11684 matches found
CVE-2020-0773: Undefined Security Weakness
An elevation of privilege vulnerability exists when the Windows ActiveX Installer Service improperly handles memory.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'Windows ActiveX Installer Service Elevation of Privilege Vulnerability'. Thi...
Microsoft Windows ActiveX Installer Service Privilege Vulnerability
Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is an operating system for personal devices.Microsoft Windows Server is a server operating system. ActiveX Installer Service is one of the ActiveX installer services. A privilege extraction...
CVE-2020-0860: Undefined Security Weakness
An elevation of privilege vulnerability exists when the Windows ActiveX Installer Service improperly handles memory.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'Windows ActiveX Installer Service Elevation of Privilege Vulnerability'. Thi...
CVE-2020-0770: Undefined Security Weakness
An elevation of privilege vulnerability exists when the Windows ActiveX Installer Service improperly handles memory.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'Windows ActiveX Installer Service Elevation of Privilege Vulnerability'. Thi...
March 10, 2020—KB4541509 (Monthly Rollup)
None None...
Scripting Engine Memory Corruption Vulnerability
A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully...
Scripting Engine Memory Corruption Vulnerability
A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploit...
Windows ActiveX Installer Service Elevation of Privilege Vulnerability
An elevation of privilege vulnerability exists when the Windows ActiveX Installer Service improperly handles memory. To exploit this vulnerability, an attacker would first have to gain execution on the victim system. An attacker could then run a specially crafted application to elevate privileges...
Windows ActiveX Installer Service Elevation of Privilege Vulnerability
An elevation of privilege vulnerability exists when the Windows ActiveX Installer Service improperly handles memory. To exploit this vulnerability, an attacker would first have to gain execution on the victim system. An attacker could then run a specially crafted application to elevate privileges...
Windows ActiveX Installer Service Elevation of Privilege Vulnerability
An elevation of privilege vulnerability exists when the Windows ActiveX Installer Service improperly handles memory. To exploit this vulnerability, an attacker would first have to gain execution on the victim system. An attacker could then run a specially crafted application to elevate privileges...
VBScript Remote Code Execution Vulnerability
A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerabili...
Scripting Engine Memory Corruption Vulnerability
A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully...
Scripting Engine Memory Corruption Vulnerability
A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploit...
PT-2020-1893
Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description The issue is related to the incorrect handling of objects in memory by the ActiveX Installer Service in Windows operating systems. This can be exploited by an attacker using a specially craft...
PT-2020-1884
Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description The issue is related to the incorrect handling of objects in memory by the ActiveX Installer Service in Windows operating systems. This can be exploited by an attacker using a specially craft...
PT-2020-1902
Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description The issue is related to the incorrect handling of objects in memory by the ActiveX Installer Service in Windows operating systems. This can be exploited by an attacker using a specially craft...
TrickBot Adds ActiveX Control, Hides Dropper in Images
The TrickBot banking trojan has gotten trickier, with the addition of a Windows 10 ActiveX control to execute malicious macros in boobytrapped documents. Michael Gorelik, researcher at Morphisec Labs, said that at least two dozen documents have come to light in the last few weeks that use ActiveX...
February 27, 2020—KB4535996 (OS Builds 18362.693 and 18363.693)
None None...