Python code issue vulnerability (CNVD-2020-53314)

Python is an open source, object-oriented programming language from the Python Software Foundation. The language is extensible, supports modules and packages, and supports multiple platforms. A code issue vulnerability exists in Python Windows that stems from python3X.dll using an invalid search...

F5 Networks BIG-IP : BIG-IP Edge Client for Windows vulnerability (K69154630)

The BIG-IP Edge Client Windows Stonewall driver does not sanitize the pointer received from the userland.A local user on the Windows client system can send crafted DeviceIoControl requests to a .\urvpndrv device causing the Windows kernel to crash.CVE-2020-5898 Impact This vulnerability allows...

The vulnerability of the Microsoft Store Runtime component in Microsoft Windows operating systems allows attackers to enhance their privileges.

The vulnerability of the Microsoft Store Runtime operating system for Microsoft Windows involves errors in memory object handling. Exploiting this vulnerability can allow an attacker to enhance their privileges through a specially created application...

The vulnerability of the multimedia framework Media Foundation in Microsoft Windows operating systems allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Media Foundation multimedia framework in Microsoft Windows operating systems relates to reading data beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information through a specially created malicious...

Memory Corruption Vulnerability Exists in Extreme Office 2019 For Windows at Beijing Haiteng Times Technology Co Ltd (CNVD-2020-44380)

Extreme Office is an independently controlled office learning software developed by Beijing Haiteng Times Technology Co. A memory corruption vulnerability exists in Extreme Office 2019 For Windows by Beijing Haiteng Times Technology Co. which can be exploited by attackers to cause a denial of...

Memory Corruption Vulnerability Exists in Extreme Office 2019 For Windows at Beijing Haiteng Times Technology Co Ltd (CNVD-2020-44377)

Extreme Office is an independently controlled office learning software developed by Beijing Haiteng Times Technology Co. A memory corruption vulnerability exists in Extreme Office 2019 For Windows by Beijing Haiteng Times Technology Co. which can be exploited by attackers to cause a denial of...

F5 Networks BIG-IP : BIG-IP Edge Client for Windows vulnerability (K15838353)

The BIG-IP Edge Client components in BIG-IP APM, Edge Gateway, and FirePass legacyallow attackers to obtain the full session ID from process memory. CVE-2020-5892 Impact An attacker with sufficient local privileges on a client machine running Windows may be able to gain access to the full session...

The vulnerability of the GDI component of the Windows operating system, which allows a hacker to increase their privileges or execute arbitrary code

The vulnerability of the Graphics Device Interface GDI component in the Windows operating system is related to insecure handling of privileges. Exploiting this vulnerability can allow a remote attacker to increase their privileges or execute arbitrary code through a specially created application...

Extreme Office 2019 For Windows Has Memory Corruption Vulnerability

Extreme Office is an independently controlled office learning software developed by Beijing Haiteng Times Technology Co. A denial of service vulnerability exists in Extreme Office 2019 For Windows. An attacker can exploit this vulnerability to cause a denial of service...

Vulnerability fixed in Pulse Secure Client for Windows

A vulnerability has been fixed in Pulse Secure Client for Windows. The vulnerability allows a locally authenticated malicious party the ability to obtain elevated SYSTEM privileges. obtain. Security researcher Red Timmy Security has published a write-up regarding the vulnerability published at:...

The vulnerability of the Windows operating system’s buffer exchange service allows attackers to escalate their privileges.

The vulnerability of the Windows operating system’s buffer exchange service is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker to increase their privileges...

Vulnerability of Connected User Experience and Telemetry Service functions in Microsoft Windows operating systems, allowing attackers to induce service failures.

The vulnerability of the Connected User Experience and Telemetry Service services in Microsoft Windows operating systems is related to insufficient verification of permission assignment for critical resources. Exploiting this vulnerability can allow attackers to cause service failures...

A Bug in Facebook Messenger for Windows Could've Helped Malware Gain Persistence

Cybersecurity researchers at Reason Labs, the threat research arm of security solutions provider Reason Labs, today disclosed details of a vulnerability they recently discovered in the Facebook Messenger application for Windows. The vulnerability, which resides in Messenger version 460.16, could...

Microsoft Windows and Windows Server Remote Code Execution Vulnerability (CNVD-2021-29544)

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is an operating system for personal devices.Microsoft Windows Server is a server operating system. A remote code execution vulnerability exists in Microsoft Windows and Windows Server, whic...

Microsoft Windows Background Intelligent Transfer Service Elevation of Privilege Vulnerability

Microsoft Windows is a set of operating systems for use on personal devices from the American company Microsoft. An elevation of privilege vulnerability exists in the IIS module of the Microsoft Windows Background Intelligent Transfer Service BITS, which arises from the program's failure to...

CVE-2020-1283

A denial of service vulnerability exists when Windows improperly handles objects in memory, aka 'Windows Denial of Service Vulnerability'...

CVE-2020-1284

A denial of service vulnerability exists in the way that the Microsoft Server Message Block 3.1.1 SMBv3 protocol handles certain requests, aka 'Windows SMBv3 Client/Server Denial of Service Vulnerability'...

Citrix Systems Workspace App Elevation of Privilege Vulnerability (CNVD-2020-35945)

Citrix Systems Workspace App formerly known as Receiver is an application from Citrix Systems, Inc. that provides secure access to applications, desktops, and data. A security vulnerability exists in Citrix Systems Workspace App versions prior to 1912 Windows. A local attacker could exploit the...

Memory Corruption Vulnerability in WPS Office for Windows

WPS Office for Windows is the software of Zhuhai Kingsoft Office Software Co., Ltd, which can realize the text, table, presentation and many other functions commonly used in office software. A memory corruption vulnerability exists in WPS Office for Windows, which can be exploited by attackers to...

Memory corruption vulnerability exists in WPS Office for Windows (CNVD-2020-34109)

WPS Office for Windows is the software of Zhuhai Kingsoft Office Software Co., Ltd, which can realize the text, table, presentation and many other functions commonly used in office software. A memory corruption vulnerability exists in WPS Office for Windows, which can be exploited by attackers to...