Windows Cryptographic Services 权限许可和访问控制问题漏洞

Microsoft Windows Cryptographic Services is a cryptographic service provider program from Microsoft Corporation USA. A vulnerability exists in Windows Cryptographic Services due to privilege permission and access control issues. The following products and editions are affected:Windows 10 Version...

The vulnerability of the Cryptographic Services in the Windows operating system allows attackers to enhance their privileges.

The vulnerability of the Windows Cryptographic Services is related to access control errors. Exploiting this vulnerability can allow attackers to enhance their privileges...

CVE-2020-0782

An elevation of privilege vulnerability exists when the Windows Cryptographic Catalog Services improperly handle objects in memory. An attacker who successfully exploited this vulnerability could modify the cryptographic catalog. To exploit this vulnerability, an attacker would first have to log ...

Privilege escalation

An elevation of privilege vulnerability exists when the Windows Cryptographic Catalog Services improperly handle objects in memory. An attacker who successfully exploited this vulnerability could modify the cryptographic catalog. To exploit this vulnerability, an attacker would first have to log ...

CVE-2020-0782: Undefined Security Weakness

An elevation of privilege vulnerability exists when the Windows Cryptographic Catalog Services improperly handle objects in memory. An attacker who successfully exploited this vulnerability could modify the cryptographic catalog. To exploit this vulnerability, an attacker would first have to log ...

PT-2020-4160 · Microsoft · Windows Cryptographic Services +1

Name of the Vulnerable Software and Affected Versions: Windows Cryptographic Services affected versions not specified Description: The issue is related to errors in access control within the Windows Cryptographic Services, allowing an attacker to elevate their privileges. To exploit this, an...

PT-2020-1289

Name of the Vulnerable Software and Affected Versions Windows CryptoAPI Crypt32.dll versions prior to the fixed version Description A spoofing vulnerability exists in the way Windows CryptoAPI validates Elliptic Curve Cryptography ECC certificates. An attacker could exploit the vulnerability by...