Microsoft Office 365 ProPlus Elevation of Privilege Vulnerability

Microsoft Office is an office software suite of products from the U.S. company Microsoft Microsoft. The product's common components include Word, Excel, Access, Powerpoint, FrontPage, and so on. An elevation of privilege vulnerability exists in the OLicenseHeartbeat task in Microsoft Office 365...

The vulnerability of the SAP NetWeaver software integration platform, caused by deficiencies in the authentication process, allows attackers to increase their privileges.

The vulnerability of the SAP NetWeaver software integration platform is due to deficiencies in the authentication process. Exploiting this vulnerability can allow a malicious actor to gain increased privileges remotely...

Microsoft Windows Installer elevation of privilege vulnerability (CNVD-2020-16837)

Microsoft Windows is a set of operating systems for use on personal devices from the American company Microsoft. A privilege extraction vulnerability exists in Microsoft Windows Installer. An attacker could use this vulnerability to bypass access restrictions to add or delete files...

Security Bulletin: Multiple vulnerabilities in IBM Java Runtime affect Financial Transaction Manager for Digital Payments

Summary There are multiple vulnerabilities in IBM® Runtime Environment Java™ Version 8 used by Financial Transaction Manager for Digital Payments. Financial Transaction Manager for Digital Payments FTM DP has addressed the applicable CVEs. Vulnerability Details If you run your own Java code using...

CVE-2020-8950

The AUEPLauncher service in Radeon AMD User Experience Program Launcher through 1.0.0.1 on Windows allows elevation of privilege by placing a crafted file in %PROGRAMDATA%\AMD\PPC\upload and then creating a symbolic link in %PROGRAMDATA%\AMD\PPC\temp that points to an arbitrary folder with an...

Microsoft Windows and Microsoft Windows Server Elevation of Privilege Vulnerability (CNVD-2020-13564)

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is an operating system for personal devices.Microsoft Windows Server is a server operating system. An elevation of privilege vulnerability exists in Microsoft Windows and Microsoft Windows...

Microsoft Windows Malicious Software Removal Tool Elevation of Privilege Vulnerability

Microsoft Malicious Software Removal Tool is a suite of tools MSRT for detecting and removing specific popular malware from Microsoft USA. An elevation of privilege vulnerability exists in the Microsoft Windows Malicious Software Removal Tool. The vulnerability can be exploited by an attacker to...

Intel Renesas Electronics USB Privilege Lift Vulnerability

Intel Renesas Electronics USB is a driver for the USB 3 Renesas Electronics adapter, which is located in many common Intel motherboards. An elevation of privilege vulnerability exists in Intel Renesas Electronics USB. An attacker can exploit the vulnerability to potentially enable elevation of...

Microsoft Windows Graphics Component Elevation of Privilege Vulnerability (CNVD-2020-14699)

Microsoft Windows is a set of operating systems for use on personal devices from the American company Microsoft. An elevation of privilege vulnerability exists in the Microsoft Windows Graphics component that stems from the component not properly handling objects in memory. An attacker could...

Microsoft Windows and Microsoft Windows Server Elevation of Privilege Vulnerability (CNVD-2020-13558)

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is an operating system for personal devices.Microsoft Windows Server is a server operating system. An elevation of privilege vulnerability exists in Microsoft Windows and Microsoft Windows...

CVE-2020-0752

An elevation of privilege vulnerability exists in the way that the Windows Search Indexer handles objects in memory, aka 'Windows Search Indexer Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0666, CVE-2020-0667, CVE-2020-0735...

CVE-2020-0735

An elevation of privilege vulnerability exists in the way that the Windows Search Indexer handles objects in memory, aka 'Windows Search Indexer Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0666, CVE-2020-0667, CVE-2020-0752...

CVE-2020-0679

An elevation of privilege vulnerability exists in the way that the Windows Function Discovery Service handles objects in memory, aka 'Windows Function Discovery Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0680, CVE-2020-0682...

Service Tracing Privilege Elevation Vulnerability

This module leverages a trusted file overwrite with a DLL hijacking vulnerability to gain SYSTEM-level access on vulnerable Windows 10 x64 targets. Module Options msf use exploit/windows/local/cve/20200668servicetracing msf undefined20200668servicetracing show actions ...actions... msf...

Google Android Kernel Component Elevation of Privilege Vulnerability (CNVD-2020-04527)

Android is a free and open source Linux-based operating system led and developed by Google Inc. and the Open Handset Alliance. An elevation of privilege vulnerability exists in the Kernel component Binder driver in Google Android. No details of the vulnerability are available at this time...

Google Android Framework elevation of privilege vulnerability (CNVD-2020-07204)

Android is a free and open source Linux-based operating system led and developed by Google Inc. and the Open Handset Alliance. An elevation of privilege vulnerability exists in the Framework component of Google Android 10. No details of the vulnerability are available at this time...

Google Android System elevation of privilege vulnerability (CNVD-2020-07209)

Android is a Linux-based free and open source operating system led and developed by Google Inc. and the Open Handset Alliance. An elevation of privilege vulnerability exists in the System component of Google Android 8.0, 8.1, 9, and 10. No details of the vulnerability are available at this time...

MariaDB mysql_install_db Script Elevation of Privilege Vulnerability

The MariaDB database management system is a fork of MySQL, mainly maintained by the open source community under the GPL license. MariaDB is intended to be fully compatible with MySQL, including the API and command line, making it an easy replacement for MySQL. An elevation of privilege...

SUSE SLED12 / SLES12 Security Update : systemd (SUSE-SU-2020:0331-1)

This update for systemd fixes the following issues : CVE-2020-1712 bscbsc1162108 Fix a heap use-after-free vulnerability, when asynchronous Polkit queries were performed while handling Dbus messages. A local unprivileged attacker could have abused this flaw to crash systemd services or potentiall...

Security Bulletin: Multiple Vulnerabilities in IBM Java Runtime Affect IBM Sterling Secure Proxy

Summary There are multiple vulnerabilities in IBM® Runtime Environment Java™ Version 1.8 used by IBM Sterling Secure Proxy. These issues were disclosed as part of the IBM Java SDK updates in January 2019. Vulnerability Details CVEID: CVE-2018-12547 DESCRIPTION: Eclipse OpenJ9 is vulnerable to a...