PT-2020-3180

Name of the Vulnerable Software and Affected Versions Windows Speech Brokered API affected versions not specified Description The issue is related to errors in handling objects in memory within the Windows Speech Brokered API component of Windows operating systems. This can be exploited by an...

CVE-2020-9261

HUAWEI Mate 30 with versions earlier than 10.1.0.150C00E136R5P3 have a type confusion vulnerability. The system does not properly check and transform the type of certain variable, the attacker tricks the user into installing then running a crafted application, successful exploit could cause code...

CVE-2020-9262

HUAWEI Mate 30 with versions earlier than 10.1.0.150C00E136R5P3 have a use after free vulnerability. There is a condition exists that the system would reference memory after it has been freed, the attacker should trick the user into running a crafted application with high privilege, successful...

Race condition

HUAWEI Mate 30 with versions earlier than 10.1.0.150C00E136R5P3 have a race condition vulnerability. There is a timing window exists in which certain pointer members can be modified by another process that is operating concurrently, an attacker should trick the user into running a crafted...

CVE-2020-9262

HUAWEI Mate 30 with versions earlier than 10.1.0.150C00E136R5P3 have a use after free vulnerability. There is a condition exists that the system would reference memory after it has been freed, the attacker should trick the user into running a crafted application with high privilege, successful...

PT-2020-15112

Name of the Vulnerable Software and Affected Versions HUAWEI Mate 30 versions earlier than 10.1.0.150C00E136R5P3 Description The issue is related to a race condition vulnerability. There exists a timing window in which certain pointer members can be modified by another process operating...

CVE-2020-9262: Use After Free

HUAWEI Mate 30 with versions earlier than 10.1.0.150C00E136R5P3 have a use after free vulnerability. There is a condition exists that the system would reference memory after it has been freed, the attacker should trick the user into running a crafted application with high privilege, successful...

PT-2020-20555

Name of the Vulnerable Software and Affected Versions HUAWEI Mate 30 versions prior to 10.1.0.150C00E136R5P3 Description The issue is related to a type confusion problem where the system fails to properly check and transform the type of a certain variable. An attacker could trick a user into...

CVE-2020-1839: Concurrent Execution using Shared Resource with Improper Synchronization

HUAWEI Mate 30 with versions earlier than 10.1.0.150C00E136R5P3 have a race condition vulnerability. There is a timing window exists in which certain pointer members can be modified by another process that is operating concurrently, an attacker should trick the user into running a crafted...

CVE-2020-9261: Access of Resource Using Incompatible Type

HUAWEI Mate 30 with versions earlier than 10.1.0.150C00E136R5P3 have a type confusion vulnerability. The system does not properly check and transform the type of certain variable, the attacker tricks the user into installing then running a crafted application, successful exploit could cause code...

DirectX Windows Privilege Escalation

The vulnerability of the DirectX component in Windows operating systems is related to incorrect handling of objects in memory. Exploiting this vulnerability can allow attackers to enhance their privileges through a specially created application...

Microsoft Windows Printconfig DLL Privilege Escalation

The vulnerability of the printconfig.dll library in Windows operating systems is related to incorrect handling of objects in memory. Exploiting this vulnerability can allow attackers to enhance their privileges through a specially created application...

Windows Defender Privilege Escalation

The vulnerability of Microsoft Windows Defender operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges through a specially created application...

Windows Kernel Privilege Escalation

The vulnerability of the kernel of Microsoft Windows relates to the improper handling of objects in memory. Exploiting this vulnerability can allow an attacker to enhance their privileges by running a specially created application...

Windows WalletService Privilege Escalation

The vulnerability of the Windows WalletService service in Windows operating systems is related to improper handling of objects in memory. Exploiting this vulnerability can allow an attacker to enhance their privileges through a specially created application...

Win32k Privilege Escalation

The vulnerability of the Win32k component of the Windows operating system is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to enhance their privileges through a specially created application...

Huawei Mate 30 Resource Management Error Vulnerability

Huawei Mate 30 is a smartphone from the Chinese company Huawei Huawei. A security vulnerability exists in previous versions of Huawei Mate 30 10.1.0.150 C00E136R5P3, which stems from a scenario where the system will use memory that has already been freed. The vulnerability can be exploited by an...

Security Advisory - Use After Free Vulnerability in Several Smartphones

There is a use after free vulnerability in several smartphones. There is a condition exists that the system would reference memory after it has been freed, the attacker should trick the user into running a crafted application with high privilege, successful exploit could cause code execution...

WalletService Privilege Escalation

The vulnerability of the WalletService service for Windows operating systems is related to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to increase their privileges through a specially created application...

Bluetooth service Windows Privilege Escalation

The vulnerability of the Bluetooth service in Microsoft Windows operating systems is related to improper handling of objects in memory. Exploiting this vulnerability can allow an attacker to enhance their privileges by running a specially created application...