4897 matches found
CVE-2020-0981
A security feature bypass vulnerability exists when Windows fails to properly handle token relationships.An attacker who successfully exploited the vulnerability could allow an application with a certain integrity level to execute code at a different integrity level, leading to a sandbox escape.T...
CVE-2020-0934
An elevation of privilege vulnerability exists when the Windows WpcDesktopMonSvc improperly manages memory.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from...
CVE-2020-0938
A remote code execution vulnerability exists in Microsoft Windows when the Windows Adobe Type Manager Library improperly handles a specially-crafted multi-master font - Adobe Type 1 PostScript format.For all systems except Windows 10, an attacker who successfully exploited the vulnerability could...
EUVD-2020-11911
An elevation of privilege vulnerability exists in the way that the User-Mode Power Service UMPS handles objects in memory, aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0934, CVE-2020-0983, CVE-2020-1009, CVE-2020-1011...
CVE-2020-0936
An elevation of privilege vulnerability exists when a Windows scheduled task improperly handles file redirections, aka 'Windows Scheduled Task Elevation of Privilege Vulnerability'...
CVE-2020-7257
Privilege escalation vulnerability in McAfee Endpoint Security ENS for Windows prior to 10.7.0 February 2020 Update allows local users to cause the deletion and creation of files they would not normally have permission to through altering the target of symbolic links whilst an anti-virus scan was...
PT-2020-2196 · Adobe +1 · Type Manager Library +1
Name of the Vulnerable Software and Affected Versions: Microsoft Windows affected versions not specified Description: A remote code execution issue exists in Microsoft Windows due to the improper handling of a specially-crafted multi-master font in the Adobe Type 1 PostScript format by the Window...
Facebook Oculus Desktop Elevation of Privilege Vulnerability
Facebook Oculus Desktop is a virtual desktop application from the American company Facebook that supports the operation of computers in VR. A security vulnerability exists in previous versions of Facebook Oculus Desktop 1.44.0.32849 for Windows-based platforms. The vulnerability can be exploited ...
Palo Alto Networks Elevation of Privilege Vulnerability
Palo Alto Networks Traps is a suite of endpoint security protection software from Palo Alto Networks, USA. A security vulnerability exists in Palo Alto Networks Traps version 5.0 prior to 5.0.8 and version 6.1 prior to 6.1.4 Windows. An attacker could exploit the vulnerability to elevate privileg...
Bitdefender High-Level Antimalware SDK Code Issue Vulnerability
Bitdefender High-Level Antimalware SDK is an anti-malware SDK Software Development Kit from Bitdefender Romania. A code issue vulnerability exists in versions of the Bitdefender High-Level Antimalware SDK prior to 3.0.1.204 for Windows-based platforms. The vulnerability stems from an improper...
STARFACE UCC Client Code Issue Vulnerability
STARFACE UCC Client is a desktop client application for telephone systems from the German company STARFACE. A security vulnerability exists in STARFACE UCC Client versions prior to 6.7.1.204 WIndows. An attacker can exploit the vulnerability to execute code with System privileges...
CVE-2020-10515
STARFACE UCC Client before 6.7.1.204 on WIndows allows binary planting to execute code with System rights, aka usd-2020-0006...
Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Microsoft
CVE-2020-0796 Windows SMBv3 LPE Exploit !exploithttps://u...
Serendipity Code Issue Vulnerability
Serendipity is a PHP-based blogging system from the Serendipity team. The system supports the creation of online journals, blogs, web pages and more. A code issue vulnerability exists in Serendipity versions prior to 2.3.4 Windows that stems from the program failing to properly validate filenames...
The vulnerability of the ActiveX Installer Service installation process on Windows operating systems allows attackers to exploit their privileges.
The vulnerability of the ActiveX Installer Service for operating systems running on Windows is related to improper handling of objects in memory. Exploiting this vulnerability can allow an attacker to enhance their privileges through a specially created application...
The vulnerability of the Media Foundation component in Windows operating systems, which allows a hacker to disclose protected information
The vulnerability of the Media Foundation component in Windows operating systems is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker to disclose sensitive information through a specially created application...
The vulnerability of the Universal Plug and Play (UPnP) service in Windows operating systems allows attackers to enhance their privileges.
The vulnerability of the Universal Plug and Play UPnP service in Windows operating systems is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to enhance their privileges through a specially created application or a specially created script...
Adobe Creative Cloud Desktop Application Competitive Conditions Issue Vulnerability
Adobe Creative Cloud Desktop Application is a suite of applications for managing applications and services in the Creative Cloud Membership Management Center from Adobe USA. The program supports synchronizing and sharing files, managing fonts, and accessing asset libraries for commercial...
Security Bulletin: IBM Integration Bus and WebSphere Message Broker are affected by Unquoted Search Path or Element (CWE-428) Vulnerability on Windows
Summary IBM Integration Bus and WebSphere Message Broker have addressed applicable CVE Vulnerability Details CVEID: CVE-2017-1144 DESCRIPTION: IBM WebSphere Message Broker could allow a local user with specialized access to prevent the message broker from starting. CVSS Base Score: 2.9 CVSS...
