CVE-2019-1094

An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows GDI Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-1095, CVE-2019-1098, CVE-2019-1099, CVE-2019-1100, CVE-2019-1101, CVE-2019-111...

CVE-2019-0880

A local elevation of privilege vulnerability exists in how splwow64.exe handles certain calls, aka 'Microsoft splwow64 Elevation of Privilege Vulnerability'...

CVE-2019-12574

A vulnerability in the London Trust Media Private Internet Access PIA VPN Client v1.0 for Windows could allow an authenticated, local attacker to run arbitrary code with elevated privileges. The PIA client is vulnerable to a DLL injection vulnerability during the software update process. The...

The vulnerability of the Speech API’s software interface for speech recognition and synthesis allows a perpetrator to execute arbitrary code.

The vulnerability of the Speech API SAPI software interface for speech recognition and synthesis on Windows operating systems is related to the way the Text-to-Speech system processes input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially...

PT-2019-2757 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: A local elevation of privilege issue exists in how splwow64.exe handles certain calls. This issue is related to errors in processing calls, which can allow an attacker to elevate their...

VulnCheck KEV: CVE-2019-1132

A privilege escalation vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory...

Cisco Jabber for Windows DLL Preloading Vulnerability

Cisco Jabber for Windows securely unifies status, instant messaging, video, voice, voice messaging, screen sharing, and conferencing capabilities into a single client that simplifies communications and increases productivity. A DLL preloading vulnerability exists in Cisco Jabber for Windows...

Sodin ransomware exploits Windows vulnerability and processor architecture

When Sodin also known as Sodinokibi and REvil appeared in the first half of 2019, it immediately caught our attention for distributing itself through an Oracle Weblogic vulnerability and carrying out attacks on MSP providers. In a detailed analysis, we discovered that it also exploits the...

Monero: Monero Wallet Gui for Windows (Arbitrary Code Execution)

Summary: The windows version of the monero-wallet-gui.exe application allows for code injection. The monero-wallet-gui.exe utilizes a precompiled OpenSSL library called libeay32.dll. This OpenSSL library is trying to read a configuration file that doesn’t exist. By default, on windows systems,...

UBUNTU-CVE-2019-5806

Integer overflow in ANGLE in Google Chrome on Windows prior to 74.0.3729.108 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

The vulnerability of the Windows operating system, related to the improper functioning of the NTLM MIC (Message Integrity Check) security mechanism, allows a hacker to compromise the security functions of the NTLM mechanism.

The vulnerability of the Windows operating system is related to the improper functioning of the NTLM MIC Message Integrity Check security mechanism. Exploiting this vulnerability allows a malicious actor to compromise the security functions of the NTLM mechanism from a remote location...

The vulnerability of the Windows operating system, related to errors in processing Advanced Local Process Call (ALPC) calls, allows a perpetrator to increase their privileges and execute arbitrary code.

The vulnerability of the Windows operating system is related to errors in processing Advanced Local Process Call ALPC calls. Exploiting this vulnerability can allow an attacker to enhance their privileges and execute arbitrary code using a specially created application...

The vulnerability of the comctl32.dll library in the Windows operating system allows a hacker to execute arbitrary code in the context of the current user.

The vulnerability of the comctl32.dll library in the Windows operating system arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user, through a specially created...

The vulnerability of the Win32k component of the Windows operating system allows a hacker to increase their privileges and execute arbitrary code in kernel mode.

The vulnerability of the Win32k component of the Windows operating system is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to enhance their privileges and execute arbitrary code in kernel mode through a specially created application...

The vulnerability of the application programming interface for accessing ActiveX Data Objects in Windows operating systems arises from errors in object handling in memory, allowing attackers to execute arbitrary code.

The vulnerability of the application programming interface for accessing ActiveX Data Objects ADO on Windows operating systems is related to errors in object handling in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the Jet Database Engine component of the Windows operating system, which allows a hacker to execute arbitrary code.

The vulnerability of the Jet Database Engine component of the Windows operating system arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created file...

The vulnerability of the Jet Database Engine component of the Windows operating system, which allows a hacker to execute arbitrary code.

The vulnerability of the Jet Database Engine component of the Windows operating system arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created file...

The vulnerability of the Jet Database Engine component of the Windows operating system, which allows a hacker to execute arbitrary code.

The vulnerability of the Jet Database Engine component of the Windows operating system arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created file...

CVE-2019-1025

A denial of service vulnerability exists when Windows improperly handles objects in memory. An attacker who successfully exploited the vulnerability could cause a target system to stop responding. To exploit this vulnerability, an attacker would have to log on to an affected system and run a...

CVE-2019-1040

A tampering vulnerability exists in Microsoft Windows when a man-in-the-middle attacker is able to successfully bypass the NTLM MIC Message Integrity Check protection. An attacker who successfully exploited this vulnerability could gain the ability to downgrade NTLM security features. To exploit...