2586 matches found
CVE-2020-0639
An information disclosure vulnerability exists in the Windows Common Log File System CLFS driver when it fails to properly handle objects in memory, aka 'Windows Common Log File System Driver Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2020-0615...
The vulnerability of the Hyper-V hardware virtualization system and the Windows operating system allows a perpetrator to execute arbitrary code.
The vulnerability of the Hyper-V hardware virtualization technology in the Windows operating system is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
The vulnerability of the Windows Printer Service in the Windows operating system allows a hacker to increase their privileges.
The vulnerability of the Windows Printer Service in the Windows operating system arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to enhance their privileges through a specially created application...
Persistence – Application Shimming
Microsoft in order to resolve the problem with legacy applications that are no compatible with newer Windows operating systems released the application compatibility toolkit ACT. This software enables system administrators and developers to create fix packages for installed applications. The...
Microsoft Windows GDI Information Leakage Vulnerability (CNVD-2020-02185)
Microsoft Windows is a family of operating systems from Microsoft. An information leakage vulnerability exists in Microsoft Windows GDI. An attacker could exploit this vulnerability by obtaining information through a variety of methods, including tricking a user into opening a specially crafted...
The vulnerability of the Netlogon service in the Windows operating system allows a perpetrator to circumvent existing security restrictions and execute a “man-in-the-middle” attack.
The vulnerability of the Netlogon service in the Windows operating system exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to bypass existing security restrictions and execute a “man-in-the-middle” type attack...
Microsoft Windows Remote Desktop Protocol Information Disclosure Vulnerability
Microsoft Windows XP is a suite of operating systems for use with PCs and tablets from Microsoft Corporation USA.Remote Desktop Protocol is a remote desktop protocol. An information disclosure vulnerability exists in Remote Desktop Protocol in the SP3 version of Microsoft Windows XP, which arises...
The vulnerability of the Hyper-V hardware virtualization system in the Windows operating system allows a hacker to trigger a service failure.
The vulnerability of the Hyper-V hardware virtualization system and the Windows operating system is related to insufficient verification of input data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failures through a specially created application...
The vulnerability of the Win32k component in Windows operating systems allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the Win32k component in Windows operating systems is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...
The vulnerability of the Windows Servicing Stack component of the Windows operating system allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the Windows Servicing Stack component of the Windows operating system is related to errors in handling symbolic links. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...
The vulnerability of the Hyper-V hardware virtualization system in the Windows operating system allows a hacker to trigger a service failure.
The vulnerability of the Hyper-V hardware virtualization system and the Windows operating system is related to insufficient verification of input data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failures through a specially created application...
The vulnerability of the Win32k component in Windows operating systems, which allows attackers to escalate their privileges
The vulnerability of the Win32k component in Windows operating systems is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to enhance their privileges through a specially created application...
The vulnerability of the Hyper-V hardware virtualization system in the Windows operating system allows a hacker to execute arbitrary code.
The vulnerability of the Hyper-V hardware virtualization system and the Windows operating system is related to insufficient verification of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially created application from a remote location...
The vulnerability of the Hyper-V hardware virtualization system in the Windows operating system allows a hacker to execute arbitrary code.
The vulnerability of the Hyper-V hardware virtualization system and the Windows operating system is related to insufficient verification of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially created application from a remote location...
The vulnerability of the Netlogon service in the Windows operating system allows a hacker to circumvent existing security restrictions.
The vulnerability of the Netlogon service in the Windows operating system is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to bypass existing security restrictions using a specially crafted request...
The vulnerability of the Hyper-V hardware virtualization system in the Windows operating system allows a hacker to execute arbitrary code.
The vulnerability of the Hyper-V hardware virtualization system and the Windows operating system is related to insufficient verification of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially created application from a remote location...
The vulnerability of the DirectWrite programming interface in Windows operating systems allows attackers to gain unauthorized access to protected information.
The vulnerability of the DirectWrite programming interface in Windows operating systems is related to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information through a specially created web page or document...
CVE-2019-15511
An exploitable local privilege escalation vulnerability exists in the GalaxyClientService installed by GOG Galaxy. Due to Improper Access Control, an attacker can send unauthenticated local TCP packets to the service to gain SYSTEM privileges in Windows system where GOG Galaxy software is...
Microsoft Windows Hyper-V Remote Code Execution Vulnerability (CNVD-2019-42611)
Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation, U.S.A. Microsoft Windows is a set of operating systems for personal devices.Microsoft Windows Server is a set of server operating systems. Windows Hyper-V is one of the virtualization products that supports...
Microsoft Windows Graphics Device Interface Information Disclosure Vulnerability (CNVD-2019-41635)
Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is an operating system for personal devices.Microsoft Windows Server is a server operating system. Windows Graphics Device Interface GDI is one of the graphic device interfaces. An...