Windows Function Discovery SSDP Provider Information Disclosure Vulnerability

...

PT-2020-4881 · Microsoft · Windows Function Discovery Ssdp Provider +1

Name of the Vulnerable Software and Affected Versions: Windows Function Discovery SSDP Provider affected versions not specified Description: The issue is related to insufficient security mechanism implementation in the Windows Function Discovery SSDP Provider component of Windows operating system...

KLA12003 Multiple vulnerabilities in Microsoft Products (ESU)

Multiple vulnerabilities were found in Microsoft Products Extended Security Update. Malicious users can exploit these vulnerabilities to gain privileges, obtain sensitive information, execute arbitrary code, cause denial of service, spoof user interface, bypass security restrictions. Below is a...

The vulnerability of the Windows Function Discovery SSDP Provider component in Windows operating systems allows attackers to exploit their privileges.

The vulnerability of the Windows Function Discovery SSDP Provider in Windows operating systems is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow an attacker to enhance their privileges through a specially created application...

CVE-2020-1491

An elevation of privilege vulnerability exists in the way that the Windows Function Discovery Service handles objects in memory. An attacker who successfully exploited the vulnerability could execute code with elevated permissions. To exploit the vulnerability, a locally authenticated attacker...

CVE-2020-1491

An elevation of privilege vulnerability exists in the way that the Windows Function Discovery Service handles objects in memory. An attacker who successfully exploited the vulnerability could execute code with elevated permissions. To exploit the vulnerability, a locally authenticated attacker...

CVE-2020-0912

An elevation of privilege vulnerability exists when the Windows Function Discovery SSDP Provider improperly handles memory. To exploit this vulnerability, an attacker would first have to gain execution on the victim system. An attacker could then run a specially crafted application to elevate...

CVE-2020-0912

An elevation of privilege vulnerability exists when the Windows Function Discovery SSDP Provider improperly handles memory. To exploit this vulnerability, an attacker would first have to gain execution on the victim system. An attacker could then run a specially crafted application to elevate...

Privilege escalation

An elevation of privilege vulnerability exists when the Windows Function Discovery SSDP Provider improperly handles memory. To exploit this vulnerability, an attacker would first have to gain execution on the victim system. An attacker could then run a specially crafted application to elevate...

Privilege escalation

An elevation of privilege vulnerability exists in the way that the Windows Function Discovery Service handles objects in memory. An attacker who successfully exploited the vulnerability could execute code with elevated permissions. To exploit the vulnerability, a locally authenticated attacker...

CVE-2020-1491

Technical details about CVE-2020-1491 are not publicly provided in the supplied documents. Monitor for updates from official advisories.

CVE-2020-0912

Technical details about CVE-2020-0912 are not provided in the supplied documents. No affected product/version is specified beyond a generic memory-handling issue. Monitor official sources for updates.

CVE-2020-0912 Windows Function Discovery SSDP Provider Elevation of Privilege Vulnerability

...

CVE-2020-0912: Undefined Security Weakness

An elevation of privilege vulnerability exists when the Windows Function Discovery SSDP Provider improperly handles memory. To exploit this vulnerability, an attacker would first have to gain execution on the victim system. An attacker could then run a specially crafted application to elevate...

CVE-2020-1491: Undefined Security Weakness

An elevation of privilege vulnerability exists in the way that the Windows Function Discovery Service handles objects in memory. An attacker who successfully exploited the vulnerability could execute code with elevated permissions. To exploit the vulnerability, a locally authenticated attacker...

Microsoft Windows/Windows Server Elevation of Privilege Vulnerability (CNVD-2021-68737)

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation USA, Microsoft Windows is an operating system for personal devices, and Microsoft Windows Server is a server operating system. An elevation of privilege vulnerability exists in Microsoft Windows/Windows...

Windows Function Discovery SSDP Provider Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists when the Windows Function Discovery SSDP Provider improperly handles memory. To exploit this vulnerability, an attacker would first have to gain execution on the victim system. An attacker could then run a specially crafted application to elevate...

Windows Function Discovery Service Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists in the way that the Windows Function Discovery Service handles objects in memory. An attacker who successfully exploited the vulnerability could execute code with elevated permissions. To exploit the vulnerability, a locally authenticated attacker...

PT-2020-4149 · Microsoft · Windows Function Discovery Service +1

Name of the Vulnerable Software and Affected Versions: Windows Function Discovery Service affected versions not specified Description: The issue is related to errors in privilege management within the Windows Function Discovery Service, allowing an attacker to potentially elevate their privileges...

KB4577070: Windows Server 2008 September 2020 Security Update

The remote Windows host is missing security update 4577070 or cumulative update 4577064. It is, therefore, affected by multiple vulnerabilities : - An elevation of privilege vulnerability exists when the Windows RSoP Service Application improperly handles memory. CVE-2020-0648 - An elevation of...