handling. Exploiting thes...

Windows Runtime Privilege Escalation

The vulnerability of the Windows Runtime component of the Windows operating system is related to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to enhance their privileges through a specially created application...

Windows Update Stack RCE

The vulnerability of the Windows Update Stack component in Windows operating systems is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to enhance their privileges and execute arbitrary code through a specially created application...

Windows kernel Privilege Escalation

The vulnerability of the Windows operating system’s kernel is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to enhance their privileges and execute arbitrary code in kernel mode using a specially created application...