PT-2020-3916 · Microsoft · Active Directory Federation Services +1

Name of the Vulnerable Software and Affected Versions: Active Directory Federation Services ADFS affected versions not specified Description: An elevation of privilege issue exists due to improper handling of multi-factor authentication requests by Active Directory Federation Services ADFS. This...

PT-2020-4083 · Microsoft · Windows Gdi +1

Name of the Vulnerable Software and Affected Versions: Windows GDI affected versions not specified Description: The issue is related to errors in handling objects in memory by the Windows Graphics Device Interface GDI. This can allow a remote attacker to execute arbitrary code, potentially giving...

PT-2020-4079 · Microsoft · Windows Runtime +1

Name of the Vulnerable Software and Affected Versions: Windows Runtime affected versions not specified Description: The issue is related to errors in access control within the Windows Runtime component of the Windows operating system. It allows an attacker to execute arbitrary code with elevated...

PT-2020-4160 · Microsoft · Windows Cryptographic Services +1

Name of the Vulnerable Software and Affected Versions: Windows Cryptographic Services affected versions not specified Description: The issue is related to errors in access control within the Windows Cryptographic Services, allowing an attacker to elevate their privileges. To exploit this, an...

Huawei Honor 20 PRO Information Disclosure Vulnerability

Huawei Honor V20 is a smartphone from Chinese company Huawei Huawei. Huawei Honor 20 PRO suffers from an information disclosure vulnerability that stems from errors such as configuration during operation of a network system or product. An attacker can use the vulnerability to obtain sensitive...

The vulnerability of Cisco Small Business network device software related to IPv6 traffic processing errors allows a perpetrator to cause service interruptions.

The vulnerability of Cisco Small Business network devices’ microprogramming software is related to errors in handling IPv6 traffic. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

The vulnerability of the Protocol Independent Multicast (PIM) implementation in the Cisco NX-OS network operating system allows a attacker to trigger a service failure.

The vulnerability of the Cisco NX-OS network operating system’s Protocol Independent Multicast PIM implementation is related to resource release errors. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

The vulnerability of SQLite database software, related to errors in number processing, allows a hacker to trigger a service failure.

The vulnerability of SQLite database software is related to errors in number processing. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

The vulnerability of the relational database management system used by Microsoft Access programs within the Microsoft Office and Office 365 suites allows a perpetrator to execute arbitrary code.

The vulnerability of the relational database management system used by Microsoft Access programs within the Microsoft Office and Office 365 suites exists due to errors in object processing in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

The vulnerability of the MSHTML mechanism in the Internet Explorer browser, allowing a hacker to execute arbitrary code

The vulnerability of the MSHTML mechanism in the Internet Explorer browser is related to errors in data processing. Exploiting this vulnerability allows a remote attacker to perform arbitrary actions...

The vulnerability of the SSDP protocol implementation in the Windows operating system allows attackers to increase their privileges.

The vulnerability of the SSDP protocol implementation in the Windows operating system exists due to errors in memory object handling. Exploiting this vulnerability can allow an attacker to increase their privileges...

Important: thunderbird

Issue Overview: Use after free in ANGLE in Google Chrome prior to 81.0.4044.122 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. CVE-2020-6463 By observing the stack trace for JavaScript errors in web workers, it was possible to leak the result of a...

The vulnerability of the Windows Setup application installation process allows a hacker to exploit their privileges.

The vulnerability of the Windows Setup application’s installation service is related to errors in the use of standard permissions. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerability of the Microsoft Windows Codecs Library, which is used for processing media content on Windows operating systems, allows a hacker to execute arbitrary code.

The vulnerability of the Microsoft Windows Codecs Library for processing media content exists due to errors in object handling in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially created image file from a remote location...

The vulnerability of the Microsoft JET Database Engine driver for Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the Microsoft JET Database Engine driver for Windows operating systems exists due to object handling errors in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Medical Data Leaked on GitHub Due to Developer Errors

Developer error caused the leak of 150,000 to 200,000 patient health records stored in productivity apps from Microsoft and Google that were recently found on GitHub. Dutch researcher Jelle Ursem discovered nine separate files of highly sensitive personal health information PHI from apps such as...

The vulnerability of Windows operating systems, related to errors in file signature checking, allows a hacker to load arbitrary files into the OS.

The vulnerability of Windows operating systems is related to errors in checking file signatures. Exploiting this vulnerability can allow an attacker to load arbitrary files into the operating system...

The vulnerability of the Windows GDI component in Windows operating systems allows attackers to exploit their privileges.

The vulnerability of the Windows GDI component in Windows operating systems is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to gain increased privileges...

The vulnerability of the Windows Image Acquisition service in Windows operating systems allows a intruder to gain unauthorized access to protected information.

The vulnerability of the Windows Image Acquisition service in Windows operating systems is related to errors in processing objects in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

The vulnerability of Windows operating system’s folder service allows a hacker to increase their privileges.

The vulnerability of Windows operating system’s folder service is related to errors in file handling operations. Exploiting this vulnerability can allow an attacker to gain increased privileges...