PT-2020-2788

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description The issue is related to insecure privilege management in the Windows operating system kernel. It allows an attacker to potentially elevate their privileges and execute arbitrary code using a...

PT-2020-2736

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description The issue is related to insecure privilege management in the Windows operating system kernel. It allows an attacker to potentially elevate their privileges and execute arbitrary code using a...

PT-2020-2796

Name of the Vulnerable Software and Affected Versions Windows Security Health Service affected versions not specified Description The issue is related to insecure privilege management in the Windows Security Health Service, allowing an attacker to elevate their privileges. To exploit this, an...

PT-2020-2744

Name of the Vulnerable Software and Affected Versions Windows Connected Devices Platform Service affected versions not specified Description The issue is related to an elevation of privilege vulnerability in the way the Connected Devices Platform Service handles objects in memory. This...

PT-2020-6168 · Packagekit +3 · Packagekit +3

Name of the Vulnerable Software and Affected Versions: PackageKit affected versions not specified Description: The issue is related to PackageKit's apt backend, which incorrectly treats all local debs as trusted. This is problematic because the apt security model relies on repository trust rather...

PT-2020-5926

Name of the Vulnerable Software and Affected Versions: Secret Net Studio affected versions not specified Description: The issue is related to insecure privilege management in the SnCloneVault.sys driver of the Secret Net Studio information protection system. Exploitation of this issue could allow...

CVE-2020-13776: Improper Privilege Management

systemd through v245 mishandles numerical usernames such as ones composed of decimal digits or 0x followed by hex digits, as demonstrated by use of root privileges when privileges of the 0x0 user account were intended. NOTE: this issue exists because of an incomplete fix for CVE-2017-1000082...

The vulnerability of the Windows operating system, related to operations going beyond the buffer boundaries in memory, allows attackers to escalate their privileges or execute arbitrary code.

The vulnerability of the Windows operating system is related to the insecure management of privileges. Exploiting this vulnerability can allow an attacker to enhance their privileges or execute arbitrary code...

The vulnerability of the Windows Installer component on Windows operating systems allows a perpetrator to increase their privileges or execute arbitrary code.

The vulnerability of the Windows Installer component in Windows operating systems is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker to enhance their privileges or execute arbitrary code...

The vulnerability of the Windows Print Spooler component of the Windows operating system allows a hacker to increase their privileges or execute arbitrary code.

The vulnerability of the Windows Print Spooler component of the Windows operating system is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker to enhance their privileges or execute arbitrary code through a specially created application...

The vulnerability of the Windows operating system’s swap buffer allows a hacker to increase their privileges or execute arbitrary code.

The vulnerability of the Windows operating system’s swap buffer is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker to enhance their privileges or execute arbitrary code using a specially created application...

The vulnerability of the Windows Update Stack component on Windows operating systems allows a perpetrator to escalate their privileges or execute arbitrary code.

The vulnerability of the Windows Update Stack component in operating systems is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker to enhance their privileges or execute arbitrary code using a specially created application...

The vulnerability of the Windows operating system’s swap buffer allows a hacker to increase their privileges or execute arbitrary code.

The vulnerability of the Windows operating system’s swap buffer is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker to enhance their privileges or execute arbitrary code using a specially created application...

The vulnerability of the Storage Service component of the Windows operating system, which allows a hacker to increase their privileges

The vulnerability of the Storage Service component in the Windows operating system is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker to enhance their privileges...

The vulnerability of the grub2-set-bootflag utility of the Grub2 operating system, which allows a hacker to trigger a service failure.

The vulnerability of the grub2-set-bootflag utility of the Grub2 operating system is related to insecure management of privileges. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability in the web interface of the Cisco Integrated Management Controller (IMC) Supervisor, as well as in tools for managing physical infrastructure and virtual environments such as Cisco UCS Director and Cisco UCS Director Express for Big Data, allows attackers to compromise the integrity of protected information.

The vulnerability in the Web interface for managing the Cisco Integrated Management Controller IMC Supervisor, as well as the tools for managing physical infrastructure and virtual environments such as Cisco UCS Director and Cisco UCS Director Express for Big Data, is related to privilege...

CVE-2020-12860: Improper Privilege Management

COVIDSafe through v1.0.17 allows a remote attacker to access phone name and model information because a BLE device can have four roles and COVIDSafe uses all of them. This allows for re-identification of a device, and potentially identification of the owner's name...

The vulnerability of Connected User Experiences and Telemetry Services for Windows operating systems allows attackers to execute processes with elevated privileges.

The vulnerability of Connected User Experiences and Telemetry Services in Windows operating systems is related to insecure management of privileges. Exploiting this vulnerability could allow an attacker to execute processes with elevated privileges through a specially created application...

The vulnerability of the Microsoft RMS Sharing App for Mac operating systems lies in its insecure management of privileges. This allows a malicious user to install programs, view, modify, or delete data with the rights of an authorized user.

The vulnerability of the Microsoft RMS Sharing App for Mac operating systems lies in the insecure management of privileges. Exploiting this vulnerability could allow a malicious individual to install programs, view, modify, or delete data with the rights of an authorized user...

The vulnerability of the DirectX component in Windows operating systems allows a hacker to execute arbitrary code in kernel mode.

The vulnerability of the DirectX component in Windows operating systems is related to insecure management of privileges. Exploiting this vulnerability allows an attacker to execute arbitrary code in kernel mode using a specially created application...