4901 matches found
Vulnerability of Windows operating systems, related to errors in processing certain symbolic links, allowing attackers to exploit their privileges
The vulnerability of Windows operating systems is related to errors in processing certain symbolic links. Exploiting this vulnerability can allow an attacker to enhance their privileges through a specially created application...
The vulnerability of the win32k component of the Windows operating system, which allows a hacker to increase their privileges
The vulnerability of the win32k component of the Windows operating system exists due to errors in memory object handling. Exploiting this vulnerability can allow an attacker to increase their privileges...
Minor update (3) for Vivaldi 2.10
Download Vivaldi The following change was made since the second 2.10 update: Upgraded Chromium to 79.0.3945.131 Main photo byJessica Henderson. One of the changes is a mitigation for the widely discussed Windows ECC certificate validation vulnerabilityCVE-2020-0601. However, we strongly recommend...
openSUSE Security Update : MozillaFirefox (openSUSE-2020-60)
This update for MozillaFirefox fixes the following issues : - Firefox Extended Support Release 68.4.1 ESR - Fixed: Security fix MFSA 2020-03 bsc1160498 - CVE-2019-17026 bmo1607443 IonMonkey type confusion with StoreElementHole and FallibleStoreElement - Firefox Extended Support Release 68.4.0 ESR...
CVE-2020-0644
An elevation of privilege vulnerability exists when Microsoft Windows implements predictable memory section names, aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0635...
CVE-2020-0616
A denial of service vulnerability exists when Windows improperly handles hard links, aka 'Microsoft Windows Denial of Service Vulnerability'...
CVE-2020-0630
An elevation of privilege vulnerability exists in the way that the Windows Search Indexer handles objects in memory, aka 'Windows Search Indexer Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0613, CVE-2020-0614, CVE-2020-0623, CVE-2020-0625, CVE-2020-0626,...
CVE-2020-0629
An elevation of privilege vulnerability exists in the way that the Windows Search Indexer handles objects in memory, aka 'Windows Search Indexer Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0613, CVE-2020-0614, CVE-2020-0623, CVE-2020-0625, CVE-2020-0626,...
VulnCheck KEV: CVE-2020-0609
A remote code execution vulnerability exists in Windows Remote Desktop Gateway RD Gateway when an unauthenticated attacker connects to the target system using RDP and sends specially crafted requests, aka 'Windows Remote Desktop Gateway RD Gateway Remote Code Execution Vulnerability'. This...
UBUNTU-CVE-2019-17015
During the initialization of a new content process, a pointer offset can be manipulated leading to memory corruption and a potentially exploitable crash in the parent process. Note: this issue only occurs on Windows. Other operating systems are unaffected.. This vulnerability affects Firefox ESR...
Mozilla Firefox Code Execution Vulnerability (CNVD-2020-02976)
Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. A security vulnerability exists in previous versions of Mozilla Firefox 72 for Windows-based platforms, which stems from the program not properly handling Python scripts. An attacker could exploit the...
The vulnerability of the dropboxupdate update service for Windows users allows a hacker to escalate their privileges.
The vulnerability of the dropboxupdate update service for Windows users of the Dropbox storage service is related to access control deficiencies. Exploiting this vulnerability could allow an attacker to elevate their privileges to root status using a specially created hard link...
PHP Memory Location Double Release Vulnerability
PHP PHP: Hypertext Preprocessor, PHP: Hypertext Preprocessor is an open source general-purpose computer scripting language jointly maintained by the PHPGroup and the open source community. The language is mainly used for Web development, supports a variety of databases and operating systems. A...
The vulnerability of the Windows AppX Deployment Server component allows attackers to increase their privileges.
The vulnerability of the Windows AppX Deployment Server component in operating systems with Windows is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...
The vulnerability of the Hyper-V hardware virtualization system in the Windows operating system allows a hacker to compromise and disclose sensitive information.
The vulnerability of the Hyper-V hardware virtualization technology in the Windows operating system exists due to insufficient checks on input data. Exploiting this vulnerability can allow attackers to disclose sensitive information through a specially created application...
Vulnerability of the Windows OLE operating system component, allowing a hacker to execute arbitrary code
The vulnerability of the Windows OLE operating system exists due to insufficient checking of input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the win32k component of the Windows operating system, which allows a hacker to disclose protected information
The vulnerability of the win32k component in the Windows operating system is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker to disclose protected information through a specially created application...
The vulnerability of the Windows GDI component in Windows operating systems allows attackers to disclose protected information.
The vulnerability of the Windows GDI component in Windows operating systems is related to deficiencies in security mechanisms. Exploiting this vulnerability can allow an attacker to disclose sensitive information through a specially crafted web page or file...
The vulnerability of the Endpoint Security Initial Client for Windows clients involves a lack of mechanisms for secure loading of DLL libraries, allowing attackers to exploit their privileges.
The vulnerability of Endpoint Security Initial Client for Windows involves a lack of a secure loading mechanism for DLL libraries. Exploiting this vulnerability allows an attacker to enhance their privileges by executing malicious software...