Privilege escalation

An elevation of privilege vulnerability exists when Windows improperly handles calls to Win32k.sys. An attacker who successfully exploited the vulnerability could gain elevated privileges on a targeted system. To exploit the vulnerability, an attacker would have to log on to an affected system an...

EUVD-2020-12131

A remote code execution vulnerability exists when Windows improperly handles objects in memory. To exploit the vulnerability an attacker would have to convince a user to run a specially crafted application. An attacker who successfully exploited this vulnerability could execute arbitrary code and...

CVE-2020-1159 Windows Elevation of Privilege Vulnerability

...

CVE-2020-1152 Windows Win32k Elevation of Privilege Vulnerability

...

The vulnerability of the WalletService service on Windows operating systems allows a perpetrator to escalate their privileges.

The vulnerability of the WalletService service for Windows operating systems is related to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to increase their privileges through a specially created application...

Microsoft Windows Elevation of Privilege Vulnerability (CNVD-2020-54905)

Windows is a set of operating systems developed by Microsoft Corporation in the U.S. Windows uses a graphical mode GUI. An elevation of privilege vulnerability exists in Microsoft Windows, which stems from a failure of a Shell infrastructure component to properly handle objects in memory, and can...

Microsoft Windows Elevation of Privilege Vulnerability (CNVD-2020-54907)

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is an operating system for personal devices.Microsoft Windows Server is a server operating system. An elevation of privilege vulnerability exists in Microsoft Windows, which arises from the...

Microsoft Windows Elevation of Privilege Vulnerability (CNVD-2020-54906)

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is an operating system for personal devices.Microsoft Windows Server is a server operating system. An elevation of privilege vulnerability exists in Microsoft Windows, which arises from the...

CVE-2020-7320

Protection Mechanism Failure vulnerability in McAfee Endpoint Security ENS for Windows prior to 10.7.0 September 2020 Update allows local administrator to temporarily reduce the detection capability allowing otherwise detected malware to run via stopping certain Microsoft services...

The vulnerability of the Local Security Authority Subsystem Service (LSASS) in the Windows operating system allows a perpetrator to escalate their privileges.

The vulnerability of the Local Security Authority Subsystem Service LSASS in the Windows operating system is related to errors in memory object handling. Exploiting this vulnerability can allow a remote attacker to increase their privileges...

PT-2020-3912 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: A local elevation of privilege issue exists in how splwow64.exe handles certain calls, allowing an attacker to elevate privileges on an affected system from low-integrity to medium-integrit...

PT-2020-3986 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: A remote code execution issue exists due to improper handling of objects in memory by Windows. To exploit this, an attacker must convince a user to run a specially crafted application...

PT-2020-4042 · Microsoft · Windows +1

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to errors in handling objects in memory by the DirectX component of the Windows operating system. This could allow an attacker to elevate their privileges using a...

PT-2020-4078 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to an elevation of privilege vulnerability in the way fdSSDP.dll handles objects in memory. This could allow an attacker to execute code with elevated permissions by...

PT-2020-3895 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: An information disclosure issue exists due to improper handling of objects in memory by StartTileData.dll. This could allow an attacker to obtain information that could further compromise t...

McAfee True Key Memory Sensitive Information Plaintext Storage Vulnerability

McAfee True Key is an authentication application from the American company McAfee. The program supports features such as facial information recognition and fingerprint recognition.Microsoft Windows is a set of operating systems for use on personal devices from Microsoft Corporation, USA. A securi...

Cisco Jabber Bug Could Let Hackers Target Windows Systems Remotely

Networking equipment maker Cisco has released a new version of its Jabber video conferencing and messaging app for Windows that includes patches for multiple vulnerabilities—which, if exploited, could allow an authenticated, remote attacker to execute arbitrary code. The flaws, which were uncover...

The vulnerability of Windows CDP user components in the Windows operating system allows attackers to escalate their privileges.

The vulnerability of Windows CDP user components in the Windows operating system is related to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to enhance their privileges by running a specially created application...

The vulnerability of the SSDP protocol implementation in the Windows operating system allows attackers to increase their privileges.

The vulnerability of the SSDP protocol implementation in the Windows operating system exists due to errors in memory object handling. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerability of the Winsock driver in the Windows operating system, related to errors in object handling in memory, allows attackers to exploit their privileges.

The vulnerability of the Winsock driver in the Windows operating system is related to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to increase their privileges through a specially crafted application...