Design/Logic Flaw

IBM App Connect Enterprise Certified Container 1.0.0, 1.0.1, 1.0.2, 1.0.3, and 1.0.4 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click...

CVE-2020-4785

IBM App Connect Enterprise Certified Container 1.0.0, 1.0.1, 1.0.2, 1.0.3, and 1.0.4 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click...

Microsoft Office Click-to-Run elevation of privilege vulnerability (CNVD-2020-61058)

Microsoft Office is an office software suite of products from the U.S. company Microsoft Microsoft. The product's common components include Word, Excel, Access, Powerpoint, FrontPage, and so on. A security vulnerability exists in Microsoft Office, which can be exploited by attackers for privilege...

Microsoft Office Click-to-Run Elevation of Privilege Vulnerability

Microsoft Office is an office software suite of products from the U.S. company Microsoft Microsoft. The product's common components include Word, Excel, Access, Powerpoint, FrontPage, etc.. A security vulnerability exists in Microsoft Office AppVLP, which can be exploited by attackers to gain...

Microsoft Office Point and Click (C2R) AppVLP Elevation of Privilege Vulnerability

Microsoft Office is an office software suite of products from the U.S. company Microsoft Microsoft. The product's common components include Word, Excel, Access, Powerpoint, FrontPage, etc.. A security vulnerability exists in Microsoft Office point-and-click C2R AppVLP, which stems from an...

CVE-2020-27747

CVE-2020-27747 concerns Click Studios Passwordstate 8.9 (Build 8973). The issue: if a user set a 4‑digit PIN via the mobile built‑in generator, a remote attacker can brute‑force the PIN, potentially exposing all passwords accessible to the affected account. The available documents describe the af...

The vulnerability of the Click-to-Run component of Microsoft Office applications, which stems from the operation of transferring data out of the buffer into memory, allows attackers to exploit their privileges.

The vulnerability of the Click-to-Run component of Microsoft Office applications is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to enhance their privileges through a specially created file...

The vulnerability of the Click-to-Run component of Microsoft Office applications, which stems from the operation of transferring data out of the buffer into memory, allows attackers to exploit their privileges.

The vulnerability of the Click-to-Run component of Microsoft Office applications relates to the execution of operations outside the buffer boundaries in memory. Exploiting this vulnerability can allow attackers to enhance their privileges through a specially created file...

The vulnerability of the Click-to-Run components of Microsoft Office and Office 365 allows attackers to enhance their privileges.

The vulnerability of the Click-to-Run components of Microsoft Office and Office 365 relates to object handling errors in memory. Exploiting this vulnerability can allow attackers to gain increased privileges...

CVE-2020-16955

An elevation of privilege vulnerability exists in the way that Microsoft Office Click-to-Run C2R AppVLP handles certain files. An attacker who successfully exploited the vulnerability could elevate privileges. To exploit this vulnerability, an attacker would need to convince a user to open a...

CVE-2020-16955

An elevation of privilege vulnerability exists in the way that Microsoft Office Click-to-Run C2R AppVLP handles certain files. An attacker who successfully exploited the vulnerability could elevate privileges. To exploit this vulnerability, an attacker would need to convince a user to open a...

CVE-2020-16934

An elevation of privilege vulnerability exists in the way that Microsoft Office Click-to-Run C2R AppVLP handles certain files. An attacker who successfully exploited the vulnerability could elevate privileges. To exploit this vulnerability, an attacker would need to convince a user to open a...

CVE-2020-16928

An elevation of privilege vulnerability exists in the way that Microsoft Office Click-to-Run C2R AppVLP handles certain files. An attacker who successfully exploited the vulnerability could elevate privileges. To exploit this vulnerability, an attacker would need to convince a user to open a...

CVE-2020-16928

An elevation of privilege vulnerability exists in the way that Microsoft Office Click-to-Run C2R AppVLP handles certain files. An attacker who successfully exploited the vulnerability could elevate privileges. To exploit this vulnerability, an attacker would need to convince a user to open a...

Privilege escalation

An elevation of privilege vulnerability exists in the way that Microsoft Office Click-to-Run C2R AppVLP handles certain files. An attacker who successfully exploited the vulnerability could elevate privileges. To exploit this vulnerability, an attacker would need to convince a user to open a...

Privilege escalation

An elevation of privilege vulnerability exists in the way that Microsoft Office Click-to-Run C2R AppVLP handles certain files. An attacker who successfully exploited the vulnerability could elevate privileges. To exploit this vulnerability, an attacker would need to convince a user to open a...

Privilege escalation

An elevation of privilege vulnerability exists in the way that Microsoft Office Click-to-Run C2R AppVLP handles certain files. An attacker who successfully exploited the vulnerability could elevate privileges. To exploit this vulnerability, an attacker would need to convince a user to open a...

CVE-2020-16955 Microsoft Office Click-to-Run Elevation of Privilege Vulnerability

...

EUVD-2020-8913

An elevation of privilege vulnerability exists in the way that Microsoft Office Click-to-Run C2R AppVLP handles certain files. An attacker who successfully exploited the vulnerability could elevate privileges. To exploit this vulnerability, an attacker would need to convince a user to open a...

CVE-2020-16955

CVE-2020-16955 is an elevation-of-privilege vulnerability in Microsoft Office Click-to-Run (C2R) AppVLP, caused by how C2R handles certain files. An attacker could exploit this by convincing a user to open a specially crafted file to gain higher privileges. The vulnerability affects Microsoft Off...