CVE-2019-11736

The Mozilla Maintenance Service does not guard against files being hardlinked to another file in the updates directory, allowing for the replacement of local files, including the Maintenance Service executable, which is run with privileged access. Additionally, there was a race condition during...

CVE-2019-6145

Forcepoint VPN Client for Windows versions lower than 6.6.1 have an unquoted search path vulnerability. This enables local privilege escalation to SYSTEM user. By default, only local administrators can write executables to the vulnerable directories. Forcepoint thanks Peleg Hadar of SafeBreach La...

The vulnerability of Microsoft Graphics Components in the Windows operating system allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of Microsoft Graphics Components in the Windows operating system exists due to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

The vulnerability of the unistore.dll library in the Windows operating system, which allows attackers to escalate their privileges

The vulnerability of the unistore.dll library in the Windows operating system is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to enhance their privileges through a specially created application...

The vulnerability of the Windows operating system, related to errors in processing files with the .LNK extension, allows a hacker to execute arbitrary code.

The vulnerability of the Windows operating system is related to errors in processing files with the extension .LNK. Exploiting this vulnerability allows an attacker to execute arbitrary code on the target system with current user privileges, by placing a specially created file in a network file...

The vulnerability of the win32k component of the Windows operating system, which allows a hacker to execute arbitrary code in kernel mode

The vulnerability of the win32k component of the Windows operating system is related to errors in object handling in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code in kernel mode using a specially created application...

The vulnerability of the executable file FortiClientOnlineInstaller.exe of the Fortinet FortiClient for Windows security device allows a perpetrator to execute arbitrary code.

The vulnerability of the FortiClientOnlineInstaller.exe executable component of the Fortinet FortiClient for Windows security device is related to deficiencies in access control. Exploiting this vulnerability could allow a attacker to execute arbitrary code using a specially created DLL file...

CVE-2019-1291

A remote code execution vulnerability exists in the Windows Remote Desktop Client when a user connects to a malicious server, aka 'Remote Desktop Client Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0787, CVE-2019-0788, CVE-2019-1290...

CVE-2019-1269

An elevation of privilege vulnerability exists when Windows improperly handles calls to Advanced Local Procedure Call ALPC.An attacker who successfully exploited this vulnerability could run arbitrary code in the security context of the local system, aka 'Windows ALPC Elevation of Privilege...

CVE-2019-1280

A remote code execution vulnerability exists in Microsoft Windows that could allow remote code execution if a .LNK file is processed.An attacker who successfully exploited this vulnerability could gain the same user rights as the local user, aka 'LNK Remote Code Execution Vulnerability'...

CVE-2019-1256

An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-1285...

VulnCheck KEV: CVE-2019-1215

Microsoft Windows contains an unspecified vulnerability due to the way ws2ifsl.sys Winsock handles objects in memory, allowing for privilege escalation. Successful exploitation allows an attacker to execute code with elevated privileges...

CVE-2019-9855

LibreOffice is typically bundled with LibreLogo, a programmable turtle vector graphics script, which can execute arbitrary python commands contained with the document it is launched from. LibreOffice also has a feature where documents can specify that pre-installed scripts can be executed on...

The vulnerability of the Windows operating system arises from operations that go beyond buffer boundaries in memory, allowing attackers to trigger a system failure.

The vulnerability of the Windows operating system arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor, operating remotely, to cause a service failure through a specially created application...

The vulnerability of the Hyper-V hardware virtualization system in the Windows operating system allows a hacker to trigger a service failure.

The vulnerability of the Hyper-V hardware virtualization system in the Windows operating system exists due to insufficient verification of input data on the host server. Exploiting this vulnerability can allow a malicious actor to cause service failures through a specially created application...

The vulnerability of the Core Shell COM Server component in Windows operating systems allows attackers to exploit their privileges.

The vulnerability of the Core Shell COM Server component in Windows operating systems is related to errors in handling COM calls. Exploiting this vulnerability can allow attackers to enhance their privileges through a specially created application...

The vulnerability of the PsmServiceExtHost.dll library in the Windows operating system allows a hacker to elevate their privileges and execute arbitrary code.

The vulnerability of the PsmServiceExtHost.dll library in the Windows operating system is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to enhance their privileges and execute arbitrary code through a specially created application...

The vulnerability of the p2pimsvc service in the Windows operating system allows a hacker to escalate their privileges and execute arbitrary code.

The vulnerability of the p2pimsvc service in the Windows operating system is related to privilege management errors. Exploiting this vulnerability can allow an attacker to elevate their privileges and execute arbitrary code through a specially created application...

The vulnerability of the rpcss.dll library in the Windows operating system allows a hacker to elevate their privileges and execute arbitrary code.

The vulnerability of the rpcss.dll library in the Windows operating system is related to object handling errors in memory. Exploiting this vulnerability can allow an attacker to enhance their privileges and execute arbitrary code through a specially created application...

The vulnerability of the WCMSVC.dll library in the Windows operating system allows attackers to escalate their privileges and execute arbitrary code.

The vulnerability of the wcmsvc.dll library in the Windows operating system is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to enhance their privileges and execute arbitrary code through a specially created application...