Microsoft Win32k Component Information Disclosure Vulnerability (CNVD-2020-23429)

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation, U.S.A. Microsoft Windows is a set of operating systems for use on personal devices.Microsoft Windows Server is a set of server operating systems.win32k is the kernel part of one of the Windows subsystems...

Microsoft Windows Push Notification Service Information Disclosure Vulnerability

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is a set of operating systems for personal devices.Microsoft Windows Server is a set of server operating systems.Push Notification Service is one of the push notification services. An...

Windows Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists in the way that the Microsoft Store Install Service handles file operations in protected locations. An attacker who successfully exploited the vulnerability could execute code with elevated permissions. To exploit the vulnerability, a locally...

Win32k Information Disclosure Vulnerability

An information disclosure vulnerability exists when the win32k component improperly provides kernel information. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user’s system. To exploit this vulnerability, an attacker would have to log ...

DirectX Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists when DirectX improperly handles objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs; view, change, or delete data; or create new accounts with...

Windows Update Stack Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists when the Windows Update Stack fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs; view, change, or delete data; or...

Windows Denial of Service Vulnerability

A denial of service vulnerability exists when Windows improperly handles objects in memory. An attacker who successfully exploited the vulnerability could cause a target system to stop responding. To exploit this vulnerability, an attacker would have to log on to an affected system and run a...

PT-2020-2273

Name of the Vulnerable Software and Affected Versions Windows Update Stack affected versions not specified Description The issue is related to an elevation of privilege vulnerability that occurs when the Windows Update Stack fails to properly handle objects in memory. This can potentially allow a...

PT-2020-2263

Name of the Vulnerable Software and Affected Versions Windows Work Folder Service affected versions not specified Description The issue is related to the improper handling of file operations by the Windows Work Folder Service, which can allow an attacker to elevate their privileges using a...

PT-2020-2243

Name of the Vulnerable Software and Affected Versions Microsoft Windows Update Client affected versions not specified Description The issue is related to an elevation of privilege vulnerability in the Microsoft Windows Update Client. This vulnerability exists due to the client not properly handli...

PT-2020-2250

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description The issue is related to errors in handling objects in memory within the Windows operating system kernel. It allows an attacker to potentially elevate their privileges using a specially crafte...

PT-2020-2280

Name of the Vulnerable Software and Affected Versions Microsoft Windows affected versions not specified Description The issue is related to errors in handling objects in memory, which can be exploited by an attacker to elevate their privileges using a specially crafted application. This allows...

PT-2020-2257

Name of the Vulnerable Software and Affected Versions Visual Studio Extension Installer Service affected versions not specified Description An elevation of privilege issue exists due to the improper handling of file operations by the Visual Studio Extension Installer Service. This could allow an...

PT-2020-2192

Name of the Vulnerable Software and Affected Versions Windows Update Stack affected versions not specified Description The issue is related to errors in handling objects in memory within the Windows Update Stack of Windows operating systems. This can be exploited by an attacker to elevate their...

PT-2020-2272

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description The issue is related to errors in handling objects in memory within the Windows operating system kernel. It allows an attacker to potentially elevate their privileges using a specially crafte...

CVE-2020-6437

Inappropriate implementation in WebView in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to spoof security UI via a crafted application...

CVE-2020-6437

Inappropriate implementation in WebView in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to spoof security UI via a crafted application...

UBUNTU-CVE-2020-6437

Inappropriate implementation in WebView in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to spoof security UI via a crafted application...

CVE-2020-6437

Inappropriate implementation in WebView in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to spoof security UI via a crafted application...

Security Advisory - Information Disclosure Vulnerability about SWAPGS Instruction

An information disclosure vulnerability exists when certain x86-64-bit central processing units CPU speculatively access memory, this vulnerability uses the SWAPGS instruction in the CPU. To exploit this vulnerability, an attacker would have to log on to an affected system and run a specially...