The vulnerability of the application control tool. Windows Defender Application Control (WDAC), a PowerShell Core automation tool, allows a hacker to execute arbitrary code.

The vulnerability of the application control tool, Windows Defender Application Control WDAC, a PowerShell Core automation tool, is related to errors during command validation. Exploiting this vulnerability allows an attacker to execute arbitrary code...

The vulnerability of Microsoft Office and Microsoft Excel packages lies in memory object processing errors, which allow attackers to exploit these vulnerabilities to disclose sensitive information.

The vulnerability of Microsoft Office and Microsoft Excel packages is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to disclose sensitive information through a specially created document file...

The vulnerability of the Microsoft Windows Codecs Library, which is used for processing media content on Windows operating systems, allows a hacker to execute arbitrary code.

The vulnerability of the Microsoft Windows Codecs Library, used for processing media content, in Windows operating systems is related to errors in object handling in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code on the target system using a specially...

Alfresco Authorization Issues Vulnerability

Alfresco is an open source enterprise content management system. The platform page using Freemarker development , the main features include document management , collaboration , records management , knowledge base management , Web content management and so on. A vulnerability exists in Alfresco...

The vulnerability of the Packaging Scripts component of the Oracle Solaris operating system, which allows a hacker to trigger a service failure.

The vulnerability of the Packaging Scripts component of the Oracle Solaris operating system is related to resource release errors. Exploiting this vulnerability can allow an attacker to cause service failures...

The vulnerabilities of Adobe Acrobat and Adobe Reader PDF viewer/editor programs, related to data conversion errors, allow attackers to execute arbitrary code.

The vulnerability of Adobe Acrobat and Adobe Reader PDF viewer/editor programs is related to data conversion errors. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially created HTML file...

The vulnerability of the Windows Backup Service allows attackers to exploit their privileges.

The vulnerability of the Windows Backup Service in Microsoft Windows operating systems is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerability of the WalletService service on Windows operating systems allows a perpetrator to escalate their privileges.

The vulnerability of the WalletService service for Windows operating systems is related to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to increase their privileges through a specially created application...

The vulnerability of the File Server Resource Manager, a component of the Windows operating system, allows attackers to increase their privileges.

The vulnerability of the File Server Resource Manager in Windows operating systems is related to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to increase their privileges through a specially created application...

The vulnerability of the Connected User Experiences and Telemetry Services for Windows operating systems allows attackers to enhance their privileges.

The vulnerability of the Connected User Experiences and Telemetry Services for Windows operating systems is related to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to enhance their privileges through a specially created application...

The vulnerability of the File Server Resource Manager, a component of the Windows operating system, allows attackers to increase their privileges.

The vulnerability of the File Server Resource Manager in Windows operating systems is related to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to increase their privileges through a specially created application...

DEBIAN-CVE-2020-3702

u'Specifically timed and handcrafted traffic can cause internal errors in a WLAN device that lead to improper layer 2 Wi-Fi encryption with a consequent possibility of information disclosure over the air for a discrete set of traffic' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivit...

PT-2020-4079 · Microsoft · Windows Runtime +1

Name of the Vulnerable Software and Affected Versions: Windows Runtime affected versions not specified Description: The issue is related to errors in access control within the Windows Runtime component of the Windows operating system. It allows an attacker to execute arbitrary code with elevated...

PT-2020-4160 · Microsoft · Windows Cryptographic Services +1

Name of the Vulnerable Software and Affected Versions: Windows Cryptographic Services affected versions not specified Description: The issue is related to errors in access control within the Windows Cryptographic Services, allowing an attacker to elevate their privileges. To exploit this, an...

PT-2020-3916 · Microsoft · Active Directory Federation Services +1

Name of the Vulnerable Software and Affected Versions: Active Directory Federation Services ADFS affected versions not specified Description: An elevation of privilege issue exists due to improper handling of multi-factor authentication requests by Active Directory Federation Services ADFS. This...

PT-2020-4083 · Microsoft · Windows Gdi +1

Name of the Vulnerable Software and Affected Versions: Windows GDI affected versions not specified Description: The issue is related to errors in handling objects in memory by the Windows Graphics Device Interface GDI. This can allow a remote attacker to execute arbitrary code, potentially giving...

Huawei Honor 20 PRO Information Disclosure Vulnerability

Huawei Honor V20 is a smartphone from Chinese company Huawei Huawei. Huawei Honor 20 PRO suffers from an information disclosure vulnerability that stems from errors such as configuration during operation of a network system or product. An attacker can use the vulnerability to obtain sensitive...

The vulnerability of the Protocol Independent Multicast (PIM) implementation in the Cisco NX-OS network operating system allows a attacker to trigger a service failure.

The vulnerability of the Cisco NX-OS network operating system’s Protocol Independent Multicast PIM implementation is related to resource release errors. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

The vulnerability of Cisco Small Business network device software related to IPv6 traffic processing errors allows a perpetrator to cause service interruptions.

The vulnerability of Cisco Small Business network devices’ microprogramming software is related to errors in handling IPv6 traffic. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

The vulnerability of the MSHTML mechanism in the Internet Explorer browser, allowing a hacker to execute arbitrary code

The vulnerability of the MSHTML mechanism in the Internet Explorer browser is related to errors in data processing. Exploiting this vulnerability allows a remote attacker to perform arbitrary actions...