The vulnerability of the Windows Installer component on Windows operating systems, which allows a hacker to increase their privileges

The vulnerability of the Windows Installer component in Windows operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability of the Windows GDI component in Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the Windows GDI component in Windows operating systems exists due to insufficient checking of input data. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

Windows CSC Service Elevation of Privilege Vulnerability

...

Microsoft Windows DTV-DVD Video Decoder Security Vulnerability

Microsoft Windows is a suite of operating systems for personal devices from Microsoft Corporation in the United States. A security vulnerability exists in the Microsoft DTV-DVD video decoder, no information about this vulnerability is available at this time, please stay tuned to CNNVD or the...

Microsoft Windows Remote Procedure Call Runtime 安全漏洞

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is an operating system for personal devices.Microsoft Windows Server is a server operating system. A remote code execution vulnerability exists in Microsoft Windows/Windows Server "Remote...

PT-2021-1677 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to errors in privilege management within the Windows Update Stack component of Windows operating systems. This can allow a remote attacker to elevate their privileges...

PT-2021-1599 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to a lack of protection for service data in the TPM device driver of the Windows operating system. This can allow an attacker to gain unauthorized access to protected...

CVE-2020-35112

If a user downloaded a file lacking an extension on Windows, and then "Open"-ed it from the downloads panel, if there was an executable file in the downloads directory with the same name but with an executable extension such as .bat or .exe that executable would have been launched instead. Note:...

CVE-2020-35112

If a user downloaded a file lacking an extension on Windows, and then "Open"-ed it from the downloads panel, if there was an executable file in the downloads directory with the same name but with an executable extension such as .bat or .exe that executable would have been launched instead. Note:...

Default configuration

An issue was discovered in Veritas NetBackup and OpsCenter through 8.3.0.1. NetBackup processes using Strawberry Perl attempt to load and execute libraries from paths that do not exist by default on the Windows operating system. By default, on Windows systems, users can create directories under...

The vulnerability of the DirectX Graphics Kernel driver on Windows operating systems allows attackers to exploit their privileges.

The vulnerability of the DirectX Graphics Kernel Driver DXGKRNL on Windows operating systems is related to insecure handling of privileges. Exploiting this vulnerability can allow an attacker to enhance their privileges...

Security Vulnerabilities fixed in Firefox 84 — Mozilla

When a BigInt was right-shifted the backing store was not properly cleared, allowing uninitialized memory to be read. Certain blit values provided by the user were not properly constrained leading to a heap buffer overflow on some video drivers. The lifecycle of IPC Actors allows managed actors t...

CVE-2020-26966

Searching for a single word from the address bar caused an mDNS request to be sent on the local network searching for a hostname consisting of that string; resulting in an information leak. Note: This issue only affected Windows operating systems. Other operating systems are unaffected.. This...

PT-2020-5293 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to a security feature bypass in the implementation of the Kerberos protocol in the Windows operating system, which is associated with a violation of the data protection...

PT-2020-5248 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to insecure privilege management in the Windows Backup Engine component of the Windows operating system. It allows an attacker to elevate their privileges...

PT-2020-5270 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to errors in the code of the Windows operating system, allowing a remote attacker to execute arbitrary code. This can potentially affect the system. The estimated numbe...

The vulnerability of the Text Services Framework software interface in Windows operating systems, which allows a perpetrator to gain unauthorized access to protected information

The vulnerability of the Text Services Framework software interface in Windows operating systems is related to incorrect handling of objects in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

The vulnerability of the Remote Desktop Protocol Server, a server for connecting remote desktop workstations, in Windows operating systems allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Remote Desktop Protocol Server for Windows operating systems relates to operations that occur outside of the buffer. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information from a remote location...

The vulnerability of the Network File System (NFS) of Windows operating systems allows a hacker to gain unauthorized access to protected information.

The vulnerability of the Network File System NFS on Windows operating systems relates to operations that occur outside the buffer boundaries. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

The vulnerability of the Windows Update Orchestrator Service component on the Windows operating system, which allows a malicious individual to escalate their privileges

The vulnerability of the Windows Update Orchestrator Service component in Windows operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...