QtNetwork: Denial of service

Background QtNetwork provides a set of APIs for programming applications that use TCP/IP. It is part of the Qt framework. Description A flaw was discovered in QtNetwork’s handling of OpenSSL protocol errors. Impact An attacker could cause a possible Denial of Service condition. Workaround There i...

Windows Sync Host Service Privilege Escalation

The vulnerability of the Windows Sync Host Service for Windows operating systems is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to enhance their privileges and execute arbitrary code through a specially created application...

DirectWrite Code Execution

The vulnerability of the DirectWrite application programming interface in Windows operating systems is related to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

Windows Runtime Privilege Escalation

The vulnerability of the Windows Runtime component in Microsoft Windows systems is related to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to enhance their privileges and execute arbitrary code using a specially created application...

Windows Lockscreen Privilege Escalation

The vulnerability of the Windows Lockscreen component in operating systems is related to errors in object handling in memory. Exploiting this vulnerability can allow a remote attacker to gain increased privileges...

Windows Address Book Code Execution

The vulnerability of the Windows Address Book component in Windows operating systems is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

netty: compression/decompression codecs don't enforce limits on buffer allocation sizes

A flaw was found in Netty in the way it handles the amount of data it compresses and decompresses. The Compression/Decompression codecs should enforce memory allocation size limits to avoid an Out of Memory Error OOME or exhaustion of the memory pool...

: Parallels RAS OS Command Execution

1. Advisory Information Title : Parallels RAS OS Command Execution Advisory ID : CORE-2020-0011 Advisory URL:https://www.coresecurity.com/core-labs/advisories/parallels-ras-os-command-execution Date published : 2020-07-23 Date of last update : 2020-07-21 Vendors contacted : Parallels Release mode...

Denial of Service Vulnerability in Mitsubishi Electric Corporation GX Works2

GX Work2 is a PLC programming software developed by Mitsubishi Electric Automation Co., Ltd. for PLC design, debugging, maintenance and other work, which is widely used in electric power, machinery manufacturing, iron and steel, petroleum, chemical and other industrial control fields. A denial of...

Windows Runtime Privilege Escalation

The vulnerability of the Windows Runtime component of the Windows operating system exists due to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to enhance their privileges through a specially created application...

Diagnostic Tool Privilege Escalation

The vulnerability of the diagnostic tool for Mobile Device Management applications exists due to errors in object handling in memory. Exploiting this vulnerability can allow attackers to enhance their privileges through a specially created application...

Connected User Experiences and Telemetry Services Unauthorized Access

The vulnerability of the Connected User Experiences and Telemetry Services for Windows operating systems is related to file operation processing errors. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information through a specially created application...

Microsoft 365 Apps for Enterprise Object Processing Code Execution

The vulnerability of Microsoft 365 Apps for Enterprise, Microsoft Office, and the Microsoft Outlook email client is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially created file...

Microsoft Windows Picker Platform Privilege Escalation

The vulnerability of the Microsoft Windows Picker Platform operating system exists due to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to enhance their privileges through a specially created application...

Windows Geolocation Framework Exploitation

The vulnerability of the Windows Geolocation Framework in Windows operating systems is related to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to enhance their privileges through a specially created application...

Windows Modules Installer Service Privilege Escalation

The vulnerability of the Windows Modules Installer service in Windows operating systems is related to file handling errors. Exploiting this vulnerability can allow an attacker to enhance their privileges through a specially created application...

Windows Storage Services Privilege Escalation

The vulnerability of the Windows Storage Services service in Windows operating systems is related to errors in file handling operations. Exploiting this vulnerability can allow an attacker to gain increased privileges...

Windows Speech Brokered API Privilege Escalation

The vulnerability of the Windows Speech Brokered API in operating systems is related to errors in object handling in memory. Exploiting this vulnerability can allow attackers to enhance their privileges through a specially created application...

SD-WAN vEdge DoS

The vulnerability of the Deep Packet Inspection DPI implementation in SD-WAN vEdge 5000 Series and SD-WAN vEdge Cloud software lies in state management errors. Exploiting this vulnerability could allow a malicious actor to cause service interruptions remotely...

VMware Workspace One Auth Bypass

The vulnerability of VMware Workspace One software is related to errors in the certificate validation process. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...