13328 matches found
Windows Runtime Privilege Escalation
The vulnerability of the Windows Runtime component of the Windows operating system is related to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to enhance their privileges and execute malicious code through a specially created application...
PT-2020-22877
Уязвимость процесса юнита-сессии loginctl подсистемы инициализации и управления службами Systemd связана с ошибками в настройках безопасности. Эксплуатация уязвимости может позволить нарушителю получить доступ к конфиденциальным данным...
Windows Runtime Privilege Escalation
The vulnerability of the Windows Runtime component of the Windows operating system is related to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to enhance their privileges through a specially created application...
UBUNTU-CVE-2020-15652
By observing the stack trace for JavaScript errors in web workers, it was possible to leak the result of a cross-origin redirect. This applied only to content that can be parsed as script. This vulnerability affects Firefox 79, Firefox ESR 68.11, Firefox ESR 78.1, Thunderbird 68.11, and Thunderbi...
Security Vulnerabilities fixed in Firefox ESR 68.11 — Mozilla
By observing the stack trace for JavaScript errors in web workers, it was possible to leak the result of a cross-origin redirect. This applied only to content that can be parsed as script. WebRTC used the memory address of a class instance as a connection identifier. Unfortunately, this value is...
Adobe Creative Cloud Security Update (APSB20-33) - Windows
Adobe Creative cloud is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:adobe:creativecloud";...
QtNetwork: Denial of service
Background QtNetwork provides a set of APIs for programming applications that use TCP/IP. It is part of the Qt framework. Description A flaw was discovered in QtNetwork’s handling of OpenSSL protocol errors. Impact An attacker could cause a possible Denial of Service condition. Workaround There i...
MpSigStub.exe File Deletion
The vulnerability of the MpSigStub.exe executable file of Microsoft’s Windows Defender is related to privilege management errors. Exploiting this vulnerability could allow a malicious actor to delete files in certain parts of the file system remotely...
Windows Sync Host Service Privilege Escalation
The vulnerability of the Windows Sync Host Service for Windows operating systems is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to enhance their privileges and execute arbitrary code through a specially created application...
Windows Runtime Privilege Escalation
The vulnerability of the Windows Runtime component in Microsoft Windows systems is related to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to enhance their privileges and execute arbitrary code using a specially created application...
Windows Address Book Code Execution
The vulnerability of the Windows Address Book component in Windows operating systems is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
DirectWrite Code Execution
The vulnerability of the DirectWrite application programming interface in Windows operating systems is related to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
Windows Lockscreen Privilege Escalation
The vulnerability of the Windows Lockscreen component in operating systems is related to errors in object handling in memory. Exploiting this vulnerability can allow a remote attacker to gain increased privileges...
netty: compression/decompression codecs don't enforce limits on buffer allocation sizes
A flaw was found in Netty in the way it handles the amount of data it compresses and decompresses. The Compression/Decompression codecs should enforce memory allocation size limits to avoid an Out of Memory Error OOME or exhaustion of the memory pool...
Microsoft Windows Picker Platform Privilege Escalation
The vulnerability of the Microsoft Windows Picker Platform operating system exists due to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to enhance their privileges through a specially created application...
Microsoft 365 Apps for Enterprise Object Processing Code Execution
The vulnerability of Microsoft 365 Apps for Enterprise, Microsoft Office, and the Microsoft Outlook email client is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially created file...
Denial of Service Vulnerability in Mitsubishi Electric Corporation GX Works2
GX Work2 is a PLC programming software developed by Mitsubishi Electric Automation Co., Ltd. for PLC design, debugging, maintenance and other work, which is widely used in electric power, machinery manufacturing, iron and steel, petroleum, chemical and other industrial control fields. A denial of...
Diagnostic Tool Privilege Escalation
The vulnerability of the diagnostic tool for Mobile Device Management applications exists due to errors in object handling in memory. Exploiting this vulnerability can allow attackers to enhance their privileges through a specially created application...
Windows Geolocation Framework Exploitation
The vulnerability of the Windows Geolocation Framework in Windows operating systems is related to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to enhance their privileges through a specially created application...
Windows Storage Services Privilege Escalation
The vulnerability of the Windows Storage Services service in Windows operating systems is related to errors in file handling operations. Exploiting this vulnerability can allow an attacker to gain increased privileges...