Microsoft Windows/Windows Server Elevation of Privilege Vulnerability (CNVD-2021-68742)

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation, an operating system for personal devices, and Microsoft Windows Server, a server operating system. An elevation of privilege vulnerability exists in Microsoft Windows/Windows Server, which stems from a...

Microsoft OneDrive for Windows Elevation of Privilege Vulnerability (CNVD-2020-54061)

OneDrive is a file hosting service and synchronization service introduced by Microsoft as part of the Web version of Office. An elevation of privilege vulnerability exists in OneDrive for Windows. The vulnerability stems from the OneDrive for Windows desktop application not properly handling...

The vulnerability of the Windows Backup Engine system allows a hacker to increase their privileges.

The vulnerability of the Windows Backup Engine system arises from an operation that goes beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to enhance their privileges through a specially created application...

The vulnerability of the UPnP Device Host service for Windows operating systems allows attackers to increase their privileges.

The vulnerability of the UPnP Device Host service for Windows operating systems is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow an attacker to enhance their privileges through a specially created application...

The vulnerability of the Windows Backup Engine system allows a hacker to increase their privileges.

The vulnerability of the Windows Backup Engine system arises from an operation that goes beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to enhance their privileges through a specially created application...

The vulnerability of the Windows Backup Engine system allows a hacker to increase their privileges.

The vulnerability of the Windows Backup Engine system arises from an operation that goes beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to enhance their privileges through a specially created application...

The vulnerability of the File Server Resource Manager, a component of the Windows operating system, allows attackers to increase their privileges.

The vulnerability of the File Server Resource Manager in Windows operating systems is related to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to increase their privileges through a specially created application...

The vulnerability of the Windows Speech Runtime component in operating systems allows attackers to exploit their privileges.

The vulnerability of the Windows Speech Runtime component in operating systems is related to errors in memory object handling. Exploiting this vulnerability can allow attackers to enhance their privileges through a specially created application...

The vulnerability of the Storage Service component of the Windows operating system, which allows a hacker to increase their privileges

The vulnerability of the Windows operating system’s Storage Service component is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker to enhance their privileges through a specially created application...

The vulnerability of the CSC Service in Windows operating systems allows attackers to escalate their privileges.

The vulnerability of the CSC Service for Windows operating systems is related to incorrect handling of objects in memory. Exploiting this vulnerability can allow an attacker to enhance their privileges through a specially created application...

The vulnerability of the Work Folder Service in Windows operating systems allows a perpetrator to escalate their privileges.

The vulnerability of the Work Folder Service service in Windows operating systems is related to improper handling of file operations. Exploiting this vulnerability can allow an attacker to enhance their privileges through a specially created application...

The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Foundation, and Microsoft SharePoint Enterprise Server lies in the lack of protection for administrative data, which allows attackers to disclose protected information.

The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Foundation, and Microsoft SharePoint Enterprise Server lies in the lack of protection for operational data. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information through a specially create...

The vulnerability of the Windows Custom Protocol Engine component of the operating system allows attackers to enhance their privileges.

The vulnerability of the Windows Custom Protocol Engine component of the Windows operating system arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to enhance their privileges through a specially created application...

The vulnerability of the Windows Backup Engine system allows a hacker to increase their privileges.

The vulnerability of the Windows Backup Engine system arises from an operation that goes beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to enhance their privileges through a specially created application...

The vulnerability of the Windows Telephony Server server software from Microsoft Windows allows attackers to increase their privileges.

The vulnerability of the Windows Telephony Server server operating system is caused by an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to increase their privileges through a specially created application...

The vulnerability of the Windows Backup Engine system allows a hacker to increase their privileges.

The vulnerability of the Windows Backup Engine system arises from an operation that goes beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to enhance their privileges through a specially created application...

The vulnerability of the Windows Backup Engine system allows a hacker to increase their privileges.

The vulnerability of the Windows Backup Engine system arises from an operation that goes beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to enhance their privileges through a specially created application...

PT-2020-4152 · Microsoft · Windows Storage Services +1

Name of the Vulnerable Software and Affected Versions: Windows Storage Services affected versions not specified Description: The issue is related to the improper handling of file operations by the Windows Storage Services, which could allow an attacker to gain elevated privileges. To exploit this...

PT-2020-4041 · Microsoft · Windows Runtime +1

Name of the Vulnerable Software and Affected Versions: Windows Runtime affected versions not specified Description: The issue is related to errors in handling objects in memory within the Windows Runtime component of the Windows operating system. This can be exploited by an attacker to elevate...

PT-2020-3895 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: An information disclosure issue exists due to improper handling of objects in memory by StartTileData.dll. This could allow an attacker to obtain information that could further compromise t...