Privilege escalation

An elevation of privilege vulnerability exists when the Windows Work Folder Service improperly handles file operations, aka 'Windows Work Folder Service Elevation of Privilege Vulnerability'...

CVE-2020-1094

CVE-2020-1094 is an elevation of privilege vulnerability in the Windows Work Folder Service. The flaw arises from improper handling of file operations within the Work Folder Service, enabling a locally authenticated attacker to elevate privileges by running a crafted application. The vulnerabilit...

CVE-2020-1094

An elevation of privilege vulnerability exists when the Windows Work Folder Service improperly handles file operations, aka 'Windows Work Folder Service Elevation of Privilege Vulnerability'...

CVE-2020-1094

An elevation of privilege vulnerability exists when the Windows Work Folder Service improperly handles file operations, aka ‘Windows Work Folder Service Elevation of Privilege Vulnerability’. Recent assessments: bac2binary at April 15, 2020 4:47pm UTC reported: The attack complexity is very less,...

PT-2020-20568 · Silverstripe · Silverstripe

Name of the Vulnerable Software and Affected Versions: SilverStripe versions prior to 4.6 Description: The issue affects files uploaded via Forms to folders migrated from Silverstripe CMS 3.x, where they may be put in the default "/Uploads" folder instead of the intended location. This impacts...

CVE-2020-9461

Octech Oempro 4.7 through 4.11 allow stored XSS by an authenticated user. The FolderName parameter of the Media.CreateFolder command is vulnerable...

Windows Work Folder Service Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists when the Windows Work Folder Service improperly handles file operations. An attacker who successfully exploited this vulnerability could run processes in an elevated context. An attacker could exploit this vulnerability by running a specially crafted...

KLA11743 Multiple vulnerabilities in Microsoft products (ESU)

Multiple vulnerabilities were found in Microsoft products Extended Support Update. Malicious users can exploit these vulnerabilities to execute arbitrary code, obtain sensitive information, gain privileges, cause denial of service. Below is a complete list of vulnerabilities: 1. A memory corrupti...

March 17, 2020—KB4541331 (OS Build 17763.1131)

March 17, 2020—KB4541331 OS Build 17763.1131 For more information about the various types of Windows updates, such as critical, security, driver, service packs, and so on, please see the following article. Highlights Updates an issue that causes an error when printing to a document share. Updates...

MS12-051: Vulnerability in Microsoft Office for Mac could allow elevation of privilege: July 10, 2012

Describes the Microsoft Office for Mac 2011 14.2.3 Update that was released on July 10, 2012INTRODUCTIONMicrosoft has released security bulletin MS12-051. This security bulletin contains all the relevant information about the security update for Microsoft Office for Mac 2011. To view the complete...

Unspecified Vulnerability in Palo Alto Networks Secdo

Palo Alto Networks Secdo is a security incident response solution from Palo Alto Networks, USA. An unspecified vulnerability exists in Palo Alto Networks Secdo, which arises from the program setting incorrect default permissions for folders. An attacker could exploit the vulnerability to elevate...

Unspecified Vulnerability in Samsung Mobile Devices (CNVD-2020-31270)

Android is a Linux-based open source operating system jointly developed by Google Inc. and the Open Handheld Alliance OHA for short. Samsung mobile devices have a security vulnerability that can be exploited by attackers to run applications in a locked Secure Folder without a password...

Samsung Mobile Device Authorization Issue Vulnerability (CNVD-2020-31264)

Android is a Linux-based open source operating system jointly developed by Google Inc. and the Open Handheld Alliance OHA for short. Samsung mobile devices have an authorization issue vulnerability that can be exploited by an attacker to gain access to clipboard contents in a locked Secure Folder...

Samsung Mobile Device Access Control Error Vulnerability

Android is a Linux-based open source operating system jointly developed by Google Inc. and the Open Handheld Alliance OHA for short. The Samsung Mobile Device Access Control Error vulnerability can be exploited by an attacker to access Gallery albums in Secure Folder without authentication...

Conflicting files in Internet Explorer favorites when Work Folders is installed in Windows 8.1

Conflicting files in Internet Explorer favorites when Work Folders is installed in Windows 8.1 This article describes a Work Folders issue in Windows 8.1. You can fix this issue by using the update in this article. Before you install this update, see the Prerequisites section. Symptoms User's...

Event 55 when you copy an encrypted folder to EFS shared folder in Windows

Event 55 when you copy an encrypted folder to EFS shared folder in Windows Symptoms Assume that you enable Encryption File System EFS on a shared folder on a computer that is running Windows 8.1, Windows Server 2012 R2, Windows 8, Windows Server 2012, Windows 7 Service Pack 1 SP1, Windows Server...

The logon process for new users takes significantly longer as the number of user profiles increases in Windows

The logon process for new users takes significantly longer as the number of user profiles increases in Windows Symptoms Consider the following scenario: You have a Windows Server 2012 R2 or Windows Server 2008 R2-based domain environment that contains Windows 8.1 or Windows 7 domain clients. The...

CVE-2018-21062

An issue was discovered on Samsung mobile devices with N7.x and O8.x software. When biometric authentication is disabled, an attacker can view Streams content e.g., a Gallery slideshow of a locked Secure Folder via a connection to an external device. The Samsung ID is SVE-2018-11766 August 2018...

CVE-2018-21062

An issue was discovered on Samsung mobile devices with N7.x and O8.x software. When biometric authentication is disabled, an attacker can view Streams content e.g., a Gallery slideshow of a locked Secure Folder via a connection to an external device. The Samsung ID is SVE-2018-11766 August 2018...

CVE-2018-21068

An issue was discovered on Samsung mobile devices with O8.0 software. Execution of an application in a locked Secure Folder can occur without a password via a split screen. The Samsung ID is SVE-2018-11669 July 2018...