Microsoft Windows Input Validation Vulnerability

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation, an operating system for personal devices, and Microsoft Windows Server, a server operating system. A denial of service vulnerability exists in the "TCP/IP driver" in Microsoft Windows and Windows Server,...

Microsoft Windows Installer security vulnerabilities

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is an operating system for personal devices.Microsoft Windows Server is a server operating system. A spoofing vulnerability exists in the "Windows Installer" in Microsoft Windows and Window...

Media Photo Codec Unauthorized Access

The vulnerability of the Media Photo Codec component in Windows operating systems is related to security flaws in the handling of service data. Exploiting this vulnerability can allow attackers to gain unauthorized access to protected information...

DNS Server Service Windows DoS

The vulnerability of the DNS server service for Windows operating systems is related to errors in processing input data. Exploiting this vulnerability can allow a malicious actor to cause service failures...

Folder Redirection Privilege Escalation

The vulnerability of the Folder Redirection technology in Windows operating systems is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker to enhance their privileges...

PT-2021-2413 · Microsoft · Windows Print Spooler +1

Name of the Vulnerable Software and Affected Versions: Windows Print Spooler affected versions not specified Description: The issue is related to insecure privilege management in the Windows Print Spooler component of Windows operating systems. Exploitation of this issue may allow an attacker to...

Microsoft Graphics Component security vulnerabilities

Microsoft Graphics Component is a graphics driver component from Microsoft Corporation USA. A security vulnerability exists in Microsoft Graphics Component. The following products and versions are affected:Windows 10 Version 2004 for 32-bit Systems,Windows 10 Version 2004 for ARM64-based...

Windows Defender Privilege Escalation

The vulnerability of Microsoft Windows operating systems’ Windows Defender protection lies in privilege management errors. Exploiting this vulnerability can allow attackers to enhance their privileges...

Bluetooth Service Privilege Escalation

The vulnerability of the Bluetooth service for Windows operating systems is related to authentication errors. Exploiting this vulnerability can allow an attacker to increase their privileges and gain unauthorized access to protected information...

Windows GDI+ Unauthorized Access

The vulnerability of the Windows GDI+ component in Windows operating systems is related to deficiencies in security mechanisms. Exploiting this vulnerability can allow an attacker, acting remotely, to gain unauthorized access to protected information...

Security Vulnerabilities fixed in Firefox 85.0.1 and Firefox ESR 78.7.1 — Mozilla

In the Angle graphics library, depth pitch computations did not take into account the block size and simply multiplied the row pitch with the pixel height. This caused the load functions to use a very high depth pitch, reading past the end of the user-supplied buffer.Note: This issue only affecte...

splwow64.exe Privilege Escalation

The vulnerability of the splwow64.exe process in Windows operating systems is related to call processing errors. Exploiting this vulnerability can allow attackers to gain increased privileges...

Windows Installer Privilege Escalation

The vulnerability of the Windows Installer component in Windows operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

PT-2021-1677 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to errors in privilege management within the Windows Update Stack component of Windows operating systems. This can allow a remote attacker to elevate their privileges...

CVE-2020-35112

If a user downloaded a file lacking an extension on Windows, and then "Open"-ed it from the downloads panel, if there was an executable file in the downloads directory with the same name but with an executable extension such as .bat or .exe that executable would have been launched instead. Note:...

CVE-2020-26966

Searching for a single word from the address bar caused an mDNS request to be sent on the local network searching for a hostname consisting of that string; resulting in an information leak. Note: This issue only affected Windows operating systems. Other operating systems are unaffected.. This...

Text Services Framework Unauthorized Access

The vulnerability of the Text Services Framework software interface in Windows operating systems is related to incorrect handling of objects in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

Network File System Windows Unauthorized Access

The vulnerability of the Network File System NFS on Windows operating systems relates to operations that occur outside the buffer boundaries. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

Remote Desktop Protocol Server Unauthorized Access

The vulnerability of the Remote Desktop Protocol Server for Windows operating systems relates to operations that occur outside of the buffer. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information from a remote location...

Remote Desktop Service Disclosure Sensitive Information

The vulnerability of the remote desktop service for Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to disclose protected information...