1997 matches found
The vulnerability of the Hyper-V hardware virtualization system in the Windows operating system allows a hacker to trigger a service failure.
The vulnerability of the Hyper-V hardware virtualization system in the Windows operating system exists due to insufficient verification of input data on the host server. Exploiting this vulnerability can allow a malicious actor to cause service failures through a specially created application...
The vulnerability of the RDP protocol implementation in Windows operating systems allows a hacker to trigger a service failure.
The vulnerability of the RDP protocol implementation in Windows operating systems is related to errors in processing RDP requests. Exploiting this vulnerability allows a malicious actor to cause service failures by sending specially crafted requests...
The vulnerability of the Hyper-V hardware virtualization system in the Windows operating system allows a hacker to compromise and disclose sensitive information.
The vulnerability of the Hyper-V hardware virtualization technology in the Windows operating system is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker to disclose protected information...
Microsoft Windows Remote Desktop Client Remote Code Execution Vulnerability
Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is an operating system for personal devices.Microsoft Windows Server is a server operating system. Windows Remote Desktop Client is one of the Windows remote desktop client programs. A remo...
Microsoft Windows Common Log File System Driver Privilege Vulnerability
Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is an operating system for personal devices.Microsoft Windows Server is a server operating system. Windows Common Log File System Driver is one of the common log file system drivers. A...
CVE-2019-11751
Logging-related command line parameters are not properly sanitized when Firefox is launched by another program, such as when a user clicks on malicious links in a chat application. This can be used to write a log file to an arbitrary location such as the Windows 'Startup' folder. Note: this issue...
The vulnerability of the Hyper-V hardware virtualization system in the Windows operating system allows a hacker to trigger a service failure.
The vulnerability of the Hyper-V hardware virtualization system in the Windows operating system exists due to insufficient verification of input data on the host server. Exploiting this vulnerability can allow a malicious actor to cause service failures through a specially created application...
The vulnerability of the WCMSVC.dll library in the Windows operating system allows attackers to escalate their privileges and execute arbitrary code.
The vulnerability of the wcmsvc.dll library in the Windows operating system is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to enhance their privileges and execute arbitrary code through a specially created application...
The vulnerability of the File Signature Security function in the Windows operating system allows a hacker to circumvent existing security restrictions and introduce malicious code into a CAB file without canceling the file’s signature.
The vulnerability of the File Signature Security function in the Windows operating system is related to errors in checking the signatures of CAB files. Exploiting this vulnerability allows a hacker to bypass existing security restrictions and inject malicious code into CAB files without...
The vulnerability of the SyncController.dll library on the Windows operating system allows a hacker to elevate their privileges and execute arbitrary code.
The vulnerability of the SyncController.dll library on the Windows operating system is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to enhance their privileges and execute arbitrary code through a specially created application...
PT-2019-3912 · Microsoft · Windows
Name of the Vulnerable Software and Affected Versions: Microsoft Windows affected versions not specified Description: The issue is related to errors in handling objects in memory in the Win32k component of Windows operating systems. It allows an attacker to potentially elevate their privileges...
The vulnerability of Azure Active Directory (AAD) for managing authentication and access to Windows operating systems allows a perpetrator to gain access to a user account.
The vulnerability of Azure Active Directory AAD for managing authentication and access control on Windows operating systems is related to errors in processing MSA Managed Service Accounts cookie files. Exploiting this vulnerability could allow a malicious actor to gain access to a user account...
The vulnerability relates to the implementation of the HTTP/2 network protocol on Windows operating systems, Apache Traffic Server web servers, network software such as Envoy, and Node.js software platforms. This allows attackers to induce service interruptions.
The vulnerability of the HTTP/2 network protocol implementation in Windows operating systems, Apache Traffic Server web servers, networking software like Envoy, and Node.js software platforms is related to an uncontrolled resource consumption. Exploiting this vulnerability can allow a malicious...
The vulnerability of the Windows GDI component in Windows operating systems allows attackers to disclose protected information.
The vulnerability of the Windows GDI component in Windows operating systems is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to disclose sensitive information through a specially crafted document or web page...
Microsoft Windows and Windows Server Remote Code Execution Vulnerability
Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is an operating system for personal devices.Microsoft Windows Server is a server operating system. A remote code execution vulnerability exists in Microsoft Windows, which arises from the...
The vulnerability of the Cisco Webex Network Recording Player and Cisco Webex Player for Windows operating systems allows a perpetrator to execute arbitrary code.
The vulnerability of the Cisco Webex Network Recording Player and Cisco Webex Player for Windows operating systems is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending a specially crafted...
4 New BlueKeep-like 'Wormable' Windows Remote Desktop Flaws Discovered
If you are using any supported version of the Windows operating system, stop everything and install the latest security updates from Microsoft immediately. Windows operating system contains four new critical wormable, remote code execution vulnerabilities in Remote Desktop Services, similar to th...
PT-2019-3052 · Microsoft · Windows
Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to an elevation of privilege in SyncController.dll, allowing an attacker to run arbitrary code with elevated privileges. To exploit this, an attacker would need to run ...
The vulnerability of the RDP protocol implementation in Windows operating systems allows attackers to circumvent two-factor authentication mechanisms.
The vulnerability of the RDP protocol implementation in Windows operating systems is related to errors in processing RDP sessions based on NLA. Exploiting this vulnerability allows an attacker to circumvent two-factor authentication mechanisms by temporarily disconnecting via RDP and then...
The vulnerability of the DirectWrite programming interface in Windows operating systems allows attackers to gain unauthorized access to protected information.
The vulnerability of the DirectWrite programming interface in Windows operating systems is related to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...