CVE-2020-0802: Undefined Security Weakness

An elevation of privilege vulnerability exists in the way that the Windows Network Connections Service handles objects in memory, aka 'Windows Network Connections Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0778, CVE-2020-0803, CVE-2020-0804, CVE-2020-0845...

CVE-2020-0804: Undefined Security Weakness

An elevation of privilege vulnerability exists in the way that the Windows Network Connections Service handles objects in memory, aka 'Windows Network Connections Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0778, CVE-2020-0802, CVE-2020-0803, CVE-2020-0845...

CVE-2020-0861: Undefined Security Weakness

An information disclosure vulnerability exists when the Windows Network Driver Interface Specification NDIS improperly handles memory.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'Windows Network Driver Interface Specification NDIS...

CVE-2020-0871: Undefined Security Weakness

An information disclosure vulnerability exists when Windows Network Connections Service fails to properly handle objects in memory, aka 'Windows Network Connections Service Information Disclosure Vulnerability'...

CVE-2020-0780: Undefined Security Weakness

An elevation of privilege vulnerability exists in the way that the Windows Network List Service handles objects in memory, aka 'Windows Network List Service Elevation of Privilege Vulnerability'...

Microsoft Windows Multiple Vulnerabilities (KB4541509)

This host is missing a critical security update according to Microsoft KB4541509 SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Microsoft Windows Multiple Vulnerabilities (KB4540673)

This host is missing a critical security update according to Microsoft KB4540673 SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2020-1801

Name of the Vulnerable Software and Affected Versions Windows Network Connections Service affected versions not specified Description An information disclosure issue exists due to the Windows Network Connections Service's improper handling of objects in memory. This could allow an attacker to gai...

KB4538461: Windows 10 Version 1809 and Windows Server 2019 March 2020 Security Update

The remote Windows host is missing security update 4538461. It is, therefore, affected by multiple vulnerabilities : - An elevation of privilege vulnerability exists when the Windows Device Setup Manager improperly handles file operations. An attacker who successfully exploited this vulnerability...

PT-2020-1907

Name of the Vulnerable Software and Affected Versions Windows Network List Service affected versions not specified Description The issue is related to how the Windows Network List Service handles objects in memory, allowing for potential elevation of privilege. This could enable an attacker to...

CVE-2020-0705

An information disclosure vulnerability exists when the Windows Network Driver Interface Specification NDIS improperly handles memory.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'Windows Network Driver Interface Specification NDIS...

February 11, 2020—KB4537803 (Security-only update)

None None...

CVE-2020-0705: Undefined Security Weakness

An information disclosure vulnerability exists when the Windows Network Driver Interface Specification NDIS improperly handles memory.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'Windows Network Driver Interface Specification NDIS...

The vulnerability of the Windows Network Connectivity Assistant service allows a malicious actor to escalate their privileges and execute arbitrary code.

The vulnerability of the Windows Network Connectivity Assistant service in Windows operating systems is related to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to enhance their privileges and execute arbitrary code using a specially created application...

CVE-2019-1287

The CVE-2019-1287 entry describes an elevation-of-privilege vulnerability in the Windows Network Connectivity Assistant, caused by how the component handles objects in memory. Affected: Windows OS component Windows Network Connectivity Assistant. Consequence: local privilege elevation with high i...

CVE-2019-1287: Undefined Security Weakness

An elevation of privilege vulnerability exists in the way that the Windows Network Connectivity Assistant handles objects in memory, aka 'Windows Network Connectivity Assistant Elevation of Privilege Vulnerability'...

PT-2019-3304

Name of the Vulnerable Software and Affected Versions Windows Network Connectivity Assistant affected versions not specified Description The issue is related to errors in handling objects in memory. It may allow an attacker to elevate their privileges and execute arbitrary code using a specially...

The vulnerability of the Windows Network File System (NFS) protocol in Windows operating systems arises from improper handling of objects in memory, allowing attackers to exploit their privileges.

The vulnerability of the Windows Network File System NFS protocol in Windows operating systems is related to improper handling of objects in memory. Exploiting this vulnerability can allow an attacker to increase their privileges...

Design/Logic Flaw

An issue was discovered in Electronic Arts Origin before 10.5.39. Due to improper sanitization of the origin:// and origin2:// URI schemes, it is possible to inject additional arguments into the Origin process and ultimately leverage code execution by loading a backdoored Qt plugin remotely via t...

CVE-2019-12828

An issue was discovered in Electronic Arts Origin before 10.5.39. Due to improper sanitization of the origin:// and origin2:// URI schemes, it is possible to inject additional arguments into the Origin process and ultimately leverage code execution by loading a backdoored Qt plugin remotely via t...