CVE-2020-0627

An elevation of privilege vulnerability exists in the way that the Windows Search Indexer handles objects in memory, aka 'Windows Search Indexer Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0613, CVE-2020-0614, CVE-2020-0623, CVE-2020-0625, CVE-2020-0626,...

PT-2020-1296 · Microsoft +2 · Asp.Net Core +2

Name of the Vulnerable Software and Affected Versions: ASP.NET Core affected versions not specified Description: A remote code execution issue exists due to errors in handling objects in memory. Successful exploitation by a remote attacker could allow the execution of arbitrary code in the contex...

The vulnerability of the Win32k component in Windows operating systems, which allows attackers to escalate their privileges

The vulnerability of the Win32k component in Windows operating systems is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to enhance their privileges through a specially created application...

The vulnerability of the Win32k component in Windows operating systems, which allows attackers to escalate their privileges

The vulnerability of the Win32k component in Windows operating systems is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to enhance their privileges through a specially created application...

The vulnerability in the Microsoft PowerPoint presentation preparation and viewing software, as well as in the Microsoft Office and Office 365 programs, allows a hacker to execute arbitrary code.

The vulnerability of Microsoft PowerPoint presentation preparation and viewing programs, as well as Microsoft Office and Office 365 suites, is related to errors in memory object handling. Exploiting this vulnerability allows a malicious actor to execute arbitrary code via a specially crafted web...

The vulnerability of the Windows Jet Database Engine component allows a perpetrator to execute arbitrary code.

The vulnerability of the Windows Jet Database Engine component in the operating system is related to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially crafted file...

The vulnerability of the Windows COM Server component of the Windows operating system, which allows a perpetrator to increase their privileges

The vulnerability of the Windows COM Server component of the operating system is related to errors in the processing of COM objects. Exploiting this vulnerability can allow attackers to enhance their privileges through a specially created application...

The vulnerability of the Windows Media Player component of the Windows operating system, which allows a hacker to disclose protected information

The vulnerability of Windows Media Player on the Windows operating system is related to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to disclose sensitive information through a specially created file...

Microsoft Word Denial of Service Vulnerability

Microsoft Word is a word processing software in the Office suite of the U.S. company Microsoft Microsoft. A denial of service vulnerability exists in Microsoft Word, which arises from the program's failure to properly handle objects in memory. An attacker can cause a denial of service by exploiti...

Vulnerabilities in JavaScript object handling functions of Firefox browsers, Firefox ESR, and Thunderbird email client, allowing attackers to access confidential information and cause service failures

The vulnerability in the JavaScript object handling functions of Firefox browsers, Firefox ESR, and the email client Thunderbird is related to a lack of type conversion mechanisms. Exploiting this vulnerability can allow an attacker to gain access to confidential information and cause service...

The vulnerability of the sscanf function in the newsrc.c file of the NeoMutt email client allows a hacker to execute arbitrary code due to errors in memory object handling.

The vulnerability of the sscanf function in the newsrc.c file of the NeoMutt email client is related to errors in processing objects in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

The vulnerabilities of Firefox, Firefox ESR, and the email client Thunderbird, related to errors in memory object handling, allow attackers to execute arbitrary code.

The vulnerabilities of the web browsers Firefox, Firefox ESR, and the email client Thunderbird are related to errors in memory object handling. Allowing these vulnerabilities to be exploited allows a remote attacker to execute arbitrary code...

The vulnerability of Firefox browser, related to errors in memory object handling, allows attackers to execute arbitrary code.

The vulnerability of the Firefox browser is related to errors in memory object handling. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

CVE-2019-1485

A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'VBScript Remote Code Execution Vulnerability'...

Win32k Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs; view, change, or delete data;...

The vulnerability of the Windows Installer component allows attackers to exploit their privileges.

The vulnerability of the Windows Installer component in operating systems is related to errors in the memory object handling mechanisms. Exploiting this vulnerability can allow an attacker to gain increased privileges...

The vulnerability of the Windows Modules Installer Service component in Windows operating systems allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Windows Modules Installer Service component in Windows operating systems is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

The vulnerability of the DirectWrite programming interface in Windows operating systems allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the DirectWrite programming interface in Windows operating systems is related to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information through a specially crafted document or web page...

The vulnerability of the Microsoft Office suite relates to errors in memory object handling, which allows an intruder to gain unauthorized access to protected information.

The vulnerability of the Microsoft Office suite is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

The vulnerability of the Win32k component in Windows operating systems allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Win32k component in Windows operating systems is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...