CVE-2021-1643 HEVC Video Extensions Remote Code Execution Vulnerability

...

CVE-2021-1643

CVE-2021-1643 is a remote code execution vulnerability in Microsoft's HEVC Video Extensions (HEVC Video Extensions or HEVC from Device Manufacturer). Connected sources indicate the root cause is insufficient input validation in the HEVC Video Extension codec, enabling arbitrary code execution whe...

CVE-2021-1642

CVE-2021-1642 affects Windows AppX Deployment Extensions and is described as an Elevation of Privilege vulnerability. CVSSv3.1 score 7.8 (HIGH) with local attack vector, low complexity, and privileges required LOW; impact to confidentiality, integrity, and availability is HIGH. Connected document...

Windows AppX Deployment Extensions Elevation of Privilege Vulnerability

...

HEVC Video Extensions Remote Code Execution Vulnerability

...

Windows AppX Deployment Extensions Elevation of Privilege Vulnerability

...

Microsoft HEVC Video Extensions 安全漏洞

Microsoft HEVC Video Extensions is a video extension application from Microsoft USA. The application enables computers and devices to read High Efficiency Video Coding or HEVC videos. A remote code execution vulnerability exists in Microsoft HEVC Video Extensions. An attacker could exploit this...

Microsoft Windows AppX Deployment Extensions Permission License and Access Control Issues Vulnerability

Microsoft Windows AppX Deployment Extensions is an AppX Deployment Extension DLL from Microsoft, USA, which is part of the Microsoft Windows operating system. Microsoft Windows AppX Deployment Extensions is vulnerable to a permission and access control issue, for which no information is available...

PT-2021-1686 · Unknown · Hevc Video Extensions

Name of the Vulnerable Software and Affected Versions: HEVC Video Extensions affected versions not specified Description: The issue is due to insufficient input validation in the HEVC Video Extension codec. This can allow a remote attacker to execute arbitrary code. Recommendations: At the moment...

Microsoft Windows AppX Deployment Extensions Security Vulnerability

Microsoft Windows AppX Deployment Extensions is an AppX Deployment Extensions DLL from Microsoft Corporation USA that is part of the Microsoft Windows operating system. A security vulnerability exists in Microsoft Windows AppX Deployment Extensions. The following products and editions are...

PT-2021-1591 · Microsoft · Windows Appx Deployment Extensions +1

Name of the Vulnerable Software and Affected Versions: Windows AppX Deployment Extensions affected versions not specified Description: The issue is related to insufficient access restrictions in Windows AppX Deployment Extensions, allowing an attacker to potentially elevate their privileges. This...

KB4598243: Windows 10 Version 1607 and Windows Server 2016 January 2021 Security Update

The remote Windows host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - Windows AppX Deployment Extensions Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2021-1685. CVE-2021-1642 - Windows DNS Query Information Disclosure Vulnerability...

PT-2021-1689 · Microsoft · Windows Appx Deployment Extensions +1

Name of the Vulnerable Software and Affected Versions: Windows AppX Deployment Extensions affected versions not specified Description: The issue is related to insufficient access restrictions in Windows AppX Deployment Extensions, allowing an attacker to potentially elevate their privileges using...

Microsoft HEVC Video Extensions 安全漏洞

Microsoft HEVC Video Extensions is a video extension application from Microsoft USA. The application enables computers and devices to read High Efficiency Video Coding or HEVC videos. A remote code execution vulnerability exists in Microsoft HEVC Video Extensions. An attacker could exploit this...

PT-2021-1681 · Microsoft · Hevc Video Extensions

Name of the Vulnerable Software and Affected Versions: HEVC Video Extensions affected versions not specified Description: The issue is due to insufficient input validation in the HEVC Video Extension codec. This can allow a remote attacker to execute arbitrary code. Recommendations: At the moment...

Microsoft Windows Codecs Library Multiple Vulnerabilities (January 2021)

The Windows 'HEVC Video Extensions' or 'HEVC from Device Manufacturer' app installed on the remote host is affected by multiple remote code execution vulnerabilities: - A remote code execution vulnerability exists in the Microsoft Windows Codecs Library HEVC Extension. An attacker who successfull...

DEBIAN-CVE-2020-16039

Use after free in extensions in Google Chrome prior to 87.0.4280.88 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

DEBIAN-CVE-2020-16027

Insufficient policy enforcement in developer tools in Google Chrome prior to 87.0.4280.66 allowed an attacker who convinced a user to install a malicious extension to obtain potentially sensitive information from the user's disk via a crafted Chrome Extension...

UBUNTU-CVE-2020-16039

Use after free in extensions in Google Chrome prior to 87.0.4280.88 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

Security Bulletin: Vulnerability in PCRE affects IBM Netezza SQL Extensions Toolkit

Summary PCRE is used by IBM Netezza SQL Extensions Toolkit. IBM Netezza SQL Extensions Toolkit has addressed the applicable CVE by upgrading PCRE to latest version 8.44. Vulnerability Details CVEID: CVE-2020-14155 DESCRIPTION: PCRE could allow a remote attacker to execute arbitrary code on the...