CVE-2020-14999

A logic bug in system monitoring driver of Acronis Agent after 12.5.21540 and before 12.5.23094 allowed to bypass Windows memory protection and access sensitive data...

CVE-2020-14999

CVE-2020-14999 affects Acronis Agent’s system monitoring driver, where a logic bug allowed bypassing Windows memory protection and accessing sensitive data. Publicly documented affected range is 12.5.21540 through 12.5.23093; a fix appears in 12.5.23094. The issue is described across multiple sou...

PT-2021-9732

Name of the Vulnerable Software and Affected Versions Acronis Agent versions 12.5.21540 through 12.5.23094 Description A logic bug in the system monitoring driver of Acronis Agent allowed bypassing Windows memory protection and accessing sensitive data. Recommendations For Acronis Agent versions...

win32k Privilege Escalation

The vulnerability of the win32k component in the Windows operating system is related to incorrect handling of objects in memory. Exploiting this vulnerability can allow an attacker to enhance their privileges through a specially created application...

NetBIOS Unauthorized Access

The vulnerability of the NetBIOS protocol implementation in Windows operating systems is related to errors in object memory handling. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

Avast Antivirus Password Management Vulnerability

Avast Antivirus is a suite of antivirus software from the Czech company Avast. version 20.1.5069.562 of Avast Antivirus contains a password management vulnerability that could be exploited by an attacker to continue storing entered passwords in the Windows main memory...

CVE-2020-15024

An issue was discovered in the Login Password feature of the Password Manager component in Avast Antivirus 20.1.5069.562. An entered password continues to be stored in Windows main memory after a logout, and after a Lock Vault operation...

CVE-2020-15024: Improper Removal of Sensitive Information Before Storage or Transfer

An issue was discovered in the Login Password feature of the Password Manager component in Avast Antivirus 20.1.5069.562. An entered password continues to be stored in Windows main memory after a logout, and after a Lock Vault operation...

CVE-2020-1430

An elevation of privilege vulnerability exists when the Windows UPnP Device Host improperly handles memory.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'Windows UPnP Device Host Elevation of Privilege Vulnerability'. This CVE ID is unique...

VBScript Script Handlers Code Execution

The vulnerability of VBScript script handlers in Windows operating systems is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely, using a specially crafted web page or document...

DirectWrite Unprotected Access

The vulnerability of the DirectWrite programming interface in Windows operating systems is related to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information through a specially crafted document or web page...

Win32k Privilege Escalation

The vulnerability of the Win32k component in Windows operating systems is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to enhance their privileges through a specially created application...

PT-2019-15818 · Teamviewer · Teamviewer

Name of the Vulnerable Software and Affected Versions: TeamViewer desktop application version 14.3.4730 Description: An issue in the Chat functionality of the TeamViewer desktop application on Windows allows every communication to be saved within Windows main memory upon login. When a user logs o...

DirectWrite Disclosure

The vulnerability of the DirectWrite programming interface in Windows operating systems is related to errors in object handling in memory. Exploiting this vulnerability can allow a remote attacker to disclose sensitive information through a specially crafted document or web page...

PsmServiceExtHost DLL Code Execution

The vulnerability of the PsmServiceExtHost.dll library in the Windows operating system is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to enhance their privileges and execute arbitrary code through a specially created application...

CVE-2019-0716

A denial of service vulnerability exists when Windows improperly handles objects in memory. An attacker who successfully exploited the vulnerability could cause a target system to stop responding. To exploit this vulnerability, an attacker would have to log on to an affected system and run a...

OPENSUSE-SU-2019:1664-1 Security update for MozillaThunderbird

This update for MozillaThunderbird fixes the following issues: Mozilla Thunderbird was updated to 60.7.2 / MFSA 2019-20 boo1138872: CVE-2019-11707: Type confusion in Array.pop CVE-2019-11708: sandbox escape using Prompt:Open Mozilla Thunderbird was updated to 60.7.1 / MFSA 2019-17 boo1137595:...

Win32k Privilege Escalation

The vulnerability of the Win32k component of the Windows operating system is related to errors in memory object handling. Exploiting this vulnerability can allow a remote attacker to gain increased privileges...

CVE-2019-0685

An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka ‘Win32k Elevation of Privilege Vulnerability’. This CVE ID is unique from CVE-2019-0803, CVE-2019-0859. Recent assessments: Assessed Attacker Value: 0 Assessed...

Windows Buffer Overflow

The vulnerability of the Windows Jet Database Engine component of the Windows operating system arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created file...