PT-2020-5294 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to a lack of protection for system data in the Windows operating system. It allows an attacker to disclose protected information in Windows error reports. This can...

Microsoft Windows Backup Engine Security Vulnerability

Microsoft Windows is a suite of operating systems used by Microsoft Corporation USA for personal devices. A security vulnerability exists in Microsoft Windows Backup Engine that originates from an application that does not properly impose security restrictions in Windows Backup Engine, which coul...

Microsoft Windows Backup Engine Access Control Error Vulnerability

Microsoft Windows is a suite of operating systems used by Microsoft Corporation USA for personal devices. An Access Control Error vulnerability exists in Microsoft Windows Backup Engine that stems from an application not properly imposing security restrictions in Windows Backup Engine, which coul...

Microsoft Windows Licensing Issues Vulnerabilities

Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft Corporation USA. An authorization issue vulnerability exists in Microsoft Windows Network Connections Service. The following products and models are affected: Windows Server version 20H2 Server Core...

Microsoft Windows NTFS Security Vulnerability

Microsoft Windows NTFS is a file system from Microsoft USA that serves computer files. The file system has error warning, disk self-repair, and logging capabilities. A security vulnerability exists in Microsoft Windows NTFS. The following products and editions are affected:Windows Server 2012 R2...

Updates to XenBus Windows I/O driver - For Citrix Hypervisor and XenServer

Who Should Read This Article? This information is for customers using Citrix Hypervisor or XenServer who are entitled to receive automatic Windows I/O driver updates on their Windows VMs. Latest versions The following versions of XenBus are the latest that are available through Windows Automatic...

Updates to XenVIF Windows I/O driver - For Citrix Hypervisor and XenServer

Who Should Read This Article? This information is for customers using Citrix Hypervisor or XenServer who are entitled to receive automatic Windows I/O driver updates on their Windows VMs. Latest version The following versions of XenVIF are the latest that are available through Windows Automatic...

PT-2020-4776 · Microsoft +7 · Kerberos +9

Name of the Vulnerable Software and Affected Versions: Windows versions prior to the fixed version Description: A security feature bypass vulnerability exists in the way Key Distribution Center KDC determines if a service ticket can be used for delegation via Kerberos Constrained Delegation KCD. ...

CVE-2020-5793

A vulnerability in Nessus versions 8.9.0 through 8.12.0 for Windows & Nessus Agent 8.0.0 and 8.1.0 for Windows could allow an authenticated local attacker to copy user-supplied files to a specially constructed path in a specifically named user directory. An attacker could exploit this vulnerabili...

CVE-2020-4767

IBM Sterling Connect Direct for Microsoft Windows 4.7, 4.8, 6.0, and 6.1 could allow a remote attacker to cause a denial of service, caused by a buffer over-read. Bysending a specially crafted request, the attacker could cause the application to crash. IBM X-Force ID: 188906...

MontysThree: Industrial espionage with steganography and a Russian accent on both sides

In summer 2020 we uncovered a previously unknown multi-module C++ toolset used in highly targeted industrial espionage attacks dating back to 2018. Initially the reason for our interest in this malware was its rarity, the obviously targeted nature of the campaign and the fact that there are no...

PT-2020-3904 · Microsoft · Windows 10 +2

Name of the Vulnerable Software and Affected Versions: Microsoft Windows CloudExperienceHost versions prior to the fixed version Windows 10 versions 1909, 2004 Description: An elevation of privilege issue exists due to the failure of Microsoft Windows CloudExperienceHost to properly check COM...

CVE-2020-8207

Improper access control in Citrix Workspace app for Windows 1912 CU1 and 2006.1 causes privilege escalation and code execution when the automatic updater service is running...

Citrix Systems Workspace App Access Control Error Vulnerability (CNVD-2020-42654)

Citrix Systems Workspace App formerly known as Receiver is an application from Citrix Systems, Inc. that provides secure access to applications, desktops, and data. An access control error vulnerability exists in the automatic update service in the Citrix Systems Workspace App Windows 1912 LTSR a...

CVE-2020-1436

A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted fonts.For all systems except Windows 10, an attacker who successfully exploited the vulnerability could execute code remotely, aka 'Windows Font Library Remote Code Execution...

June 9, 2020—KB4561616 (OS Build 14393.3750)

None None...

May 12, 2020—KB4556813 (OS Build 14393.3686)

None None...

May 12, 2020—KB4556852 (Security-only update)

None None...

Foxit PDF Reader, PhantomPDF Open to Remote Code Execution

Foxit Software has released patches for dozens of high-severity flaws impacting its PDF reader and editor platforms. The most severe of the bugs, which exist on Windows versions of the software, enable a remote attacker to execute arbitrary code on vulnerable systems. Overall, Foxit Software...

CVE-2020-1991

An insecure temporary file vulnerability in Palo Alto Networks Traps allows a local authenticated Windows user to escalate privileges or overwrite system files. This issue affects Palo Alto Networks Traps 5.0 versions before 5.0.8; 6.1 versions before 6.1.4 on Windows. This issue does not affect...