886 matches found
CVE-2020-1385
CVE-2020-1385 affects the Windows Credential Picker. The vulnerability arises from how memory objects are handled, enabling local elevation of privilege if a crafted application runs on a vulnerable system. The CVE is tied to the Windows Credential Picker component and has a Local, Low-Complexity...
CVE-2020-1363
An elevation of privilege vulnerability exists when the Windows Picker Platform improperly handles memory.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'Windows Picker Platform Elevation of Privilege Vulnerability'...
CVE-2020-1363
CVE-2020-1363 is a Windows Picker Platform elevation of privilege vulnerability. The issue arises from improper handling of memory, enabling an attacker who already has execution on the target to elevate privileges by running a crafted application. This vulnerability is documented in multiple sou...
Windows Credential Picker Elevation of Privilege Vulnerability
An elevation of privilege vulnerability exists in the way that the Windows Credential Picker handles objects in memory. An attacker who successfully exploited the vulnerability could allow an application with limited privileges on an affected system to execute code at a medium integrity level. To...
Windows Picker Platform Elevation of Privilege Vulnerability
An elevation of privilege vulnerability exists when the Windows Picker Platform improperly handles memory. To exploit this vulnerability, an attacker would first have to gain execution on the victim system. An attacker could then run a specially crafted application to elevate privileges. The...
PT-2020-3165
Name of the Vulnerable Software and Affected Versions Windows Picker Platform affected versions not specified Description The issue arises from the Windows Picker Platform's improper handling of memory, leading to an elevation of privilege. To exploit this, an attacker must first gain execution o...
KB4565535: Windows Server 2012 July 2020 Security Update
The remote Windows host is missing security update 4565535 or cumulative update 4565537. It is, therefore, affected by multiple vulnerabilities : - A remote code execution vulnerability exists in the way that DirectWrite handles objects in memory. An attacker who successfully exploited this...
KB4565540: Windows 8.1 and Windows Server 2012 R2 July 2020 Security Update
The remote Windows host is missing security update 4565540 or cumulative update 4565541. It is, therefore, affected by multiple vulnerabilities : - A remote code execution vulnerability exists in the way that DirectWrite handles objects in memory. An attacker who successfully exploited this...
PT-2020-3101
Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description The issue is related to an elevation of privilege vulnerability in the way the Windows Credential Picker handles objects in memory. This vulnerability can be exploited by an attacker using a...
CVE-2020-1385: Undefined Security Weakness
An elevation of privilege vulnerability exists in the way that the Windows Credential Picker handles objects in memory, aka 'Windows Credential Picker Elevation of Privilege Vulnerability'...
CVE-2020-1363: Undefined Security Weakness
An elevation of privilege vulnerability exists when the Windows Picker Platform improperly handles memory.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'Windows Picker Platform Elevation of Privilege Vulnerability'...
KB4558998: Windows 10 Version 1809 and Windows Server 2019 July 2020 Security Update
The remote Windows host is missing security update 4558998. It is, therefore, affected by multiple vulnerabilities : - An elevation of privilege vulnerability exists when the Windows System Events Broker improperly handles file operations. An attacker who successfully exploited this vulnerability...
KB4565511: Windows 10 Version 1607 and Windows Server 2016 July 2020 Security Update
The remote Windows host is missing security update 4565511. It is, therefore, affected by multiple vulnerabilities : - An elevation of privilege vulnerability exists when the Windows System Events Broker improperly handles file operations. An attacker who successfully exploited this vulnerability...
CVE-2019-20413
Affected versions of Atlassian Jira Server and Data Center allow remote attackers to impact the application's availability via a Denial of Service DoS vulnerability on the UserPickerBrowser.jspa page. The affected versions are before version 7.13.9, and from version 8.0.0 before 8.4.2...
Description of the security update for SharePoint Server 2019: June 9, 2020
None None...
CMS Made Simple <= 2.2.14 Multiple XSS Vulnerabilities
CMS Made Simple is prone to multiple cross-site scripting XSS vulnerabilities. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
Mail.ru: Private file read through file attachment
my.com MyMail application for Android could be tricked by malicious local application selected as a file picker by user to copy the file from application folder to insecure location...
CVE-2020-13660
CMS Made Simple through 2.2.14 allows XSS via a crafted File Picker profile name...
