The vulnerability of the chkstat tool for checking and installing access rights for files on SUSE Linux Enterprise Server allows a perpetrator to increase their privileges.

The vulnerability of the chkstat tool for checking and setting access rights for files in SUSE Linux Enterprise Server stems from an incorrect definition of the link before accessing the file. Exploiting this vulnerability could allow attackers to increase their privileges...

The vulnerability of the Cisco IOS XE operating system’s web management infrastructure, related to errors in processing input data, allows attackers to gain access to protected information or cause service interruptions.

The vulnerability of the Web management infrastructure of the Cisco IOS XE operating system is related to errors in processing input data. Exploiting this vulnerability can allow a malicious actor to gain access to protected information or cause service failures...

The vulnerability of Windows Network Connections on operating systems allows attackers to increase their privileges.

The vulnerability of Windows Network Connections in operating systems is related to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to increase their privileges...

Vulnerability of Microsoft Graphics Components of the Windows operating system, allowing a hacker to execute arbitrary code

The vulnerability of Microsoft Graphics Components in the Windows operating system is related to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

The vulnerability of the Windows operating system’s kernel, which allows a hacker to increase their privileges

The vulnerability of the Windows operating system’s kernel is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to enhance their privileges through a specially created application...

The vulnerability of the win32k component in Windows operating systems, which allows a hacker to increase their privileges

The vulnerability of the win32k component in Windows operating systems is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to enhance their privileges through a specially created application...

The vulnerability of the Windows operating system’s DNS server, related to errors in handling DNS requests, allows a hacker to cause a service failure.

The vulnerability of the Windows operating system’s DNS server is related to errors in handling DNS requests. Exploiting this vulnerability can allow a malicious actor to cause service interruptions through a specially crafted DNS request...

CVE-2020-25788

An issue was discovered in Tiny Tiny RSS aka tt-rss before 2020-09-16. imgproxy in plugins/afproxyhttp/init.php mishandles $REQUEST"url" in an error message...

USN-4519-1 pulseaudio vulnerability

Ratchanan Srirattanamet discovered that an Ubuntu-specific patch caused PulseAudio to incorrectly handle memory under certain error conditions in the Bluez 5 module. An attacker could use this issue to cause PulseAudio to crash, resulting in a denial of service, or possibly execute arbitrary code...

Mozilla Rust rand_core number handling error vulnerability

Rust is a general-purpose, compiled programming language from the Mozilla Foundation. A number handling error vulnerability exists in Mozilla Rust versions prior to 0.4.2 in randcore, which arises from an error in the handling of bytes converted to integers, and can be exploited to execute...

PT-2020-4044 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to errors in handling objects in memory by the win32k component of Windows operating systems. This could allow an attacker to elevate their privileges using a specially...

The vulnerability of Windows CDP user components in the Windows operating system allows attackers to escalate their privileges.

The vulnerability of Windows CDP user components in the Windows operating system is related to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to enhance their privileges by running a specially created application...

The vulnerability of the dnsrslvr.dll library in the Windows operating system allows a hacker to increase their privileges.

The vulnerability of the dnsrslvr.dll library in the Windows operating system is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to enhance their privileges through a specially created application...

Vulnerability of the Microsoft Graphics component in the Windows operating system, allowing a hacker to execute arbitrary code

The vulnerability of the Microsoft Graphics component in the Windows operating system is related to errors in object handling in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially crafted file...

The vulnerability of the Windows operating system’s kernel, which allows a hacker to disclose protected information

The vulnerability of the Windows operating system’s kernel is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to disclose sensitive information, which may lead to bypassing ASLR Address Space Randomization protection mechanisms, through a specially...

The vulnerability of Windows CDP user components in the Windows operating system, related to errors in memory object handling, allows attackers to exploit their privileges.

The vulnerability of Windows CDP user components in the Windows operating system is related to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to enhance their privileges by running a specially created application...

The vulnerability of the srmsvc.dll library in Windows operating systems, which allows attackers to escalate their privileges

The vulnerability of the srmsvc.dll library in Windows operating systems is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to gain increased privileges...

UBUNTU-CVE-2020-1547

An elevation of privilege vulnerability exists when the Windows Backup Engine improperly handles memory. To exploit this vulnerability, an attacker would first have to gain execution on the victim system. An attacker could then run a specially crafted application to elevate privileges. The securi...

PT-2020-3736 · Microsoft · Windows Ancillary Function Driver For Winsock +1

Name of the Vulnerable Software and Affected Versions: Windows Ancillary Function Driver for WinSock affected versions not specified Description: The issue is related to errors in memory object handling. Exploitation of this issue could allow an attacker to elevate their privileges using a...

PT-2020-3702 · Microsoft · Windows Runtime +1

Name of the Vulnerable Software and Affected Versions: Windows Runtime affected versions not specified Description: The issue is related to errors in handling objects in memory within the Windows Runtime component of the Windows operating system. Exploitation of this issue could allow an attacker...