CVE-2020-1389: Improper Initialization

An information disclosure vulnerability exists when the Windows kernel fails to properly initialize a memory address, aka 'Windows Kernel Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2020-1367, CVE-2020-1419, CVE-2020-1426...

CVE-2020-1419: Missing Initialization of Resource

An information disclosure vulnerability exists when the Windows kernel fails to properly initialize a memory address, aka 'Windows Kernel Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2020-1367, CVE-2020-1389, CVE-2020-1426...

F5 Networks BIG-IP : Spectre SWAPGS gadget vulnerability (K31085564)

The version of F5 Networks BIG-IP installed on the remote host is prior to 13.1.3.5 / 14.1.2.7 / 15.0.1.4 / 15.1.0.5 / 16.0.0. It is, therefore, affected by a vulnerability as referenced in the K31085564 advisory. An information disclosure vulnerability exists when certain central processing unit...

KB4565513: Windows 10 July 2020 Security Update

The remote Windows host is missing security update 4565513. It is, therefore, affected by multiple vulnerabilities : - An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could...

Introducing Kernel Data Protection, a new platform security technology for preventing data corruption

Attackers, confronted by security technologies that prevent memory corruption, like Code Integrity CI and Control Flow Guard CFG, are expectedly shifting their techniques towards data corruption. Attackers use data corruption techniques to target system security policy, escalate privileges, tampe...

Windows Kernel Privilege Escalation

The vulnerability of the kernel of Microsoft Windows relates to the improper handling of objects in memory. Exploiting this vulnerability can allow an attacker to enhance their privileges by running a specially created application...

Windows Kernel Privilege Escalation

The vulnerability of the kernel of Microsoft Windows relates to the improper handling of objects in memory. Exploiting this vulnerability can allow an attacker to enhance their privileges by running a specially created application...

Windows Kernel Privilege Escalation

The vulnerability of the kernel of Microsoft Windows relates to the improper handling of objects in memory. Exploiting this vulnerability can allow an attacker to enhance their privileges by running a specially created application...

Windows Kernel Privilege Escalation

The vulnerability of the kernel of Microsoft Windows relates to the improper handling of objects in memory. Exploiting this vulnerability can allow an attacker to enhance their privileges by running a specially created application...

Windows Kernel Memory Object Handling

The vulnerability of the Windows operating system’s kernel is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to enhance their privileges through a specially created application...

Windows kernel Privilege Escalation

The vulnerability of the Windows operating system’s kernel is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to enhance their privileges and gain access to modify, add, or delete data through a specially created application...

Windows kernel Privilege Escalation

The vulnerability of the Windows operating system’s kernel is related to insecure management of privileges. Exploiting this vulnerability allows an attacker to enhance their privileges and execute arbitrary code through a specially created application...

Windows kernel bypass security restrictions

The vulnerability of the Windows operating system’s kernel is related to the bypassing of security functions. Exploiting this vulnerability allows an attacker to circumvent existing security restrictions...

Windows kernel Privilege Escalation

The vulnerability of the Windows operating system’s kernel is related to insecure management of privileges. Exploiting this vulnerability allows an attacker to enhance their privileges and execute arbitrary code through a specially created application...

Windows kernel Privilege Escalation

The vulnerability of the Windows operating system’s kernel is related to insecure management of privileges. Exploiting this vulnerability allows an attacker to enhance their privileges and execute arbitrary code through a specially created application...

Windows kernel Privilege Escalation

The vulnerability of the Windows operating system’s kernel is related to insecure management of privileges. Exploiting this vulnerability allows an attacker to enhance their privileges and execute arbitrary code through a specially created application...

June 9, 2020—KB4560960 (OS Builds 18362.900 and 18363.900) - EXPIRED

None None...

FF Sandbox Escape (CVE-2020-12388)

By James Forshaw, Project Zero In my previous blog post I discussed an issue with the Windows Kernel’s handling of Restricted Tokens which allowed me to escape the Chrome GPU sandbox. Originally I’d planned to use Firefox for the proof-of-concept as Firefox uses the same effective sandbox level a...

Microsoft Windows Kernel Elevation of Privilege Vulnerability (CNVD-2021-29550)

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is an operating system for personal devices.Microsoft Windows Server is a server operating system. Windows Kernel is one of the Windows system kernels. An elevation of privilege vulnerabili...

Microsoft Windows Kernel Security Feature Bypass Vulnerability

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is an operating system for personal devices.Microsoft Windows Server is a server operating system. Windows Kernel is one of the Windows system kernels. A security feature bypass vulnerabili...