The vulnerability of the Windows Address Book component in Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the Windows Address Book component in Windows operating systems is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

The vulnerability of the Windows Runtime component in Microsoft Windows operating systems allows attackers to escalate their privileges and execute arbitrary code.

The vulnerability of the Windows Runtime component in Microsoft Windows systems is related to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to enhance their privileges and execute arbitrary code using a specially created application...

The vulnerability of the Windows Sync Host Service on Windows operating systems allows a perpetrator to escalate their privileges and execute arbitrary code.

The vulnerability of the Windows Sync Host Service for Windows operating systems is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to enhance their privileges and execute arbitrary code through a specially created application...

The vulnerability of the DirectWrite programming interface in Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the DirectWrite application programming interface in Windows operating systems is related to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

netty: compression/decompression codecs don't enforce limits on buffer allocation sizes

A flaw was found in Netty in the way it handles the amount of data it compresses and decompresses. The Compression/Decompression codecs should enforce memory allocation size limits to avoid an Out of Memory Error OOME or exhaustion of the memory pool...

The vulnerability of the Connected User Experiences and Telemetry Services for Windows operating systems allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Connected User Experiences and Telemetry Services for Windows operating systems is related to file operation processing errors. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information through a specially created application...

The vulnerability of the Windows Speech Brokered API component in operating systems allows attackers to escalate their privileges.

The vulnerability of the Windows Speech Brokered API in operating systems is related to errors in object handling in memory. Exploiting this vulnerability can allow attackers to enhance their privileges through a specially created application...

The vulnerability of the Windows Geolocation Framework in Windows operating systems allows attackers to exploit their privileges.

The vulnerability of the Windows Geolocation Framework in Windows operating systems is related to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to enhance their privileges through a specially created application...

: Parallels RAS OS Command Execution

1. Advisory Information Title : Parallels RAS OS Command Execution Advisory ID : CORE-2020-0011 Advisory URL:https://www.coresecurity.com/core-labs/advisories/parallels-ras-os-command-execution Date published : 2020-07-23 Date of last update : 2020-07-21 Vendors contacted : Parallels Release mode...

The vulnerability of the Windows Storage Services service on Windows operating systems allows attackers to escalate their privileges.

The vulnerability of the Windows Storage Services service in Windows operating systems is related to errors in file handling operations. Exploiting this vulnerability can allow an attacker to gain increased privileges...

The vulnerability of the diagnostic tool for Mobile Device Management applications, which allows attackers to escalate their privileges.

The vulnerability of the diagnostic tool for Mobile Device Management applications exists due to errors in object handling in memory. Exploiting this vulnerability can allow attackers to enhance their privileges through a specially created application...

The vulnerability of the Microsoft Windows Picker Platform component of the Windows operating system, which allows a hacker to increase their privileges

The vulnerability of the Microsoft Windows Picker Platform operating system exists due to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to enhance their privileges through a specially created application...

Denial of Service Vulnerability in Mitsubishi Electric Corporation GX Works2

GX Work2 is a PLC programming software developed by Mitsubishi Electric Automation Co., Ltd. for PLC design, debugging, maintenance and other work, which is widely used in electric power, machinery manufacturing, iron and steel, petroleum, chemical and other industrial control fields. A denial of...

The vulnerability of the Windows Modules Installer service in Windows operating systems allows attackers to exploit their privileges.

The vulnerability of the Windows Modules Installer service in Windows operating systems is related to file handling errors. Exploiting this vulnerability can allow an attacker to enhance their privileges through a specially created application...

The vulnerability of Microsoft 365 Apps for Enterprise, Microsoft Office, and the Microsoft Outlook email client relates to object processing errors in memory, allowing an attacker to execute arbitrary code.

The vulnerability of Microsoft 365 Apps for Enterprise, Microsoft Office, and the Microsoft Outlook email client is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially created file...

The vulnerability of the Windows Runtime component of the Windows operating system, which allows a hacker to increase their privileges

The vulnerability of the Windows Runtime component of the Windows operating system exists due to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to enhance their privileges through a specially created application...

The vulnerability of the Deep Packet Inspection (DPI) implementation in the SD-WAN vEdge 5000 Series and SD-WAN vEdge Cloud software allows a attacker to trigger a service failure.

The vulnerability of the Deep Packet Inspection DPI implementation in SD-WAN vEdge 5000 Series and SD-WAN vEdge Cloud software lies in state management errors. Exploiting this vulnerability could allow a malicious actor to cause service interruptions remotely...

The vulnerability of the monitoring tool for the virtual infrastructure vRealize Operations, related to authentication errors, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the monitoring tool for the vRealize Operations virtual infrastructure is related to authentication errors. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the Microsoft SharePoint Server software, the Microsoft Lync Server and Skype for Business Server messaging applications is related to errors in token verification by Oauth. This vulnerability allows attackers to escalate their privileges.

The vulnerability of the Microsoft SharePoint Server software, the Microsoft Lync Server and Skype for Business Server messaging applications is related to errors in token verification using Oauth. Exploiting this vulnerability can allow attackers to gain increased privileges...

The vulnerability of the Windows Runtime component of the Windows operating system, allowing a hacker to execute arbitrary code

The vulnerability of the Windows Runtime component of the Windows operating system exists due to errors in object handling in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code through a specially created application...