The vulnerability in the implementation of the Remote Desktop Protocol (RDP) on Windows operating systems allows a hacker to cause a service failure.

The vulnerability of the Remote Desktop Protocol RDP implementation in Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to cause service interruptions by connecting to a vulnerable system using the RDP protocol a...

The vulnerability of Windows operating systems, related to errors in memory object handling, allows a perpetrator to trigger a system failure.

The vulnerability of Windows operating systems is related to errors in memory object handling. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

Apple iTunes for Windows and Apple iCloud for Windows WebKit Component Memory Corruption Vulnerability (CNVD-2019-36617)

Apple iTunes for Windows and Apple iCloud for Windows are both products of Apple Inc.Apple iTunes for Windows is a media player application for the Windows platform.Apple iCloud for Windows is Apple iCloud for Windows is a Windows-based cloud service. The product supports storage of music, photos...

Apple iTunes Memory Corruption Vulnerability (CNVD-2019-36612)

Apple iTunes for Windows is a Windows-based media player application from Apple.WebKit is one of the components of the Web browser engine. A security vulnerability exists in the WebKit component of Apple iTunes for Windows prior to version 12.10.1. The vulnerability can be exploited by an attacke...

Adobe Download Manager Insecure File Permissions Vulnerability

Adobe Download Manager is an application for managing and downloading Adobe products from Adobe USA. A security vulnerability exists in version 2.0.0.363 of Adobe Download Manager for Windows-based platforms. An attacker can exploit the vulnerability to elevate privileges...

Local Privilege Escalation in GlobalProtect App for Windows

A Local Privilege Escalation vulnerability exists in the GlobalProtect App for Windows auto-update feature that can allow for modification of a GlobalProtect App MSI installer package on disk before installation. Ref GPC-8977, CVE-2019-17435 Successful exploitation of this issue may allow a...

CVE-2019-1344

An information disclosure vulnerability exists in the way that the Windows Code Integrity Module handles objects in memory, aka 'Windows Code Integrity Module Information Disclosure Vulnerability'...

CVE-2019-1346

A denial of service vulnerability exists when Windows improperly handles objects in memory, aka 'Windows Denial of Service Vulnerability'. This CVE ID is unique from CVE-2019-1343, CVE-2019-1347...

CVE-2019-1338

A security feature bypass vulnerability exists in Microsoft Windows when a man-in-the-middle attacker is able to successfully bypass the NTLMv2 protection if a client is also sending LMv2 responses, aka 'Windows NTLM Security Feature Bypass Vulnerability'...

CVE-2019-1320

An elevation of privilege vulnerability exists when Windows improperly handles authentication requests, aka 'Microsoft Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-1322, CVE-2019-1340...

CVE-2019-1333

A remote code execution vulnerability exists in the Windows Remote Desktop Client when a user connects to a malicious server, aka 'Remote Desktop Client Remote Code Execution Vulnerability'...

Apple iTunes Bug Actively Exploited in BitPaymer/iEncrypt Campaign

Bad actors are actively targeting a vulnerability in the Windows version of Apple iTunes to deliver BitPaymer/iEncrypt ransomware. It’s a new attack pattern that is difficult to detect, security researchers revealed Thursday. Researchers from Morphisec Labs in August identified the abuse of the...

MPC-HC Buffer Overflow Vulnerability

MPC-HC is an open source media player based on the Windows platform by the MPC-HC team. A buffer overflow vulnerability exists in MPC-HC 1.7.13 and earlier versions, which originates when a networked system or product performs an operation in memory without properly validating the data boundaries...

F5 Networks BIG-IP : BIG-IP APM client for Windows vulnerability (K10015187)

Windows Logon Integration feature of F5 BIG-IP APM client prior to version 7.1.7.1 for Windows by default uses Legacy logon mode which uses a SYSTEM account to establish network access. This feature displays a certificate user interface dialog box which contains the link to the certificate policy...

The vulnerability of the Jet Database Engine database management system in the Windows operating system allows a hacker to execute arbitrary code.

The vulnerability of the Jet Database Engine database management system for the Windows operating system is related to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially created file...

The vulnerability in the implementation of the Microsoft Server Message Block (SMB) network protocol on Windows operating systems allows attackers to disclose sensitive information.

The vulnerability of the Microsoft Server Message Block SMB network protocol implementation in Windows operating systems exists due to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to disclose sensitive information through a specially created application...

CVE-2019-11736

The Mozilla Maintenance Service does not guard against files being hardlinked to another file in the updates directory, allowing for the replacement of local files, including the Maintenance Service executable, which is run with privileged access. Additionally, there was a race condition during...

CVE-2019-6145

Forcepoint VPN Client for Windows versions lower than 6.6.1 have an unquoted search path vulnerability. This enables local privilege escalation to SYSTEM user. By default, only local administrators can write executables to the vulnerable directories. Forcepoint thanks Peleg Hadar of SafeBreach La...

The vulnerability of the unistore.dll library in the Windows operating system, which allows attackers to escalate their privileges

The vulnerability of the unistore.dll library in the Windows operating system is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to enhance their privileges through a specially created application...

The vulnerability of the Windows operating system, related to errors in processing files with the .LNK extension, allows a hacker to execute arbitrary code.

The vulnerability of the Windows operating system is related to errors in processing files with the extension .LNK. Exploiting this vulnerability allows an attacker to execute arbitrary code on the target system with current user privileges, by placing a specially created file in a network file...