PT-2020-3916 · Microsoft · Active Directory Federation Services +1

Name of the Vulnerable Software and Affected Versions: Active Directory Federation Services ADFS affected versions not specified Description: An elevation of privilege issue exists due to improper handling of multi-factor authentication requests by Active Directory Federation Services ADFS. This...

Huawei Honor 20 PRO Information Disclosure Vulnerability

Huawei Honor V20 is a smartphone from Chinese company Huawei Huawei. Huawei Honor 20 PRO suffers from an information disclosure vulnerability that stems from errors such as configuration during operation of a network system or product. An attacker can use the vulnerability to obtain sensitive...

Cisco NX-OS PIM DoS

The vulnerability of the Cisco NX-OS network operating system’s Protocol Independent Multicast PIM implementation is related to resource release errors. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

Cisco Small Business IPv6 DoS

The vulnerability of Cisco Small Business network devices’ microprogramming software is related to errors in handling IPv6 traffic. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

MSHTML Code Execution

The vulnerability of the MSHTML mechanism in the Internet Explorer browser is related to errors in data processing. Exploiting this vulnerability allows a remote attacker to perform arbitrary actions...

SQLite Number Processing DoS

The vulnerability of SQLite database software is related to errors in number processing. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

SSDP Privilege Escalation

The vulnerability of the SSDP protocol implementation in the Windows operating system exists due to errors in memory object handling. Exploiting this vulnerability can allow an attacker to increase their privileges...

Microsoft Access Database Code Execution

The vulnerability of the relational database management system used by Microsoft Access programs within the Microsoft Office and Office 365 suites exists due to errors in object processing in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

Important: thunderbird

Issue Overview: Use after free in ANGLE in Google Chrome prior to 81.0.4044.122 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. CVE-2020-6463 By observing the stack trace for JavaScript errors in web workers, it was possible to leak the result of a...

Windows Setup Privilege Exploitation

The vulnerability of the Windows Setup application’s installation service is related to errors in the use of standard permissions. Exploiting this vulnerability can allow an attacker to increase their privileges...

Microsoft JET Database Engine Code Execution

The vulnerability of the Microsoft JET Database Engine driver for Windows operating systems exists due to object handling errors in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Microsoft Windows Codecs Library Code Execution

The vulnerability of the Microsoft Windows Codecs Library for processing media content exists due to errors in object handling in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially created image file from a remote location...

Medical Data Leaked on GitHub Due to Developer Errors

Developer error caused the leak of 150,000 to 200,000 patient health records stored in productivity apps from Microsoft and Google that were recently found on GitHub. Dutch researcher Jelle Ursem discovered nine separate files of highly sensitive personal health information PHI from apps such as...

Windows GDI Privilege Escalation

The vulnerability of the Windows GDI component in Windows operating systems is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to gain increased privileges...

Windows Folder Service Privilege Escalation

The vulnerability of Windows operating system’s folder service is related to errors in file handling operations. Exploiting this vulnerability can allow an attacker to gain increased privileges...

Windows OS File Signature Load Arbitrary Files

The vulnerability of Windows operating systems is related to errors in checking file signatures. Exploiting this vulnerability can allow an attacker to load arbitrary files into the operating system...

Windows Image Acquisition Unauthorized Access

The vulnerability of the Windows Image Acquisition service in Windows operating systems is related to errors in processing objects in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

APIs Are the Next Frontier in Cybercrime

Application Programming Interface API usage has exploded, and cybercriminals are increasingly taking advantage of API security flaws to commit fraud and steal data. APIs, which are used to create connections between software programs and perform integrations, make everything a bit easier — from...

SoMove Privilege Escalation

The vulnerability of software for configuring devices and monitoring SoMove metrics is related to errors in the use of standard permissions. Exploiting this vulnerability can allow an attacker to enhance their privileges...

Coturn STUN TURN Buffer Overflow

The vulnerability of the STUN/TURN response buffer in the Coturn web server is related to initialization errors. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data...