Lucene search
+L

2271 matches found

Microsoft CVE
Microsoft CVE
added 2020/04/14 7:0 a.m.53 views

Connected User Experiences and Telemetry Service Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists when Connected User Experiences and Telemetry Service improperly handles file operations. An attacker who successfully exploited this vulnerability could run processes in an elevated context. An attacker could exploit this vulnerability by running a...

7.8CVSS3.1AI score0.01019EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2020/04/14 12:0 a.m.47 views

KB4550927: Windows 10 Version 1709 April 2020 Security Update

The remote Windows host is missing security update 4550927. It is, therefore, affected by multiple vulnerabilities : - An elevation of privilege vulnerability exists when a Windows scheduled task improperly handles file redirections. An attacker who successfully exploited this vulnerability could...

9.3CVSS8.3AI score0.69166EPSS
SaveExploits4References63
Tenable Nessus
Tenable Nessus
added 2020/04/14 12:0 a.m.78 views

KB4549949: Windows 10 Version 1809 and Windows Server 2019 April 2020 Security Update

The remote Windows host is missing security update 4549949. It is, therefore, affected by multiple vulnerabilities : - An elevation of privilege vulnerability exists when the Windows Update Stack fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability...

9.3CVSS8.2AI score0.69166EPSS
SaveExploits4References70
Tenable Nessus
Tenable Nessus
added 2020/04/14 12:0 a.m.66 views

KB4550922: Windows 10 Version 1803 April 2020 Security Update

The remote Windows host is missing security update 4550922. It is, therefore, affected by multiple vulnerabilities : - An elevation of privilege vulnerability exists when the Windows Update Stack fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability...

9.3CVSS8.3AI score0.69166EPSS
SaveExploits4References67
Microsoft KB
Microsoft KB
added 2020/04/10 12:0 a.m.8 views

Update for Work Folders improvements in Windows 7 SP1

Update for Work Folders improvements in Windows 7 SP1 About this update This update ensures that users are able to continue using Work Folders after they upgrade from Windows 7 SP1 to Windows 10. This update must be applied to the client before the upgrade, in order to maintain the sync partnersh...

6.1AI score
SaveExploits0
Akamai Blog
Akamai Blog
added 2020/03/24 11:30 a.m.37 views

Simplifying the ISP Transition to DNS Encryption

New protocols to encrypt DNS traffic, DNS over HTTPS DoH and DNS over TLS DoT, have been a visible Internet topic for the past two years. Akamai participated in the definition of DoH/DoT standards and recently released support in the high-performance CacheServe resolver. Major features include:...

0.3AI score
SaveExploits0
ThreatPost
ThreatPost
added 2020/03/18 9:14 p.m.52 views

Azure Red Flag: Microsoft Accidentally Fixes Cloud Config ‘Bug’

UPDATE Researchers are shedding light on a Microsoft Azure misconfiguration bug that leaked sensitive access tokens, which could have given hackers access to virtual machine instances and cloud-based storage buckets. Since its discovery, an update has fixed what researchers said was a...

7.1AI score
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2020/03/18 12:0 a.m.7 views

The vulnerability of the Connected User Experiences and Telemetry operating system services allows attackers to enhance their privileges.

The vulnerability of the Connected User Experiences and Telemetry operating system services is related to file operation processing errors. Exploiting this vulnerability can allow attackers to enhance their privileges through a specially created application...

7.8CVSS7.2AI score0.00756EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2020/03/18 12:0 a.m.10 views

The vulnerability of the Connected User Experiences and Telemetry Services for Windows operating systems allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Connected User Experiences and Telemetry Services for Windows operating systems stems from the lack of protection for service-related data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information through a specially created...

5.5CVSS5.9AI score0.01531EPSS
SaveExploits0References2
Carbon Black Blog
Carbon Black Blog
added 2020/03/17 3:15 p.m.46 views

Evaluating EPP in the Time of XDR

The endpoint detection and response EDR market is not only more critical than ever, it is also going through the biggest period of innovation in its history – bigger than when EDR was first introduced by Carbon Black 7 years ago. This next wave of innovation is about extending EDR beyond the...

