CVE-2020-1472 Netlogon Elevation of Privilege Vulnerability

...

CVE-2020-1472

An elevation of privilege vulnerability exists when an attacker establishes a vulnerable Netlogon secure channel connection to a domain controller, using the Netlogon Remote Protocol MS-NRPC. An attacker who successfully exploited the vulnerability could run a specially crafted application on a...

Elevation of Privilege Vulnerability in Tianrongxin Endpoint Threat Prevention System

Tianrongxin Terminal Threat Defense System is a set of computer active defense software developed by Tianrongxin. A privilege elevation vulnerability exists in Tianrongxin Terminal Threat Defense System. An attacker can exploit the vulnerability to view the runtime parameters...

CVE-2020-15145 Local privilege elevation in Composer-Setup for Windows

In Composer-Setup for Windows before version 6.0.0, if the developer's computer is shared with other users, a local attacker may be able to exploit the following scenarios. 1. A local regular user may modify the existing C:\ProgramData\ComposerSetup\bin\composer.bat in order to get elevated comma...

Microsoft Windows and Microsoft Windows Server Elevation of Privilege Vulnerability (CNVD-2020-48260)

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is an operating system for personal devices.Microsoft Windows Server is a server operating system. An elevation of privilege vulnerability exists in Microsoft Windows and Microsoft Windows...

Microsoft Windows and Microsoft Windows Server Elevation of Privilege Vulnerability (CNVD-2020-48261)

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is an operating system for personal devices.Microsoft Windows Server is a server operating system. An elevation of privilege vulnerability exists in Microsoft Windows and Microsoft Windows...

Microsoft Windows and Microsoft Windows Server Elevation of Privilege Vulnerability (CNVD-2020-48272)

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is an operating system for personal devices.Microsoft Windows Server is a server operating system. An elevation of privilege vulnerability exists in Microsoft Windows and Microsoft Windows...

Microsoft Windows Work Folders Service Elevation of Privilege Vulnerability

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is an operating system for personal devices.Microsoft Windows Server is a server operating system. An elevation of privilege vulnerability exists in Microsoft Windows Work Folders Service,...

Microsoft Windows and Microsoft Windows Server Elevation of Privilege Vulnerability (CNVD-2020-49361)

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation, U.S.A. Microsoft Windows is an operating system for personal devices.Microsoft Windows Server is a server operating system. Windows Backup Engine is one of the Windows backup engines. An elevation of...

Microsoft Windows and Microsoft Windows Server Elevation of Privilege Vulnerability (CNVD-2020-49364)

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is an operating system for personal devices.Microsoft Windows Server is a server operating system. An elevation of privilege vulnerability exists in Microsoft Windows and Microsoft Windows...

Microsoft Windows and Microsoft Windows Server Elevation of Privilege Vulnerability (CNVD-2020-49379)

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation, U.S.A. Microsoft Windows is an operating system for personal devices.Microsoft Windows Server is a server operating system. Windows Backup Engine is one of the Windows backup engines. An elevation of...

Adobe Lightroom Classic Insecure Library Loading Vulnerability

Adobe Lightroom is an image organization and image processing software. An insecure library loading vulnerability exists in Adobe Lightroom Classic 9.2.0.10 and earlier versions, which can be exploited by attackers to achieve elevation of privilege...

Microsoft Windows Multiple Vulnerabilities (KB4571729)

This host is missing a critical security update according to Microsoft KB4571729 SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2020-6546

Inappropriate implementation in installer in Google Chrome prior to 84.0.4147.125 allowed a local attacker to potentially elevate privilege via a crafted filesystem...

Windows GDI Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists in the way that the Windows Graphics Device Interface GDI handles objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs; view, change, or delete...

PT-2020-3827 · Microsoft · Windows File Server Resource Management Service +1

Name of the Vulnerable Software and Affected Versions: Windows File Server Resource Management Service affected versions not specified Description: The issue is related to the improper handling of memory by the Windows File Server Resource Management Service, which can lead to an elevation of...

PT-2020-3834 · Microsoft · Windows Accounts Control +1

Name of the Vulnerable Software and Affected Versions: Windows Accounts Control affected versions not specified Description: The issue is related to an elevation of privilege vulnerability that occurs when the Windows Accounts Control improperly handles memory. To exploit this, an attacker must...

PT-2020-3802 · Microsoft · Windows Custom Protocol Engine +1

Name of the Vulnerable Software and Affected Versions: Windows Custom Protocol Engine affected versions not specified Description: The issue is caused by a buffer overflow in memory due to improper handling by the Windows Custom Protocol Engine. To exploit this, an attacker must first gain...

PT-2020-3833 · Microsoft · Windows Remote Access +1

Name of the Vulnerable Software and Affected Versions: Windows Remote Access affected versions not specified Description: The issue is related to an elevation of privilege vulnerability in Windows Remote Access, which occurs due to improper handling of memory. This can allow an attacker to elevat...

JetBrains TeamCity Elevation of Privilege Vulnerability

JetBrains TeamCity is a set of distributed build management and continuous integration tools from the Czech company JetBrains. The tool provides continuous unit testing, code quality analysis and build problem analysis reports and other features. A security vulnerability exists in versions of...