UBUNTU-CVE-2020-15652

By observing the stack trace for JavaScript errors in web workers, it was possible to leak the result of a cross-origin redirect. This applied only to content that can be parsed as script. This vulnerability affects Firefox 79, Firefox ESR 68.11, Firefox ESR 78.1, Thunderbird 68.11, and Thunderbi...

The vulnerability of the Windows Runtime component of the Windows operating system allows attackers to elevate their privileges and execute arbitrary code.

The vulnerability of the Windows Runtime component of the Windows operating system is related to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to enhance their privileges and execute malicious code through a specially created application...

The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Foundation, and Microsoft SharePoint Enterprise Server packages lies in information representation errors in the user interface, which allows attackers to execute cross-site scripting attacks.

The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Foundation, and Microsoft SharePoint Enterprise Server relates to information representation errors in the user interface. Exploiting this vulnerability can allow attackers to perform spear-phishing attacks remotely...

Security Vulnerabilities fixed in Firefox ESR 68.11 — Mozilla

By observing the stack trace for JavaScript errors in web workers, it was possible to leak the result of a cross-origin redirect. This applied only to content that can be parsed as script. WebRTC used the memory address of a class instance as a connection identifier. Unfortunately, this value is...

Adobe Creative Cloud Security Update (APSB20-33) - Windows

Adobe Creative cloud is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:adobe:creativecloud";...

QtNetwork: Denial of service

Background QtNetwork provides a set of APIs for programming applications that use TCP/IP. It is part of the Qt framework. Description A flaw was discovered in QtNetwork’s handling of OpenSSL protocol errors. Impact An attacker could cause a possible Denial of Service condition. Workaround There i...

The vulnerability of the MpSigStub.exe executable of Microsoft Windows Defender allows a hacker to delete files in certain parts of the file system.

The vulnerability of the MpSigStub.exe executable file of Microsoft’s Windows Defender is related to privilege management errors. Exploiting this vulnerability could allow a malicious actor to delete files in certain parts of the file system remotely...

The vulnerability of the Windows Lockscreen component allows attackers to elevate their privileges.

The vulnerability of the Windows Lockscreen component in operating systems is related to errors in object handling in memory. Exploiting this vulnerability can allow a remote attacker to gain increased privileges...

The vulnerability of the Windows Address Book component in Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the Windows Address Book component in Windows operating systems is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

The vulnerability of the Windows Runtime component in Microsoft Windows operating systems allows attackers to escalate their privileges and execute arbitrary code.

The vulnerability of the Windows Runtime component in Microsoft Windows systems is related to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to enhance their privileges and execute arbitrary code using a specially created application...

The vulnerability of the Windows Sync Host Service on Windows operating systems allows a perpetrator to escalate their privileges and execute arbitrary code.

The vulnerability of the Windows Sync Host Service for Windows operating systems is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to enhance their privileges and execute arbitrary code through a specially created application...

The vulnerability of the DirectWrite programming interface in Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the DirectWrite application programming interface in Windows operating systems is related to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

netty: compression/decompression codecs don't enforce limits on buffer allocation sizes

A flaw was found in Netty in the way it handles the amount of data it compresses and decompresses. The Compression/Decompression codecs should enforce memory allocation size limits to avoid an Out of Memory Error OOME or exhaustion of the memory pool...

The vulnerability of the Windows Geolocation Framework in Windows operating systems allows attackers to exploit their privileges.

The vulnerability of the Windows Geolocation Framework in Windows operating systems is related to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to enhance their privileges through a specially created application...

The vulnerability of the Windows Speech Brokered API component in operating systems allows attackers to escalate their privileges.

The vulnerability of the Windows Speech Brokered API in operating systems is related to errors in object handling in memory. Exploiting this vulnerability can allow attackers to enhance their privileges through a specially created application...

The vulnerability of the Connected User Experiences and Telemetry Services for Windows operating systems allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Connected User Experiences and Telemetry Services for Windows operating systems is related to file operation processing errors. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information through a specially created application...

: Parallels RAS OS Command Execution

1. Advisory Information Title : Parallels RAS OS Command Execution Advisory ID : CORE-2020-0011 Advisory URL:https://www.coresecurity.com/core-labs/advisories/parallels-ras-os-command-execution Date published : 2020-07-23 Date of last update : 2020-07-21 Vendors contacted : Parallels Release mode...

The vulnerability of the Microsoft Windows Picker Platform component of the Windows operating system, which allows a hacker to increase their privileges

The vulnerability of the Microsoft Windows Picker Platform operating system exists due to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to enhance their privileges through a specially created application...

The vulnerability of the diagnostic tool for Mobile Device Management applications, which allows attackers to escalate their privileges.

The vulnerability of the diagnostic tool for Mobile Device Management applications exists due to errors in object handling in memory. Exploiting this vulnerability can allow attackers to enhance their privileges through a specially created application...

The vulnerability of the Windows Storage Services service on Windows operating systems allows attackers to escalate their privileges.

The vulnerability of the Windows Storage Services service in Windows operating systems is related to errors in file handling operations. Exploiting this vulnerability can allow an attacker to gain increased privileges...