SaveExploits0
ThreatPost
ThreatPost
added 2020/03/16 5:16 p.m.60 views

Microsoft Edge Shares Privacy-Busting Telemetry, Research Alleges

Microsoft Edge is one of the least private web browsers — even more so than other popular browsers like Google Chrome and Mozilla Firefox — according to academic researchers. According to the analysis, from Douglas Leith with the School of Computer Science and Statistics at Trinity College in...

0.3AI score
SaveExploits0References7
ThreatPost
ThreatPost
added 2020/03/16 5:16 p.m.23 views

Microsoft Edge Shares Privacy-Busting Telemetry, Research Alleges

Microsoft Edge is one of the least private web browsers — even more so than other popular browsers like Google Chrome and Mozilla Firefox — according to academic researchers. According to the analysis, from Douglas Leith with the School of Computer Science and Statistics at Trinity College in...

0.3AI score
SaveExploits0References7
CNVD
CNVD
added 2020/03/13 12:0 a.m.5 views

Microsoft Windows Connected User Experiences and Telemetry Service Information Disclosure Vulnerability

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is an operating system for personal devices.Microsoft Windows Server is a server operating system. An information disclosure vulnerability exists in Microsoft Windows Connected User...

5.5CVSS6.1AI score0.01531EPSS
SaveExploits0References1
OSV
OSV
added 2020/03/12 4:15 p.m.4 views

CVE-2020-0863

An information vulnerability exists when Windows Connected User Experiences and Telemetry Service improperly discloses file information, aka 'Connected User Experiences and Telemetry Service Information Disclosure Vulnerability'...

5.5CVSS6.1AI score0.01531EPSS
SaveExploits0References1
NVD
NVD
added 2020/03/12 4:15 p.m.21 views

CVE-2020-0863

An information vulnerability exists when Windows Connected User Experiences and Telemetry Service improperly discloses file information, aka 'Connected User Experiences and Telemetry Service Information Disclosure Vulnerability'...

5.5CVSS5.5AI score0.01531EPSS
SaveExploits0References1
NVD
NVD
added 2020/03/12 4:15 p.m.13 views

CVE-2020-0844

An elevation of privilege vulnerability exists when Connected User Experiences and Telemetry Service improperly handles file operations, aka 'Connected User Experiences and Telemetry Service Elevation of Privilege Vulnerability'...

7.8CVSS8.7AI score0.00756EPSS
SaveExploits0References1
OSV
OSV
added 2020/03/12 4:15 p.m.6 views

CVE-2020-0844

An elevation of privilege vulnerability exists when Connected User Experiences and Telemetry Service improperly handles file operations, aka 'Connected User Experiences and Telemetry Service Elevation of Privilege Vulnerability'...

7.8CVSS7.1AI score0.00756EPSS
SaveExploits0References1
Prion
Prion
added 2020/03/12 4:15 p.m.15 views

Information disclosure

An information vulnerability exists when Windows Connected User Experiences and Telemetry Service improperly discloses file information, aka 'Connected User Experiences and Telemetry Service Information Disclosure Vulnerability'...

2.1CVSS5.4AI score0.01531EPSS
SaveExploits0References1Affected Software2
CVE
CVE
added 2020/03/12 3:48 p.m.98 views

CVE-2020-0863

CVE-2020-0863 affects Windows with the Connected User Experiences and Telemetry Service, where the service improperly discloses file information, enabling a local attacker to read files on the file system. Public exploits are noted in community sources. The vulnerability is addressed by Microsoft...

5.5CVSS6AI score0.01531EPSS
SaveExploits0References1Affected Software2
CVE
CVE
added 2020/03/12 3:48 p.m.84 views

CVE-2020-0844

CVE-2020-0844 is an elevation of privilege in Windows, tied to the Connected User Experiences and Telemetry Service. The underlying issue is improper handling of file operations by this service, which could allow a local attacker to run code with elevated privileges. Remediation text in connected...

7.8CVSS8.5AI score0.00756EPSS
SaveExploits0References1Affected Software8
Rows per page
Query Builder