Lucene search
K

565 matches found

BDU FSTEC
BDU FSTEC
added 2021/04/27 12:0 a.m.1 views

The vulnerability of the Win32k component in Windows operating systems, which allows attackers to increase their privileges

The vulnerability of the Win32k component in Windows operating systems is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker to enhance their privileges...

7.8CVSS7AI score0.00605EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2021/04/27 12:0 a.m.2 views

The vulnerability of the Internet Messaging API component for Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the Internet Messaging API component for Windows operating systems is related to incorrect code generation. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

7.8CVSS7.6AI score0.0226EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2021/04/23 12:0 a.m.2 views

The vulnerability of the Diagnostics Hub Standard Collector Service for Microsoft Windows operating systems allows a perpetrator to escalate their privileges.

The vulnerability of the Diagnostics Hub Standard Collector Service for Microsoft Windows operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

7.8CVSS7.2AI score0.01039EPSS
Exploits0References3Affected Software2
BDU FSTEC
BDU FSTEC
added 2021/04/21 12:0 a.m.2 views

The vulnerability of the Windows Installer component on Microsoft Windows operating systems, which allows attackers to perform spoofing attacks

The vulnerability of the Windows Installer component in Microsoft Windows operating systems is related to information representation errors in the user interface. Exploiting this vulnerability can allow attackers to perform spoofing attacks...

6.2CVSS6.3AI score0.0071EPSS
Exploits0References3
CNNVD
CNNVD
added 2021/04/13 12:0 a.m.3 views

Microsoft Windows Installer 安全漏洞

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is an operating system for personal devices.Microsoft Windows Server is a server operating system. A spoofing vulnerability exists in the "Windows Installer" in Microsoft Windows and Window...

6.2CVSS5.6AI score0.0071EPSS
Exploits0References4
CNNVD
CNNVD
added 2021/04/13 12:0 a.m.4 views

Microsoft Windows 输入验证错误漏洞

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation, an operating system for personal devices, and Microsoft Windows Server, a server operating system. A denial of service vulnerability exists in the "TCP/IP driver" in Microsoft Windows and Windows Server,...

7.5CVSS5.7AI score0.06112EPSS
Exploits0References5
Positive Technologies
Positive Technologies
added 2021/04/13 12:0 a.m.1 views

PT-2021-2676 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Microsoft Windows affected versions not specified Description: The issue is related to incorrect code generation management in the Procedure Call Runtime component of Microsoft Windows operating systems. It allows remote attackers to execute...

8.8CVSS8.6AI score0.02315EPSS
Exploits0References13
BDU FSTEC
BDU FSTEC
added 2021/03/30 12:0 a.m.1 views

The vulnerability of the Media Photo Codec component in Windows operating systems allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Media Photo Codec component in Windows operating systems is related to security flaws in the handling of service data. Exploiting this vulnerability can allow attackers to gain unauthorized access to protected information...

5.5CVSS5.9AI score0.00834EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2021/03/30 12:0 a.m.1 views

The vulnerability of the Folder Redirection technology in Windows operating systems allows attackers to exploit their privileges.

The vulnerability of the Folder Redirection technology in Windows operating systems is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker to enhance their privileges...

7.8CVSS7.2AI score0.00921EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2021/03/30 12:0 a.m.1 views

The vulnerability of the DNS server service in Windows operating systems allows a hacker to cause a service failure.

The vulnerability of the DNS server service for Windows operating systems is related to errors in processing input data. Exploiting this vulnerability can allow a malicious actor to cause service failures...

7.5CVSS7.1AI score0.05741EPSS
Exploits0References2
CNNVD
CNNVD
added 2021/03/09 12:0 a.m.4 views

Microsoft Graphics Component 安全漏洞

Microsoft Graphics Component is a graphics driver component from Microsoft Corporation USA. A security vulnerability exists in Microsoft Graphics Component. The following products and versions are affected:Windows 10 Version 2004 for 32-bit Systems,Windows 10 Version 2004 for ARM64-based...

7.8CVSS7.2AI score0.02472EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2021/03/09 12:0 a.m.1 views

PT-2021-2413 · Microsoft · Windows Print Spooler +1

Name of the Vulnerable Software and Affected Versions: Windows Print Spooler affected versions not specified Description: The issue is related to insecure privilege management in the Windows Print Spooler component of Windows operating systems. Exploitation of this issue may allow an attacker to...

7.8CVSS7.8AI score0.00738EPSS
Exploits0References6
BDU FSTEC
BDU FSTEC
added 2021/02/23 12:0 a.m.2 views

The vulnerability of Microsoft Windows operating systems’ Windows Defender protection, allowing attackers to enhance their privileges.

The vulnerability of Microsoft Windows operating systems’ Windows Defender protection lies in privilege management errors. Exploiting this vulnerability can allow attackers to enhance their privileges...

7.8CVSS7.2AI score0.00545EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2021/02/16 12:0 a.m.3 views

The vulnerability of the Bluetooth service for Windows operating systems allows a perpetrator to increase their privileges and gain unauthorized access to protected information.

The vulnerability of the Bluetooth service for Windows operating systems is related to authentication errors. Exploiting this vulnerability can allow an attacker to increase their privileges and gain unauthorized access to protected information...

5.5CVSS6.4AI score0.0165EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2021/02/08 12:0 a.m.3 views

The vulnerability of the Windows GDI+ component in Windows operating systems allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Windows GDI+ component in Windows operating systems is related to deficiencies in security mechanisms. Exploiting this vulnerability can allow an attacker, acting remotely, to gain unauthorized access to protected information...

6.3CVSS6.6AI score0.03441EPSS
Exploits0References2
Mozilla
Mozilla
added 2021/02/05 12:0 a.m.539 views

Security Vulnerabilities fixed in Firefox 85.0.1 and Firefox ESR 78.7.1 — Mozilla

In the Angle graphics library, depth pitch computations did not take into account the block size and simply multiplied the row pitch with the pixel height. This caused the load functions to use a very high depth pitch, reading past the end of the user-supplied buffer.Note: This issue only affecte...

6.5CVSS6.2AI score0.00637EPSS
Exploits0References1Affected Software2
BDU FSTEC
BDU FSTEC
added 2021/01/21 12:0 a.m.1 views

The vulnerability of the splwow64.exe process in the Windows operating system, which allows a hacker to escalate their privileges

The vulnerability of the splwow64.exe process in Windows operating systems is related to call processing errors. Exploiting this vulnerability can allow attackers to gain increased privileges...

7.8CVSS6.9AI score0.01229EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2021/01/19 12:0 a.m.2 views

The vulnerability of the Windows Installer component on Windows operating systems, which allows a hacker to increase their privileges

The vulnerability of the Windows Installer component in Windows operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

7.8CVSS7.1AI score0.0082EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2021/01/12 12:0 a.m.2 views

PT-2021-1677 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to errors in privilege management within the Windows Update Stack component of Windows operating systems. This can allow a remote attacker to elevate their privileges...

9.8CVSS6.6AI score0.03248EPSS
Exploits0References7
UbuntuCve
UbuntuCve
added 2021/01/07 2:15 p.m.25 views

CVE-2020-35112

If a user downloaded a file lacking an extension on Windows, and then "Open"-ed it from the downloads panel, if there was an executable file in the downloads directory with the same name but with an executable extension such as .bat or .exe that executable would have been launched instead. Note:...

8.8CVSS7.2AI score0.01289EPSS
Exploits0References3
Rows per page
Query Builder