310 matches found
The vulnerability of the Windows GDI interface on Windows operating systems allows attackers to disclose protected information.
The vulnerability of Windows GDI graphical device interfaces on Windows operating systems is related to errors in object handling in memory. Exploiting this vulnerability can allow a remote attacker to disclose sensitive information through a specially crafted document or web page...
The vulnerability of the Windows GDI interface on Windows operating systems allows attackers to disclose protected information.
The vulnerability of Windows GDI graphics device interfaces on Windows operating systems is related to errors in handling memory contents. Exploiting this vulnerability can allow an attacker to disclose protected information remotely...
The vulnerability of the Open Enclave SDK, a software development tool, is related to an error in object processing in memory, which allows a hacker to disclose sensitive information that is protected by this security measure.
The vulnerability of the Open Enclave SDK software development tools is related to an object handling error in memory. Exploiting this vulnerability can allow a remote attacker to gain access to protected information...
The vulnerability of the Windows GDI interface on Windows operating systems allows attackers to disclose protected information.
The vulnerability of Windows GDI graphics device interfaces on Windows operating systems is related to errors in handling memory contents. Exploiting this vulnerability can allow an attacker to disclose protected information remotely...
The vulnerability of the Microsoft JET Database Engine database driver on Windows operating systems, allowing a hacker to execute arbitrary code
The vulnerability of the Microsoft JET Database Engine database driver for Windows operating systems is related to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially created file...
The vulnerability of the Terminal Services component in Windows operating systems allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the Terminal Services component in Windows operating systems is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information through a specially created application...
Microsoft Office Access Connectivity Engine Input Validation Error Vulnerability (CNVD-2019-27309)
Microsoft Office is a U.S. Microsoft Microsoft company's office software suite of products. Common components of the product include Word, Excel, Access, Powerpoint, FrontPage, etc. Office Access Connectivity Engine is one of the database connection engine. A remote code execution vulnerability...
Microsoft Windows Win32k Elevation of Privilege Vulnerability (CNVD-2019-10043)
Windows is a set of operating systems developed by Microsoft Corporation in the U.S. Windows uses a graphical mode GUI. An elevation of privilege vulnerability exists in Microsoft Windows. The vulnerability stems from a failure of the Win32k component to properly handle objects in memory. An...
CVE-2013-2807
CVE-2013-2807 affects Rockwell Automation RSLinx Enterprise (LogReceiver.exe) across CPR9 to CPR9-SR6. The vulnerability stems from improper input handling for the Record Data Size field, enabling an oversized Datagram on UDP port 4444 that causes the service to undersize Total Record Size, trigg...
The vulnerability of the Internet Explorer browser’s script handler allows a hacker to execute arbitrary code.
The vulnerability of the Internet Explorer browser’s script handler exists due to errors in memory object handling. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of Visual Studio Code’s source editor, related to a bug in file handling after opening a project, allows attackers to modify file access rights and execute arbitrary code.
The vulnerability of Visual Studio Code’s source editor is related to a error in variable handling after a project is opened. Exploiting this vulnerability could allow an attacker to modify file access rights and execute arbitrary code...
The vulnerability of the Microsoft Office Access Connectivity Engine component in Microsoft Office and Office 365 programs allows a hacker to execute arbitrary code.
The vulnerability of the Microsoft Office Access Connectivity Engine component in Microsoft Office and Office 365 programs is related to errors in object handling in memory. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code using a specially created file...
The vulnerability of the Microsoft Windows operating system’s kernel, which allows a hacker to disclose protected information
The vulnerability of the Microsoft Windows operating system exists due to errors in memory object handling. Exploiting this vulnerability can allow an attacker to disclose sensitive information through a specially created application...
The vulnerability of the Microsoft JET Database Engine database driver on the Windows operating system allows a hacker to execute arbitrary code.
The vulnerability of the Microsoft JET Database Engine database driver for the Windows operating system exists due to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially created file...
The vulnerability of the JavaScript script handler ChakraCore in the Microsoft Edge browser allows a hacker to execute arbitrary code.
The vulnerability of the JavaScript script handler ChakraCore in the Microsoft Edge browser exists due to errors in memory object handling. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
DEBIAN-CVE-2018-18343
Incorrect handing of paths leading to a use after free in Skia in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...
The vulnerability of the Win32k component of the Windows operating system allows a hacker to increase their privileges and execute arbitrary code in kernel mode.
The vulnerability of the Win32k component of the Windows operating system is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to enhance their privileges and execute arbitrary code in kernel mode through a specially created application...
The vulnerability of the JavaScript script handler ChakraCore in browsers Internet Explorer and Microsoft Edge allows a hacker to disclose protected information.
The vulnerability of the JavaScript script handler ChakraCore in browsers Internet Explorer and Microsoft Edge is related to errors in processing objects in memory. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information through a specially crafted web page...
Foxit Reader TextBox Validate Use-After-Free Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...
The vulnerability of the JavaScript script handler ChakraCore in Microsoft Edge and Internet Explorer allows a perpetrator to execute arbitrary code.
The vulnerability of the JavaScript script handler ChakraCore in Microsoft Edge and Internet Explorer is related to errors in memory object handling. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using specially crafted web pages, applications, or Microsoft Offi...