580 matches found
CVE-2020-1286
A remote code execution vulnerability exists when the Windows Shell does not properly validate file paths.An attacker who successfully exploited this vulnerability could run arbitrary code in the context of the current user, aka 'Windows Shell Remote Code Execution Vulnerability'...
CVE-2020-1286
A remote code execution vulnerability exists when the Windows Shell does not properly validate file paths.An attacker who successfully exploited this vulnerability could run arbitrary code in the context of the current user, aka 'Windows Shell Remote Code Execution Vulnerability'...
Remote code execution
A remote code execution vulnerability exists when the Windows Shell does not properly validate file paths.An attacker who successfully exploited this vulnerability could run arbitrary code in the context of the current user, aka 'Windows Shell Remote Code Execution Vulnerability'...
CVE-2020-1286
A remote code execution vulnerability exists when the Windows Shell does not properly validate file paths.An attacker who successfully exploited this vulnerability could run arbitrary code in the context of the current user, aka 'Windows Shell Remote Code Execution Vulnerability'...
CVE-2020-1286
CVE-2020-1286 is a Windows Shell remote code execution vulnerability caused by improper validation of file paths. Exploitation could allow code execution in the context of the current user. The connected documents corroborate the CVE and list it among multiple Windows vulnerabilities addressed in...
June 9, 2020—KB4561649 (OS Build 10240.18608)
None None...
Windows Shell Remote Code Execution Vulnerability
A remote code execution vulnerability exists when the Windows Shell does not properly validate file paths. An attacker who successfully exploited this vulnerability could run arbitrary code in the context of the current user. If the current user is logged on as an administrator, an attacker could...
June 9, 2020—KB4561621 (OS Build 17134.1550)
None None...
CVE-2020-1286: Improper Input Validation
A remote code execution vulnerability exists when the Windows Shell does not properly validate file paths.An attacker who successfully exploited this vulnerability could run arbitrary code in the context of the current user, aka 'Windows Shell Remote Code Execution Vulnerability'...
February 11, 2020—KB4537803 (Security-only update)
None None...
libyal libfwsi Buffer Overflow Vulnerability
libyal libfwsi is a library for accessing the Windows Shell. The 'libfwsiextensionblockcopyfrombytestream' function in the libfwsiextensionblock.c file in versions prior to libyal libfwsi 20191006 has a Buffer overflow vulnerability, which arises when a networked system or product performs an...
The vulnerability of the Windows Shell component in operating systems allows attackers to increase their privileges.
The vulnerability of the Windows Shell component in operating systems is related to deficiencies in the checking of folder shortcuts. Exploiting this vulnerability can allow an attacker to increase their privileges...
CVE-2019-1053
An elevation of privilege vulnerability exists when the Windows Shell fails to validate folder shortcuts. An attacker who successfully exploited the vulnerability could elevate privileges by escaping a sandbox. To exploit this vulnerability, an attacker would require unprivileged execution on the...
CVE-2019-1053
An elevation of privilege vulnerability exists when the Windows Shell fails to validate folder shortcuts. An attacker who successfully exploited the vulnerability could elevate privileges by escaping a sandbox. To exploit this vulnerability, an attacker would require unprivileged execution on the...
Privilege escalation
An elevation of privilege vulnerability exists when the Windows Shell fails to validate folder shortcuts, aka 'Windows Shell Elevation of Privilege Vulnerability'...
CVE-2019-1053
CVE-2019-1053 describes an elevation of privilege in Windows Shell due to failure to validate folder shortcuts. The vulnerability allows an attacker who already has unprivileged code execution on the victim to escalate privileges by escaping a sandbox. The underlying cause is the Shell’s insuffic...
CVE-2019-1053 Windows Shell Elevation of Privilege Vulnerability
...
CVE-2019-1053: Improper Link Resolution Before File Access
An elevation of privilege vulnerability exists when the Windows Shell fails to validate folder shortcuts. An attacker who successfully exploited the vulnerability could elevate privileges by escaping a sandbox. To exploit this vulnerability, an attacker would require unprivileged execution on the...
June 11, 2019—KB4503293 (OS Build 18362.175)
None None...
Windows Shell Elevation of Privilege Vulnerability
An elevation of privilege vulnerability exists when the Windows Shell fails to validate folder shortcuts. An attacker who successfully exploited the vulnerability could elevate privileges by escaping a sandbox. To exploit this vulnerability, an attacker would require unprivileged execution on the...