Microsoft Windows and Microsoft Windows Server Elevation of Privilege Vulnerability (CNVD-2020-13558)

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is an operating system for personal devices.Microsoft Windows Server is a server operating system. An elevation of privilege vulnerability exists in Microsoft Windows and Microsoft Windows...

CVE-2020-0752

An elevation of privilege vulnerability exists in the way that the Windows Search Indexer handles objects in memory, aka 'Windows Search Indexer Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0666, CVE-2020-0667, CVE-2020-0735...

CVE-2020-0735

An elevation of privilege vulnerability exists in the way that the Windows Search Indexer handles objects in memory, aka 'Windows Search Indexer Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0666, CVE-2020-0667, CVE-2020-0752...

CVE-2020-0679

An elevation of privilege vulnerability exists in the way that the Windows Function Discovery Service handles objects in memory, aka 'Windows Function Discovery Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0680, CVE-2020-0682...

PT-2020-1673

Name of the Vulnerable Software and Affected Versions Windows Client License Service ClipSVC affected versions not specified Description The issue is related to errors in handling objects in memory within the Windows Client License Service ClipSVC. It allows an attacker to potentially elevate the...

PT-2020-1605

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description The issue is related to errors in handling the creation of COM objects in the Windows COM Server component of the Windows operating system. Exploitation of this issue may allow an attacker to...

PT-2020-1705

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description The issue is related to errors in handling objects in memory within the Connected Devices Platform Service CDPSvc of the Windows operating system. It allows an attacker to potentially elevate...

PT-2020-1688

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description The issue is related to the improper handling of privileges by the Input Method Editor IME component in the Windows operating system. This can be exploited by an attacker to elevate their...

PT-2020-1626

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description The issue is related to errors in handling objects in memory, which can be exploited to elevate privileges. This allows an attacker to affect the system. Recommendations At the moment, there ...

PT-2020-1629

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description The issue is related to errors in handling memory objects, which can be exploited to elevate privileges. This allows an attacker to affect the system. Recommendations At the moment, there is ...

PT-2020-1670

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description The issue is related to insecure privilege management in the Win32k component of Windows operating systems. It allows an attacker to potentially elevate their privileges using a specially...

PT-2020-1694

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description The issue concerns a component of the Windows operating system, specifically Win32k, which has insecure privilege management. This allows an attacker to potentially elevate their privileges...

PT-2020-1601

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description The issue is related to errors in handling objects in memory within the Windows Function Discovery service of Windows operating systems. It allows an attacker to potentially elevate their...

PT-2020-1723

Name of the Vulnerable Software and Affected Versions Microsoft Edge affected versions not specified Description The issue is related to the incorrect enforcement of cross-domain policies in Microsoft Edge, allowing an attacker to elevate their privileges. This could enable an attacker to access...

PT-2020-1716

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description The issue is related to errors in handling memory objects, which can be exploited to elevate privileges. This allows an attacker to affect the system. Recommendations At the moment, there is ...

PT-2020-1709

Name of the Vulnerable Software and Affected Versions Windows Data Sharing Service affected versions not specified Description The issue is related to errors in file handling within the Windows Data Sharing Service of the Windows operating system. It allows an attacker to potentially elevate thei...

Service Tracing Privilege Elevation Vulnerability

This module leverages a trusted file overwrite with a DLL hijacking vulnerability to gain SYSTEM-level access on vulnerable Windows 10 x64 targets. Module Options msf use exploit/windows/local/cve/20200668servicetracing msf undefined20200668servicetracing show actions ...actions... msf...

PT-2020-2715

Name of the Vulnerable Software and Affected Versions Nanometrics Centaur versions 4.3.23 and earlier Nanometrics TitanSMA versions 4.2.20 and earlier Description The issue is related to inadequate access control in the syslog log handling. It may allow a remote attacker to elevate privileges by...

Google Android System elevation of privilege vulnerability (CNVD-2020-07209)

Android is a Linux-based free and open source operating system led and developed by Google Inc. and the Open Handset Alliance. An elevation of privilege vulnerability exists in the System component of Google Android 8.0, 8.1, 9, and 10. No details of the vulnerability are available at this time...

Google Android Kernel Component Elevation of Privilege Vulnerability (CNVD-2020-04527)

Android is a free and open source Linux-based operating system led and developed by Google Inc. and the Open Handset Alliance. An elevation of privilege vulnerability exists in the Kernel component Binder driver in Google Android. No details of the vulnerability are available at this time...